Skip to content

Commit 2940bb3

Browse files
feat: update AWS API models
1 parent 719fd19 commit 2940bb3

File tree

2 files changed

+42
-8
lines changed

2 files changed

+42
-8
lines changed

codegen/sdk/aws-models/acm-pca.json

Lines changed: 30 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1381,7 +1381,7 @@
13811381
"min": 5,
13821382
"max": 200
13831383
},
1384-
"smithy.api#pattern": "^arn:[\\w+=/,.@-]+:[\\w+=/,.@-]+:[\\w+=/,.@-]*:[0-9]*:[\\w+=,.@-]+(/[\\w+=,.@-]+)*$"
1384+
"smithy.api#pattern": "^arn:[\\w+=/,.@-]+:acm-pca:[\\w+=/,.@-]*:[0-9]*:[\\w+=,.@-]+(/[\\w+=,.@-]+)*$"
13851385
}
13861386
},
13871387
"com.amazonaws.acmpca#AuditReportId": {
@@ -2026,10 +2026,32 @@
20262026
"traits": {
20272027
"smithy.api#documentation": "<p>Determines whether the CRL will be publicly readable or privately held in the CRL\n\t\t\tAmazon S3 bucket. If you choose PUBLIC_READ, the CRL will be accessible over the public\n\t\t\tinternet. If you choose BUCKET_OWNER_FULL_CONTROL, only the owner of the CRL S3 bucket\n\t\t\tcan access the CRL, and your PKI clients may need an alternative method of access. </p>\n <p>If no value is specified, the default is <code>PUBLIC_READ</code>.</p>\n <p>\n <i>Note:</i> This default can cause CA creation to fail in some\n\t\t\tcircumstances. If you have have enabled the Block Public Access (BPA) feature in your S3\n\t\t\taccount, then you must specify the value of this parameter as\n\t\t\t\t<code>BUCKET_OWNER_FULL_CONTROL</code>, and not doing so results in an error. If you\n\t\t\thave disabled BPA in S3, then you can specify either\n\t\t\t\t<code>BUCKET_OWNER_FULL_CONTROL</code> or <code>PUBLIC_READ</code> as the\n\t\t\tvalue.</p>\n <p>For more information, see <a href=\"https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-bpa\">Blocking public access to the S3\n\t\t\t\tbucket</a>.</p>"
20282028
}
2029+
},
2030+
"CrlDistributionPointExtensionConfiguration": {
2031+
"target": "com.amazonaws.acmpca#CrlDistributionPointExtensionConfiguration",
2032+
"traits": {
2033+
"smithy.api#documentation": "<p>Configures the behavior of the CRL Distribution Point extension for certificates issued by your certificate authority. If this field is not provided, then the CRl Distribution Point Extension will be present and contain the default CRL URL.</p>"
2034+
}
20292035
}
20302036
},
20312037
"traits": {
2032-
"smithy.api#documentation": "<p>Contains configuration information for a certificate revocation list (CRL). Your\n\t\t\tprivate certificate authority (CA) creates base CRLs. Delta CRLs are not supported. You\n\t\t\tcan enable CRLs for your new or an existing private CA by setting the <b>Enabled</b> parameter to <code>true</code>. Your private CA\n\t\t\twrites CRLs to an S3 bucket that you specify in the <b>S3BucketName</b> parameter. You can hide the name of your bucket by\n\t\t\tspecifying a value for the <b>CustomCname</b> parameter. Your\n\t\t\tprivate CA copies the CNAME or the S3 bucket name to the <b>CRL\n\t\t\t\tDistribution Points</b> extension of each certificate it issues. Your S3\n\t\t\tbucket policy must give write permission to Amazon Web Services Private CA. </p>\n <p>Amazon Web Services Private CA assets that are stored in Amazon S3 can be protected with encryption. \n For more information, see <a href=\"https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#crl-encryption\">Encrypting Your\n\t\t\tCRLs</a>.</p>\n <p>Your private CA uses the value in the <b>ExpirationInDays</b> parameter to calculate the <b>nextUpdate</b> field in the CRL. The CRL is refreshed prior to a\n\t\t\tcertificate's expiration date or when a certificate is revoked. When a certificate is\n\t\t\trevoked, it appears in the CRL until the certificate expires, and then in one additional\n\t\t\tCRL after expiration, and it always appears in the audit report.</p>\n <p>A CRL is typically updated approximately 30 minutes after a certificate \n\tis revoked. If for any reason a CRL update fails, Amazon Web Services Private CA makes further attempts \n\tevery 15 minutes.</p>\n <p>CRLs contain the following fields:</p>\n <ul>\n <li>\n <p>\n <b>Version</b>: The current version number defined\n\t\t\t\t\tin RFC 5280 is V2. The integer value is 0x1. </p>\n </li>\n <li>\n <p>\n <b>Signature Algorithm</b>: The name of the\n\t\t\t\t\talgorithm used to sign the CRL.</p>\n </li>\n <li>\n <p>\n <b>Issuer</b>: The X.500 distinguished name of your\n\t\t\t\t\tprivate CA that issued the CRL.</p>\n </li>\n <li>\n <p>\n <b>Last Update</b>: The issue date and time of this\n\t\t\t\t\tCRL.</p>\n </li>\n <li>\n <p>\n <b>Next Update</b>: The day and time by which the\n\t\t\t\t\tnext CRL will be issued.