feat(client-cloudfront): Added new viewer security policy, TLSv1.3_2025, for CloudFront.

awstools · awstools · commit 100ddffaa456 · 2025-08-07T18:21:53.000Z
diff --git a/clients/client-cloudfront/src/commands/CopyDistributionCommand.ts b/clients/client-cloudfront/src/commands/CopyDistributionCommand.ts
@@ -368,7 +368,7 @@ export interface CopyDistributionCommandOutput extends CopyDistributionResult, _
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/CreateDistributionCommand.ts b/clients/client-cloudfront/src/commands/CreateDistributionCommand.ts
@@ -323,7 +323,7 @@ export interface CreateDistributionCommandOutput extends CreateDistributionResul
  *       IAMCertificateId: "STRING_VALUE",
  *       ACMCertificateArn: "STRING_VALUE",
  *       SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- *       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ *       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  *       Certificate: "STRING_VALUE",
  *       CertificateSource: "cloudfront" || "iam" || "acm",
  *     },
@@ -681,7 +681,7 @@ export interface CreateDistributionCommandOutput extends CreateDistributionResul
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/CreateDistributionWithTagsCommand.ts b/clients/client-cloudfront/src/commands/CreateDistributionWithTagsCommand.ts
@@ -324,7 +324,7 @@ export interface CreateDistributionWithTagsCommandOutput extends CreateDistribut
  *         IAMCertificateId: "STRING_VALUE",
  *         ACMCertificateArn: "STRING_VALUE",
  *         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- *         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ *         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  *         Certificate: "STRING_VALUE",
  *         CertificateSource: "cloudfront" || "iam" || "acm",
  *       },
@@ -691,7 +691,7 @@ export interface CreateDistributionWithTagsCommandOutput extends CreateDistribut
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/GetDistributionCommand.ts b/clients/client-cloudfront/src/commands/GetDistributionCommand.ts
@@ -364,7 +364,7 @@ export interface GetDistributionCommandOutput extends GetDistributionResult, __M
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/GetDistributionConfigCommand.ts b/clients/client-cloudfront/src/commands/GetDistributionConfigCommand.ts
@@ -327,7 +327,7 @@ export interface GetDistributionConfigCommandOutput extends GetDistributionConfi
  * //       IAMCertificateId: "STRING_VALUE",
  * //       ACMCertificateArn: "STRING_VALUE",
  * //       SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //       Certificate: "STRING_VALUE",
  * //       CertificateSource: "cloudfront" || "iam" || "acm",
  * //     },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsByAnycastIpListIdCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsByAnycastIpListIdCommand.ts
@@ -339,7 +339,7 @@ export interface ListDistributionsByAnycastIpListIdCommandOutput
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsByConnectionModeCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsByConnectionModeCommand.ts
@@ -339,7 +339,7 @@ export interface ListDistributionsByConnectionModeCommandOutput
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsByRealtimeLogConfigCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsByRealtimeLogConfigCommand.ts
@@ -340,7 +340,7 @@ export interface ListDistributionsByRealtimeLogConfigCommandOutput
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsByWebACLIdCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsByWebACLIdCommand.ts
@@ -334,7 +334,7 @@ export interface ListDistributionsByWebACLIdCommandOutput extends ListDistributi
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsCommand.ts
@@ -333,7 +333,7 @@ export interface ListDistributionsCommandOutput extends ListDistributionsResult,
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/UpdateDistributionCommand.ts b/clients/client-cloudfront/src/commands/UpdateDistributionCommand.ts
@@ -323,7 +323,7 @@ export interface UpdateDistributionCommandOutput extends UpdateDistributionResul
  *       IAMCertificateId: "STRING_VALUE",
  *       ACMCertificateArn: "STRING_VALUE",
  *       SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- *       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ *       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  *       Certificate: "STRING_VALUE",
  *       CertificateSource: "cloudfront" || "iam" || "acm",
  *     },
@@ -683,7 +683,7 @@ export interface UpdateDistributionCommandOutput extends UpdateDistributionResul
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/UpdateDistributionWithStagingConfigCommand.ts b/clients/client-cloudfront/src/commands/UpdateDistributionWithStagingConfigCommand.ts
@@ -371,7 +371,7 @@ export interface UpdateDistributionWithStagingConfigCommandOutput
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/models/models_0.ts b/clients/client-cloudfront/src/models/models_0.ts
@@ -2394,6 +2394,7 @@ export const MinimumProtocolVersion = {
   TLSv1_2_2018: "TLSv1.2_2018",
   TLSv1_2_2019: "TLSv1.2_2019",
   TLSv1_2_2021: "TLSv1.2_2021",
+  TLSv1_3_2025: "TLSv1.3_2025",
 } as const;
 
 /**
diff --git a/codegen/sdk-codegen/aws-models/cloudfront.json b/codegen/sdk-codegen/aws-models/cloudfront.json
@@ -16630,6 +16630,12 @@
           "traits": {
             "smithy.api#enumValue": "TLSv1.2_2021"
           }
+        },
+        "TLSv1_3_2025": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "TLSv1.3_2025"
+          }
         }
       }
     },
