capo-cloudfront 0.2.0__py3-none-any.whl

capo_cloudfront/types/update_trust_store_request.py

@@ -0,0 +1,53 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#UpdateTrustStoreRequest``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.boolean
+    import capo_cloudfront.types.ca_certificates_bundle_source
+    import capo_cloudfront.types.resource_id
+    import capo_cloudfront.types.string
+
+
+class UpdateTrustStoreRequest(TypedDict, closed=True):
+    id: "capo_cloudfront.types.resource_id.ResourceId"
+    """<p>The trust store ID.</p>"""
+    ca_certificates_bundle_source: NotRequired[
+        "capo_cloudfront.types.ca_certificates_bundle_source.CaCertificatesBundleSource"
+    ]
+    """<p>The CA certificates bundle source.</p>"""
+    use_client_certificate_ocsp_endpoint: NotRequired[
+        "capo_cloudfront.types.boolean.boolean"
+    ]
+    """<p>A Boolean that determines whether to use the CA certificate's OCSP endpoint to check certificate revocation status.</p>"""
+    if_match: "capo_cloudfront.types.string.string"
+    """<p>The current version (<code>ETag</code> value) of the trust store you are updating.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: UpdateTrustStoreRequest, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    if "ca_certificates_bundle_source" in value:
+        import capo_cloudfront.types.ca_certificates_bundle_source
+
+        capo_cloudfront.types.ca_certificates_bundle_source.serialize_xml(
+            value["ca_certificates_bundle_source"], el, "CaCertificatesBundleSource"
+        )
+
+
+def deserialize_xml(el: Element) -> UpdateTrustStoreRequest:
+    out: UpdateTrustStoreRequest = {}  # type: ignore[typeddict-item]
+    child_ca_certificates_bundle_source = el.find("CaCertificatesBundleSource")
+    if child_ca_certificates_bundle_source is not None:
+        import capo_cloudfront.types.ca_certificates_bundle_source
+
+        out["ca_certificates_bundle_source"] = (
+            capo_cloudfront.types.ca_certificates_bundle_source.deserialize_xml(
+                child_ca_certificates_bundle_source
+            )
+        )
+    return out

capo_cloudfront/types/update_trust_store_result.py

@@ -0,0 +1,41 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#UpdateTrustStoreResult``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.string
+    import capo_cloudfront.types.trust_store
+
+
+class UpdateTrustStoreResult(TypedDict, closed=True):
+    trust_store: NotRequired["capo_cloudfront.types.trust_store.TrustStore"]
+    """<p>The trust store.</p>"""
+    e_tag: NotRequired["capo_cloudfront.types.string.string"]
+    """<p>The version identifier for the current version of the trust store.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: UpdateTrustStoreResult, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    if "trust_store" in value:
+        import capo_cloudfront.types.trust_store
+
+        capo_cloudfront.types.trust_store.serialize_xml(
+            value["trust_store"], el, "TrustStore"
+        )
+
+
+def deserialize_xml(el: Element) -> UpdateTrustStoreResult:
+    out: UpdateTrustStoreResult = {}  # type: ignore[typeddict-item]
+    child_trust_store = el.find("TrustStore")
+    if child_trust_store is not None:
+        import capo_cloudfront.types.trust_store
+
+        out["trust_store"] = capo_cloudfront.types.trust_store.deserialize_xml(
+            child_trust_store
+        )
+    return out

capo_cloudfront/types/update_vpc_origin_request.py

@@ -0,0 +1,51 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#UpdateVpcOriginRequest``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+from capo_cloudfront.errors import DeserializationError
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.string
+    import capo_cloudfront.types.vpc_origin_endpoint_config
+
+
+class UpdateVpcOriginRequest(TypedDict, closed=True):
+    vpc_origin_endpoint_config: (
+        "capo_cloudfront.types.vpc_origin_endpoint_config.VpcOriginEndpointConfig"
+    )
+    """<p>The VPC origin endpoint configuration.</p>"""
+    id: "capo_cloudfront.types.string.string"
+    """<p>The VPC origin ID.</p>"""
+    if_match: "capo_cloudfront.types.string.string"
+    """<p>The VPC origin to update, if a match occurs.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: UpdateVpcOriginRequest, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    import capo_cloudfront.types.vpc_origin_endpoint_config
+
+    capo_cloudfront.types.vpc_origin_endpoint_config.serialize_xml(
+        value["vpc_origin_endpoint_config"], el, "VpcOriginEndpointConfig"
+    )
+
+
+def deserialize_xml(el: Element) -> UpdateVpcOriginRequest:
+    out: UpdateVpcOriginRequest = {}  # type: ignore[typeddict-item]
+    child_vpc_origin_endpoint_config = el.find("VpcOriginEndpointConfig")
+    if child_vpc_origin_endpoint_config is not None:
+        import capo_cloudfront.types.vpc_origin_endpoint_config
+
+        out["vpc_origin_endpoint_config"] = (
+            capo_cloudfront.types.vpc_origin_endpoint_config.deserialize_xml(
+                child_vpc_origin_endpoint_config
+            )
+        )
+    else:
+        raise DeserializationError(
+            "UpdateVpcOriginRequest.vpc_origin_endpoint_config required"
+        )
+    return out