</p>\n </li>\n <li>\n <p>\n <b>Revoked Certificates</b>: List of revoked\n\t\t\t\t\tcertificates. Each list item contains the following information.</p>\n <ul>\n <li>\n <p>\n <b>Serial Number</b>: The serial number, in\n\t\t\t\t\t\t\thexadecimal format, of the revoked certificate.</p>\n </li>\n <li>\n <p>\n <b>Revocation Date</b>: Date and time the\n\t\t\t\t\t\t\tcertificate was revoked.</p>\n </li>\n <li>\n <p>\n <b>CRL Entry Extensions</b>: Optional\n\t\t\t\t\t\t\textensions for the CRL entry.</p>\n <ul>\n <li>\n <p>\n <b>X509v3 CRL Reason Code</b>:\n\t\t\t\t\t\t\t\t\tReason the certificate was revoked.</p>\n </li>\n </ul>\n </li>\n </ul>\n </li>\n <li>\n <p>\n <b>CRL Extensions</b>: Optional extensions for the\n\t\t\t\t\tCRL.</p>\n <ul>\n <li>\n <p>\n <b>X509v3 Authority Key Identifier</b>:\n\t\t\t\t\t\t\tIdentifies the public key associated with the private key used to sign\n\t\t\t\t\t\t\tthe certificate.</p>\n </li>\n <li>\n <p>\n <b>X509v3 CRL Number:</b>: Decimal sequence\n\t\t\t\t\t\t\tnumber for the CRL.</p>\n </li>\n </ul>\n </li>\n <li>\n <p>\n <b>Signature Algorithm</b>: Algorithm used by your\n\t\t\t\t\tprivate CA to sign the CRL.</p>\n </li>\n <li>\n <p>\n <b>Signature Value</b>: Signature computed over the\n\t\t\t\t\tCRL.</p>\n </li>\n </ul>\n <p>Certificate revocation lists created by Amazon Web Services Private CA are DER-encoded. You can use the\n\t\t\tfollowing OpenSSL command to list a CRL.</p>\n <p>\n <code>openssl crl -inform DER -text -in <i>crl_path</i>\n\t\t\t-noout</code>\n </p>\n <p>For more information, see <a href=\"https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html\">Planning a certificate revocation list\n\t\t\t\t(CRL)</a> in the <i>Amazon Web Services Private Certificate Authority User Guide</i>\n </p>"
2038+
"smithy.api#documentation": "<p>Contains configuration information for a certificate revocation list (CRL). Your\n\t\t\tprivate certificate authority (CA) creates base CRLs. Delta CRLs are not supported. You\n\t\t\tcan enable CRLs for your new or an existing private CA by setting the <b>Enabled</b> parameter to <code>true</code>. Your private CA\n\t\t\twrites CRLs to an S3 bucket that you specify in the <b>S3BucketName</b> parameter. You can hide the name of your bucket by\n\t\t\tspecifying a value for the <b>CustomCname</b> parameter. Your\n\t\t\tprivate CA by default copies the CNAME or the S3 bucket name to the <b>CRL\n\t\t\t\tDistribution Points</b> extension of each certificate it issues. If you want to configure\n\t\t\t\tthis default behavior to be something different, you can set the <b>CrlDistributionPointExtensionConfiguration</b> \n\t\t\t\tparameter. Your S3\n\t\t\tbucket policy must give write permission to Amazon Web Services Private CA. </p>\n <p>Amazon Web Services Private CA assets that are stored in Amazon S3 can be protected with encryption. \n For more information, see <a href=\"https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#crl-encryption\">Encrypting Your\n\t\t\tCRLs</a>.</p>\n <p>Your private CA uses the value in the <b>ExpirationInDays</b> parameter to calculate the <b>nextUpdate</b> field in the CRL. The CRL is refreshed prior to a\n\t\t\tcertificate's expiration date or when a certificate is revoked. When a certificate is\n\t\t\trevoked, it appears in the CRL until the certificate expires, and then in one additional\n\t\t\tCRL after expiration, and it always appears in the audit report.</p>\n <p>A CRL is typically updated approximately 30 minutes after a certificate \n\tis revoked. If for any reason a CRL update fails, Amazon Web Services Private CA makes further attempts \n\tevery 15 minutes.</p>\n <p>CRLs contain the following fields:</p>\n <ul>\n <li>\n <p>\n <b>Version</b>: The current version number defined\n\t\t\t\t\tin RFC 5280 is V2. The integer value is 0x1. </p>\n </li>\n <li>\n <p>\n <b>Signature Algorithm</b>: The name of the\n\t\t\t\t\talgorithm used to sign the CRL.</p>\n </li>\n <li>\n <p>\n <b>Issuer</b>: The X.500 distinguished name of your\n\t\t\t\t\tprivate CA that issued the CRL.</p>\n </li>\n <li>\n <p>\n <b>Last Update</b>: The issue date and time of this\n\t\t\t\t\tCRL.</p>\n </li>\n <li>\n <p>\n <b>Next Update</b>: The day and time by which the\n\t\t\t\t\tnext CRL will be issued.</p>\n </li>\n <li>\n <p>\n <b>Revoked Certificates</b>: List of revoked\n\t\t\t\t\tcertificates. Each list item contains the following information.</p>\n <ul>\n <li>\n <p>\n <b>Serial Number</b>: The serial number, in\n\t\t\t\t\t\t\thexadecimal format, of the revoked certificate.</p>\n </li>\n <li>\n <p>\n <b>Revocation Date</b>: Date and time the\n\t\t\t\t\t\t\tcertificate was revoked.