This release adds support to upgrade the TLS version of the distribut…

…ion.
aws · Apr 1, 2024 · d28ae7f · d28ae7f
1 parent a145821
commit d28ae7f
Show file tree

Hide file tree

Showing 15 changed files with 368 additions and 5 deletions.
diff --git a/generator/ServiceModels/lightsail/lightsail-2016-11-28.api.json b/generator/ServiceModels/lightsail/lightsail-2016-11-28.api.json
@@ -3999,7 +3999,9 @@
         "cacheBehaviors":{"shape":"CacheBehaviorList"},
         "bundleId":{"shape":"string"},
         "ipAddressType":{"shape":"IpAddressType"},
-        "tags":{"shape":"TagList"}
+        "tags":{"shape":"TagList"},
+        "certificateName":{"shape":"ResourceName"},
+        "viewerMinimumTlsProtocolVersion":{"shape":"ViewerMinimumTlsProtocolVersionEnum"}
       }
     },
     "CreateDistributionResult":{
@@ -6058,7 +6060,8 @@
       "members":{
         "name":{"shape":"ResourceName"},
         "regionName":{"shape":"RegionName"},
-        "protocolPolicy":{"shape":"OriginProtocolPolicyEnum"}
+        "protocolPolicy":{"shape":"OriginProtocolPolicyEnum"},
+        "responseTimeout":{"shape":"integer"}
       }
     },
     "Instance":{
@@ -6396,7 +6399,8 @@
         "cacheBehaviors":{"shape":"CacheBehaviorList"},
         "ableToUpdateBundle":{"shape":"boolean"},
         "ipAddressType":{"shape":"IpAddressType"},
-        "tags":{"shape":"TagList"}
+        "tags":{"shape":"TagList"},
+        "viewerMinimumTlsProtocolVersion":{"shape":"string"}
       }
     },
     "LoadBalancer":{
@@ -6955,7 +6959,8 @@
         "name":{"shape":"ResourceName"},
         "resourceType":{"shape":"ResourceType"},
         "regionName":{"shape":"RegionName"},
-        "protocolPolicy":{"shape":"OriginProtocolPolicyEnum"}
+        "protocolPolicy":{"shape":"OriginProtocolPolicyEnum"},
+        "responseTimeout":{"shape":"integer"}
       }
     },
     "OriginProtocolPolicyEnum":{
@@ -8036,7 +8041,10 @@
         "defaultCacheBehavior":{"shape":"CacheBehavior"},
         "cacheBehaviorSettings":{"shape":"CacheSettings"},
         "cacheBehaviors":{"shape":"CacheBehaviorList"},
-        "isEnabled":{"shape":"boolean"}
+        "isEnabled":{"shape":"boolean"},
+        "viewerMinimumTlsProtocolVersion":{"shape":"ViewerMinimumTlsProtocolVersionEnum"},
+        "certificateName":{"shape":"ResourceName"},
+        "useDefaultCertificate":{"shape":"boolean"}
       }
     },
     "UpdateDistributionResult":{
@@ -8138,6 +8146,15 @@
         "operations":{"shape":"OperationList"}
       }
     },
+    "ViewerMinimumTlsProtocolVersionEnum":{
+      "type":"string",
+      "enum":[
+        "TLSv1.1_2016",
+        "TLSv1.2_2018",
+        "TLSv1.2_2019",
+        "TLSv1.2_2021"
+      ]
+    },
     "boolean":{"type":"boolean"},
     "double":{"type":"double"},
     "float":{"type":"float"},