capo_cloudfront/types/update_vpc_origin_result.py

@@ -0,0 +1,41 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#UpdateVpcOriginResult``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.string
+    import capo_cloudfront.types.vpc_origin
+
+
+class UpdateVpcOriginResult(TypedDict, closed=True):
+    vpc_origin: NotRequired["capo_cloudfront.types.vpc_origin.VpcOrigin"]
+    """<p>The VPC origin.</p>"""
+    e_tag: NotRequired["capo_cloudfront.types.string.string"]
+    """<p>The VPC origin ETag.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: UpdateVpcOriginResult, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    if "vpc_origin" in value:
+        import capo_cloudfront.types.vpc_origin
+
+        capo_cloudfront.types.vpc_origin.serialize_xml(
+            value["vpc_origin"], el, "VpcOrigin"
+        )
+
+
+def deserialize_xml(el: Element) -> UpdateVpcOriginResult:
+    out: UpdateVpcOriginResult = {}  # type: ignore[typeddict-item]
+    child_vpc_origin = el.find("VpcOrigin")
+    if child_vpc_origin is not None:
+        import capo_cloudfront.types.vpc_origin
+
+        out["vpc_origin"] = capo_cloudfront.types.vpc_origin.deserialize_xml(
+            child_vpc_origin
+        )
+    return out

capo_cloudfront/types/validation_token_detail.py

@@ -0,0 +1,46 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#ValidationTokenDetail``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+from capo_cloudfront.errors import DeserializationError
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.string
+
+
+class ValidationTokenDetail(TypedDict, closed=True):
+    domain: "capo_cloudfront.types.string.string"
+    """<p>The domain name.</p>"""
+    redirect_to: NotRequired["capo_cloudfront.types.string.string"]
+    """<p>The domain to redirect to.</p>"""
+    redirect_from: NotRequired["capo_cloudfront.types.string.string"]
+    """<p>The domain to redirect from.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: ValidationTokenDetail, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    SubElement(el, "Domain").text = str(value["domain"])
+    if "redirect_to" in value:
+        SubElement(el, "RedirectTo").text = str(value["redirect_to"])
+    if "redirect_from" in value:
+        SubElement(el, "RedirectFrom").text = str(value["redirect_from"])
+
+
+def deserialize_xml(el: Element) -> ValidationTokenDetail:
+    out: ValidationTokenDetail = {}  # type: ignore[typeddict-item]
+    child_domain = el.find("Domain")
+    if child_domain is not None:
+        out["domain"] = str(child_domain.text or "")
+    else:
+        raise DeserializationError("ValidationTokenDetail.domain required")
+    child_redirect_to = el.find("RedirectTo")
+    if child_redirect_to is not None:
+        out["redirect_to"] = str(child_redirect_to.text or "")
+    child_redirect_from = el.find("RedirectFrom")
+    if child_redirect_from is not None:
+        out["redirect_from"] = str(child_redirect_from.text or "")
+    return out