</p>\n </li>\n <li>\n <p>\n <b>CRL Entry Extensions</b>: Optional\n\t\t\t\t\t\t\textensions for the CRL entry.</p>\n <ul>\n <li>\n <p>\n <b>X509v3 CRL Reason Code</b>:\n\t\t\t\t\t\t\t\t\tReason the certificate was revoked.</p>\n </li>\n </ul>\n </li>\n </ul>\n </li>\n <li>\n <p>\n <b>CRL Extensions</b>: Optional extensions for the\n\t\t\t\t\tCRL.</p>\n <ul>\n <li>\n <p>\n <b>X509v3 Authority Key Identifier</b>:\n\t\t\t\t\t\t\tIdentifies the public key associated with the private key used to sign\n\t\t\t\t\t\t\tthe certificate.</p>\n </li>\n <li>\n <p>\n <b>X509v3 CRL Number:</b>: Decimal sequence\n\t\t\t\t\t\t\tnumber for the CRL.</p>\n </li>\n </ul>\n </li>\n <li>\n <p>\n <b>Signature Algorithm</b>: Algorithm used by your\n\t\t\t\t\tprivate CA to sign the CRL.</p>\n </li>\n <li>\n <p>\n <b>Signature Value</b>: Signature computed over the\n\t\t\t\t\tCRL.</p>\n </li>\n </ul>\n <p>Certificate revocation lists created by Amazon Web Services Private CA are DER-encoded. You can use the\n\t\t\tfollowing OpenSSL command to list a CRL.</p>\n <p>\n <code>openssl crl -inform DER -text -in <i>crl_path</i>\n\t\t\t-noout</code>\n </p>\n <p>For more information, see <a href=\"https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html\">Planning a certificate revocation list\n\t\t\t\t(CRL)</a> in the <i>Amazon Web Services Private Certificate Authority User Guide</i>\n </p>"
2039+
}
2040+
},
2041+
"com.amazonaws.acmpca#CrlDistributionPointExtensionConfiguration": {
2042+
"type": "structure",
2043+
"members": {
2044+
"OmitExtension": {
2045+
"target": "com.amazonaws.acmpca#Boolean",
2046+
"traits": {
2047+
"smithy.api#default": null,
2048+
"smithy.api#documentation": "<p>Configures whether the CRL Distribution Point extension should be populated with the default URL to the CRL. If set to <code>true</code>, then the CDP extension will\n\t\t\tnot be present in any certificates issued by that CA unless otherwise specified through CSR or API passthrough.</p>\n <note>\n <p>Only set this if you have another way to distribute the CRL Distribution Points ffor certificates issued by your CA, such as the Matter Distributed Compliance Ledger</p>\n <p>This configuration cannot be enabled with a custom CNAME set.</p>\n </note>",
2049+
"smithy.api#required": {}
2050+
}
2051+
}
2052+
},
2053+
"traits": {
2054+
"smithy.api#documentation": "<p>Contains configuration information for the default behavior of the CRL Distribution Point (CDP) extension in certificates issued by your CA. This extension \n\t\t\tcontains a link to download the CRL, so you can check whether a certificate has been revoked. To choose whether you want this extension\n\t\t\tomitted or not in certificates issued by your CA, you can set the <b>OmitExtension</b> parameter.</p>"
20332055
}
20342056
},
20352057
"com.amazonaws.acmpca#CsrBlob": {
@@ -2094,7 +2116,7 @@
20942116
"traits": {
20952117
"smithy.api#length": {
20962118
"min": 1,
2097-
"max": 30
2119+
"max": 150
20982120
}
20992121
}
21002122
},
@@ -2135,7 +2157,7 @@
21352157
"traits": {
21362158
"smithy.api#length": {
21372159
"min": 1,
2138-
"max": 20
2160+
"max": 150
21392161
}
21402162
}
21412163
},
@@ -2682,7 +2704,7 @@
26822704
"traits": {
26832705
"smithy.api#length": {
26842706
"min": 1,
2685-
"max": 20
2707+
"max": 150
26862708
}
26872709
}
26882710
},
@@ -2730,7 +2752,7 @@
27302752
}
27312753
}
27322754
],
2733-
"minDelay": 3
2755+
"minDelay": 1
27342756
}
27352757
}
27362758
}
@@ -3411,7 +3433,7 @@
34113433
"MaxResults": {
34123434
"target": "com.amazonaws.acmpca#MaxResults",
34133435
"traits": {
3414-
"smithy.api#documentation": "<p>Use this parameter when paginating results to specify the maximum number of items to\n\t\t\treturn in the response on each page. If additional items exist beyond the number you\n\t\t\tspecify, the <code>NextToken</code> element is sent in the response. Use this\n\t\t\t\t<code>NextToken</code> value in a subsequent request to retrieve additional\n\t\t\titems.</p>"
3436+
"smithy.api#documentation": "<p>Use this parameter when paginating results to specify the maximum number of items to\n\t\t\treturn in the response on each page. If additional items exist beyond the number you\n\t\t\tspecify, the <code>NextToken</code> element is sent in the response. Use this\n\t\t\t\t<code>NextToken</code> value in a subsequent request to retrieve additional\n\t\t\titems.</p>\n <p>Although the maximum value is 1000, the action only returns a maximum of 100 items.</p>"
34153437
}
34163438
},
34173439
"ResourceOwner": {
@@ -3653,7 +3675,7 @@
36533675
"traits": {
36543676
"smithy.api#length": {
36553677
"min": 1,
3656-
"max": 500
3678+
"max": 43739
36573679
}
36583680
}
36593681
},