capo_cloudfront/types/validation_token_detail_list.py

@@ -0,0 +1,49 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#ValidationTokenDetailList``."""
+
+from typing import TYPE_CHECKING, TypeAlias
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.validation_token_detail
+
+ValidationTokenDetailList: TypeAlias = list[
+    "capo_cloudfront.types.validation_token_detail.ValidationTokenDetail"
+]
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: ValidationTokenDetailList, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    for item in value:
+        import capo_cloudfront.types.validation_token_detail
+
+        capo_cloudfront.types.validation_token_detail.serialize_xml(item, el, "member")
+
+
+def deserialize_xml(el: Element) -> ValidationTokenDetailList:
+    import capo_cloudfront.types.validation_token_detail
+
+    out: ValidationTokenDetailList = []
+    for child in el.findall("member"):
+        out.append(capo_cloudfront.types.validation_token_detail.deserialize_xml(child))
+    return out
+
+
+def serialize_xml_flat(
+    value: ValidationTokenDetailList, parent: Element, tag: str
+) -> None:
+    """Variant used by parent structures with ``@xmlFlattened`` on the referencing member. Items emitted directly under ``parent``."""
+    for item in value:
+        import capo_cloudfront.types.validation_token_detail
+
+        capo_cloudfront.types.validation_token_detail.serialize_xml(item, parent, tag)
+
+
+def deserialize_xml_flat(parent: Element, tag: str) -> ValidationTokenDetailList:
+    import capo_cloudfront.types.validation_token_detail
+
+    out: ValidationTokenDetailList = []
+    for child in parent.findall(tag):
+        out.append(capo_cloudfront.types.validation_token_detail.deserialize_xml(child))
+    return out

capo_cloudfront/types/validation_token_host.py

@@ -0,0 +1,27 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#ValidationTokenHost``."""
+
+from typing import Literal, TypeAlias, cast
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+ValidationTokenHost: TypeAlias = Literal[
+    "cloudfront",
+    "self-hosted",
+]
+
+
+# --- restXml ser/de ---
+def to_xml_text(value: ValidationTokenHost) -> str:
+    return value
+
+
+def from_xml_text(text: str) -> ValidationTokenHost:
+    return cast(ValidationTokenHost, text)
+
+
+def serialize_xml(value: ValidationTokenHost, parent: Element, tag: str) -> None:
+    SubElement(parent, tag).text = to_xml_text(value)
+
+
+def deserialize_xml(el: Element) -> ValidationTokenHost:
+    return from_xml_text(el.text or "")

capo_cloudfront/types/verify_dns_configuration_request.py

@@ -0,0 +1,41 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#VerifyDnsConfigurationRequest``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+from capo_cloudfront.errors import DeserializationError
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.string
+
+
+class VerifyDnsConfigurationRequest(TypedDict, closed=True):
+    domain: NotRequired["capo_cloudfront.types.string.string"]
+    """<p>The domain name that you're verifying.</p>"""
+    identifier: "capo_cloudfront.types.string.string"
+    """<p>The identifier of the distribution tenant. You can specify the ARN, ID, or name of the distribution tenant.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(
+    value: VerifyDnsConfigurationRequest, parent: Element, tag: str
+) -> None:
+    el = SubElement(parent, tag)
+    if "domain" in value:
+        SubElement(el, "Domain").text = str(value["domain"])
+    SubElement(el, "Identifier").text = str(value["identifier"])
+
+
+def deserialize_xml(el: Element) -> VerifyDnsConfigurationRequest:
+    out: VerifyDnsConfigurationRequest = {}  # type: ignore[typeddict-item]
+    child_domain = el.find("Domain")
+    if child_domain is not None:
+        out["domain"] = str(child_domain.text or "")
+    child_identifier = el.find("Identifier")
+    if child_identifier is not None:
+        out["identifier"] = str(child_identifier.text or "")
+    else:
+        raise DeserializationError("VerifyDnsConfigurationRequest.identifier required")
+    return out

capo_cloudfront/types/verify_dns_configuration_result.py

@@ -0,0 +1,44 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#VerifyDnsConfigurationResult``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.dns_configuration_list
+
+
+class VerifyDnsConfigurationResult(TypedDict, closed=True):
+    dns_configuration_list: NotRequired[
+        "capo_cloudfront.types.dns_configuration_list.DnsConfigurationList"
+    ]
+    """<p>The list of domain names, their statuses, and a description of each status.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(
+    value: VerifyDnsConfigurationResult, parent: Element, tag: str
+) -> None:
+    el = SubElement(parent, tag)
+    if "dns_configuration_list" in value:
+        import capo_cloudfront.types.dns_configuration_list
+
+        capo_cloudfront.types.dns_configuration_list.serialize_xml(
+            value["dns_configuration_list"], el, "DnsConfigurationList"
+        )
+
+
+def deserialize_xml(el: Element) -> VerifyDnsConfigurationResult:
+    out: VerifyDnsConfigurationResult = {}  # type: ignore[typeddict-item]
+    child_dns_configuration_list = el.find("DnsConfigurationList")
+    if child_dns_configuration_list is not None:
+        import capo_cloudfront.types.dns_configuration_list
+
+        out["dns_configuration_list"] = (
+            capo_cloudfront.types.dns_configuration_list.deserialize_xml(
+                child_dns_configuration_list
+            )
+        )
+    return out