codegen/sdk/aws-models/lightsail.json

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1650,6 +1650,12 @@
16501650
"traits": {
16511651
"smithy.api#documentation": "<p>Virtual computer blueprints that are supported by a Lightsail for Research bundle.</p>\n <important>\n <p>This parameter only applies to Lightsail for Research resources.</p>\n </important>"
16521652
}
1653+
},
1654+
"publicIpv4AddressCount": {
1655+
"target": "com.amazonaws.lightsail#integer",
1656+
"traits": {
1657+
"smithy.api#documentation": "<p>An integer that indicates the public ipv4 address count included in the bundle, the value is either 0 or 1.</p>"
1658+
}
16531659
}
16541660
},
16551661
"traits": {
@@ -14117,6 +14123,12 @@
1411714123
"smithy.api#documentation": "<p>The public IP address of the Amazon Lightsail instance.</p>"
1411814124
}
1411914125
},
14126+
"ipv6Addresses": {
14127+
"target": "com.amazonaws.lightsail#Ipv6AddressList",
14128+
"traits": {
14129+
"smithy.api#documentation": "<p>The IPv6 address of the Amazon Lightsail instance.</p>"
14130+
}
14131+
},
1412014132
"password": {
1412114133
"target": "com.amazonaws.lightsail#string",
1412214134
"traits": {

0 commit comments

Comments
 (0)