capo_cloudfront/types/viewer_certificate.py

@@ -0,0 +1,121 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#ViewerCertificate``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.boolean
+    import capo_cloudfront.types.certificate_source
+    import capo_cloudfront.types.minimum_protocol_version
+    import capo_cloudfront.types.server_certificate_id
+    import capo_cloudfront.types.ssl_support_method
+    import capo_cloudfront.types.string
+
+
+class ViewerCertificate(TypedDict, closed=True):
+    cloud_front_default_certificate: NotRequired[
+        "capo_cloudfront.types.boolean.boolean"
+    ]
+    """<p>If the distribution uses the CloudFront domain name such as <code>d111111abcdef8.cloudfront.net</code>, set this field to <code>true</code>.</p> <p>If the distribution uses <code>Aliases</code> (alternate domain names or CNAMEs), set this field to <code>false</code> and specify values for the following fields:</p> <ul> <li> <p> <code>ACMCertificateArn</code> or <code>IAMCertificateId</code> (specify a value for one, not both)</p> </li> <li> <p> <code>MinimumProtocolVersion</code> </p> </li> <li> <p> <code>SSLSupportMethod</code> </p> </li> </ul>"""
+    iam_certificate_id: NotRequired[
+        "capo_cloudfront.types.server_certificate_id.ServerCertificateId"
+    ]
+    r"""<note> <p>This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas\">Unsupported features for SaaS Manager for Amazon CloudFront</a> in the <i>Amazon CloudFront Developer Guide</i>.</p> </note> <p>If the distribution uses <code>Aliases</code> (alternate domain names or CNAMEs) and the SSL/TLS certificate is stored in <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html\">Identity and Access Management (IAM)</a>, provide the ID of the IAM certificate.</p> <p>If you specify an IAM certificate ID, you must also specify values for <code>MinimumProtocolVersion</code> and <code>SSLSupportMethod</code>. </p>"""
+    acm_certificate_arn: NotRequired["capo_cloudfront.types.string.string"]
+    r"""<p>If the distribution uses <code>Aliases</code> (alternate domain names or CNAMEs) and the SSL/TLS certificate is stored in <a href=\"https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html\">Certificate Manager (ACM)</a>, provide the Amazon Resource Name (ARN) of the ACM certificate. CloudFront only supports ACM certificates in the US East (N. Virginia) Region (<code>us-east-1</code>).</p> <p>If you specify an ACM certificate ARN, you must also specify values for <code>MinimumProtocolVersion</code> and <code>SSLSupportMethod</code>.</p>"""
+    ssl_support_method: NotRequired[
+        "capo_cloudfront.types.ssl_support_method.SSLSupportMethod"
+    ]
+    r"""<p>If the distribution uses <code>Aliases</code> (alternate domain names or CNAMEs), specify which viewers the distribution accepts HTTPS connections from.</p> <ul> <li> <p> <code>sni-only</code> – The distribution accepts HTTPS connections from only viewers that support <a href=\"https://en.wikipedia.org/wiki/Server_Name_Indication\">server name indication (SNI)</a>. This is recommended. Most browsers and clients support SNI.</p> </li> <li> <p> <code>vip</code> – The distribution accepts HTTPS connections from all viewers including those that don't support SNI. This is not recommended, and results in additional monthly charges from CloudFront.</p> </li> <li> <p> <code>static-ip</code> - Do not specify this value unless your distribution has been enabled for this feature by the CloudFront team. If you have a use case that requires static IP addresses for a distribution, contact CloudFront through the <a href=\"https://console.aws.amazon.com/support/home\">Amazon Web Services Support Center</a>.</p> </li> </ul> <p>If the distribution uses the CloudFront domain name such as <code>d111111abcdef8.cloudfront.net</code>, don't set a value for this field.</p>"""
+    minimum_protocol_version: NotRequired[
+        "capo_cloudfront.types.minimum_protocol_version.MinimumProtocolVersion"
+    ]
+    r"""<p>If the distribution uses <code>Aliases</code> (alternate domain names or CNAMEs), specify the security policy that you want CloudFront to use for HTTPS connections with viewers. The security policy determines two settings:</p> <ul> <li> <p>The minimum SSL/TLS protocol that CloudFront can use to communicate with viewers.</p> </li> <li> <p>The ciphers that CloudFront can use to encrypt the content that it returns to viewers.</p> </li> </ul> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValues-security-policy\">Security Policy</a> and <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html#secure-connections-supported-ciphers\">Supported Protocols and Ciphers Between Viewers and CloudFront</a> in the <i>Amazon CloudFront Developer Guide</i>.</p> <note> <p>On the CloudFront console, this setting is called <b>Security Policy</b>.</p> </note> <p>When you're using SNI only (you set <code>SSLSupportMethod</code> to <code>sni-only</code>), you must specify <code>TLSv1</code> or higher.</p> <p>If the distribution uses the CloudFront domain name such as <code>d111111abcdef8.cloudfront.net</code> (you set <code>CloudFrontDefaultCertificate</code> to <code>true</code>), CloudFront automatically sets the security policy to <code>TLSv1</code> regardless of the value that you set here.</p>"""
+    certificate: NotRequired["capo_cloudfront.types.string.string"]
+    """<p>This field is deprecated. Use one of the following fields instead:</p> <ul> <li> <p> <code>ACMCertificateArn</code> </p> </li> <li> <p> <code>IAMCertificateId</code> </p> </li> <li> <p> <code>CloudFrontDefaultCertificate</code> </p> </li> </ul>"""
+    certificate_source: NotRequired[
+        "capo_cloudfront.types.certificate_source.CertificateSource"
+    ]
+    """<p>This field is deprecated. Use one of the following fields instead:</p> <ul> <li> <p> <code>ACMCertificateArn</code> </p> </li> <li> <p> <code>IAMCertificateId</code> </p> </li> <li> <p> <code>CloudFrontDefaultCertificate</code> </p> </li> </ul>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: ViewerCertificate, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    if "cloud_front_default_certificate" in value:
+        SubElement(el, "CloudFrontDefaultCertificate").text = (
+            "true" if value["cloud_front_default_certificate"] else "false"
+        )
+    if "iam_certificate_id" in value:
+        SubElement(el, "IAMCertificateId").text = str(value["iam_certificate_id"])
+    if "acm_certificate_arn" in value:
+        SubElement(el, "ACMCertificateArn").text = str(value["acm_certificate_arn"])
+    if "ssl_support_method" in value:
+        import capo_cloudfront.types.ssl_support_method
+
+        capo_cloudfront.types.ssl_support_method.serialize_xml(
+            value["ssl_support_method"], el, "SSLSupportMethod"
+        )
+    if "minimum_protocol_version" in value:
+        import capo_cloudfront.types.minimum_protocol_version
+
+        capo_cloudfront.types.minimum_protocol_version.serialize_xml(
+            value["minimum_protocol_version"], el, "MinimumProtocolVersion"
+        )
+    if "certificate" in value:
+        SubElement(el, "Certificate").text = str(value["certificate"])
+    if "certificate_source" in value:
+        import capo_cloudfront.types.certificate_source
+
+        capo_cloudfront.types.certificate_source.serialize_xml(
+            value["certificate_source"], el, "CertificateSource"
+        )
+
+
+def deserialize_xml(el: Element) -> ViewerCertificate:
+    out: ViewerCertificate = {}  # type: ignore[typeddict-item]
+    child_cloud_front_default_certificate = el.find("CloudFrontDefaultCertificate")
+    if child_cloud_front_default_certificate is not None:
+        out["cloud_front_default_certificate"] = (
+            child_cloud_front_default_certificate.text or ""
+        ).lower() == "true"
+    child_iam_certificate_id = el.find("IAMCertificateId")
+    if child_iam_certificate_id is not None:
+        out["iam_certificate_id"] = str(child_iam_certificate_id.text or "")
+    child_acm_certificate_arn = el.find("ACMCertificateArn")
+    if child_acm_certificate_arn is not None:
+        out["acm_certificate_arn"] = str(child_acm_certificate_arn.text or "")
+    child_ssl_support_method = el.find("SSLSupportMethod")
+    if child_ssl_support_method is not None:
+        import capo_cloudfront.types.ssl_support_method
+
+        out["ssl_support_method"] = (
+            capo_cloudfront.types.ssl_support_method.deserialize_xml(
+                child_ssl_support_method
+            )
+        )
+    child_minimum_protocol_version = el.find("MinimumProtocolVersion")
+    if child_minimum_protocol_version is not None:
+        import capo_cloudfront.types.minimum_protocol_version
+
+        out["minimum_protocol_version"] = (
+            capo_cloudfront.types.minimum_protocol_version.deserialize_xml(
+                child_minimum_protocol_version
+            )
+        )
+    child_certificate = el.find("Certificate")
+    if child_certificate is not None:
+        out["certificate"] = str(child_certificate.text or "")
+    child_certificate_source = el.find("CertificateSource")
+    if child_certificate_source is not None:
+        import capo_cloudfront.types.certificate_source
+
+        out["certificate_source"] = (
+            capo_cloudfront.types.certificate_source.deserialize_xml(
+                child_certificate_source
+            )
+        )
+    return out

capo_cloudfront/types/viewer_mtls_config.py

@@ -0,0 +1,57 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#ViewerMtlsConfig``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+if TYPE_CHECKING:
+    import capo_cloudfront.types.trust_store_config
+    import capo_cloudfront.types.viewer_mtls_mode
+
+
+class ViewerMtlsConfig(TypedDict, closed=True):
+    mode: "capo_cloudfront.types.viewer_mtls_mode.ViewerMtlsMode"
+    """<p>The viewer mTLS mode.</p>"""
+    trust_store_config: NotRequired[
+        "capo_cloudfront.types.trust_store_config.TrustStoreConfig"
+    ]
+    """<p>The trust store configuration associated with the viewer mTLS configuration.</p>"""
+
+
+# --- restXml ser/de ---
+def serialize_xml(value: ViewerMtlsConfig, parent: Element, tag: str) -> None:
+    el = SubElement(parent, tag)
+    import capo_cloudfront.types.viewer_mtls_mode
+
+    capo_cloudfront.types.viewer_mtls_mode.serialize_xml(
+        value.get("mode", "required"), el, "Mode"
+    )
+    if "trust_store_config" in value:
+        import capo_cloudfront.types.trust_store_config
+
+        capo_cloudfront.types.trust_store_config.serialize_xml(
+            value["trust_store_config"], el, "TrustStoreConfig"
+        )
+
+
+def deserialize_xml(el: Element) -> ViewerMtlsConfig:
+    out: ViewerMtlsConfig = {}  # type: ignore[typeddict-item]
+    child_mode = el.find("Mode")
+    if child_mode is not None:
+        import capo_cloudfront.types.viewer_mtls_mode
+
+        out["mode"] = capo_cloudfront.types.viewer_mtls_mode.deserialize_xml(child_mode)
+    else:
+        out["mode"] = "required"
+    child_trust_store_config = el.find("TrustStoreConfig")
+    if child_trust_store_config is not None:
+        import capo_cloudfront.types.trust_store_config
+
+        out["trust_store_config"] = (
+            capo_cloudfront.types.trust_store_config.deserialize_xml(
+                child_trust_store_config
+            )
+        )
+    return out

capo_cloudfront/types/viewer_mtls_mode.py

@@ -0,0 +1,28 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#ViewerMtlsMode``."""
+
+from typing import Literal, TypeAlias, cast
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+ViewerMtlsMode: TypeAlias = Literal[
+    "required",
+    "optional",
+    "passthrough",
+]
+
+
+# --- restXml ser/de ---
+def to_xml_text(value: ViewerMtlsMode) -> str:
+    return value
+
+
+def from_xml_text(text: str) -> ViewerMtlsMode:
+    return cast(ViewerMtlsMode, text)
+
+
+def serialize_xml(value: ViewerMtlsMode, parent: Element, tag: str) -> None:
+    SubElement(parent, tag).text = to_xml_text(value)
+
+
+def deserialize_xml(el: Element) -> ViewerMtlsMode:
+    return from_xml_text(el.text or "")

capo_cloudfront/types/viewer_protocol_policy.py

@@ -0,0 +1,28 @@
+"""Generated from Smithy shape ``com.amazonaws.cloudfront#ViewerProtocolPolicy``."""
+
+from typing import Literal, TypeAlias, cast
+
+from capo_cloudfront._protocol.xml import Element, SubElement
+
+ViewerProtocolPolicy: TypeAlias = Literal[
+    "allow-all",
+    "https-only",
+    "redirect-to-https",
+]
+
+
+# --- restXml ser/de ---
+def to_xml_text(value: ViewerProtocolPolicy) -> str:
+    return value
+
+
+def from_xml_text(text: str) -> ViewerProtocolPolicy:
+    return cast(ViewerProtocolPolicy, text)
+
+
+def serialize_xml(value: ViewerProtocolPolicy, parent: Element, tag: str) -> None:
+    SubElement(parent, tag).text = to_xml_text(value)
+
+
+def deserialize_xml(el: Element) -> ViewerProtocolPolicy:
+    return from_xml_text(el.text or "")