diff --git a/generator/ServiceModels/lightsail/lightsail-2016-11-28.docs.json b/generator/ServiceModels/lightsail/lightsail-2016-11-28.docs.json
@@ -3810,6 +3810,7 @@
         "CreateDiskSnapshotRequest$diskSnapshotName": "<p>The name of the destination disk snapshot (<code>my-disk-snapshot</code>) based on the source disk.</p>",
         "CreateDiskSnapshotRequest$instanceName": "<p>The unique name of the source instance (<code>Amazon_Linux-512MB-Virginia-1</code>). When this is defined, a snapshot of the instance's system volume is created.</p> <note> <p>This parameter cannot be defined together with the <code>disk name</code> parameter. The <code>instance name</code> and <code>disk name</code> parameters are mutually exclusive.</p> </note>",
         "CreateDistributionRequest$distributionName": "<p>The name for the distribution.</p>",
+        "CreateDistributionRequest$certificateName": "<p>The name of the SSL/TLS certificate that you want to attach to the distribution.</p> <p>Use the <a href=\"https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetCertificates.html\">GetCertificates</a> action to get a list of certificate names that you can specify.</p>",
         "CreateGUISessionAccessDetailsRequest$resourceName": "<p>The resource name.</p>",
         "CreateGUISessionAccessDetailsResult$resourceName": "<p>The resource name.</p>",
         "CreateInstanceSnapshotRequest$instanceSnapshotName": "<p>The name for your new snapshot.</p>",
@@ -3944,6 +3945,7 @@
         "UntagResourceRequest$resourceName": "<p>The name of the resource from which you are removing a tag.</p>",
         "UpdateDistributionBundleRequest$distributionName": "<p>The name of the distribution for which to update the bundle.</p> <p>Use the <code>GetDistributions</code> action to get a list of distribution names that you can specify.</p>",
         "UpdateDistributionRequest$distributionName": "<p>The name of the distribution to update.</p> <p>Use the <code>GetDistributions</code> action to get a list of distribution names that you can specify.</p>",
+        "UpdateDistributionRequest$certificateName": "<p>The name of the SSL/TLS certificate that you want to attach to the distribution.</p> <p>Only certificates with a status of <code>ISSUED</code> can be attached to a distribution.</p> <p>Use the <a href=\"https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetCertificates.html\">GetCertificates</a> action to get a list of certificate names that you can specify.</p>",
         "UpdateInstanceMetadataOptionsRequest$instanceName": "<p>The name of the instance for which to update metadata parameters.</p>",
         "UpdateLoadBalancerAttributeRequest$loadBalancerName": "<p>The name of the load balancer that you want to modify (<code>my-load-balancer</code>.</p>",
         "UpdateRelationalDatabaseParametersRequest$relationalDatabaseName": "<p>The name of your database for which to update parameters.</p>",
@@ -4504,6 +4506,13 @@
       "refs": {
       }
     },
+    "ViewerMinimumTlsProtocolVersionEnum": {
+      "base": null,
+      "refs": {
+        "CreateDistributionRequest$viewerMinimumTlsProtocolVersion": "<p>The minimum TLS protocol version for the SSL/TLS certificate.</p>",
+        "UpdateDistributionRequest$viewerMinimumTlsProtocolVersion": "<p>Use this parameter to update the minimum TLS protocol version for the SSL/TLS certificate that's attached to the distribution.</p>"
+      }
+    },
     "boolean": {
       "base": null,
       "refs": {
@@ -4571,6 +4580,7 @@
         "StopInstanceRequest$force": "<p>When set to <code>True</code>, forces a Lightsail instance that is stuck in a <code>stopping</code> state to stop.</p> <important> <p>Only use the <code>force</code> parameter if your instance is stuck in the <code>stopping</code> state. In any other state, your instance should stop normally without adding this parameter to your API request.</p> </important>",
         "UpdateContainerServiceRequest$isDisabled": "<p>A Boolean value to indicate whether the container service is disabled.</p>",
         "UpdateDistributionRequest$isEnabled": "<p>Indicates whether to enable the distribution.</p>",
+        "UpdateDistributionRequest$useDefaultCertificate": "<p>Indicates whether the default SSL/TLS certificate is attached to the distribution. The default value is <code>true</code>. When <code>true</code>, the distribution uses the default domain name such as <code>d111111abcdef8.cloudfront.net</code>.</p> <p> Set this value to <code>false</code> to attach a new certificate to the distribution.</p>",
         "UpdateRelationalDatabaseRequest$rotateMasterUserPassword": "<p>When <code>true</code>, the master user password is changed to a new strong password generated by Lightsail.</p> <p>Use the <code>get relational database master user password</code> operation to get the new password.</p>",
         "UpdateRelationalDatabaseRequest$enableBackupRetention": "<p>When <code>true</code>, enables automated backup retention for your database.</p> <p>Updates are applied during the next maintenance window because this can result in an outage.</p>",
         "UpdateRelationalDatabaseRequest$disableBackupRetention": "<p>When <code>true</code>, disables automated backup retention for your database.</p> <p>Disabling backup retention deletes all automated database backups. Before disabling this, you may want to create a snapshot of your database using the <code>create relational database snapshot</code> operation.</p> <p>Updates are applied during the next maintenance window because this can result in an outage.</p>",
@@ -4640,12 +4650,14 @@
         "DistributionBundle$transferPerMonthInGb": "<p>The monthly network transfer quota of the bundle.</p>",
         "EndpointRequest$containerPort": "<p>The port of the container to which traffic is forwarded to.</p>",
         "GetRelationalDatabaseEventsRequest$durationInMinutes": "<p>The number of minutes in the past from which to retrieve events. For example, to get all events from the past 2 hours, enter 120.</p> <p>Default: <code>60</code> </p> <p>The minimum is 1 and the maximum is 14 days (20160 minutes).</p>",
+        "InputOrigin$responseTimeout": "<p>The amount of time, in seconds, that the distribution waits for a response after forwarding a request to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don't specify otherwise) is 30 seconds.</p>",
         "InstanceHardware$cpuCount": "<p>The number of vCPUs the instance has.</p>",
         "InstanceMetadataOptions$httpPutResponseHopLimit": "<p>The desired HTTP PUT response hop limit for instance metadata requests. A larger number means that the instance metadata requests can travel farther.</p>",
         "InstanceSnapshot$sizeInGb": "<p>The size in GB of the SSD.</p>",
         "InstanceState$code": "<p>The status code for the instance.</p>",
         "LoadBalancer$instancePort": "<p>The port where the load balancer will direct traffic to your Lightsail instances. For HTTP traffic, it's port 80. For HTTPS traffic, it's port 443.</p>",
         "MonthlyTransfer$gbPerMonthAllocated": "<p>The amount allocated per month (in GB).</p>",
+        "Origin$responseTimeout": "<p>The amount of time, in seconds, that the distribution waits for a response after forwarding a request to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don't specify otherwise) is 30 seconds.</p>",
         "PutAlarmRequest$evaluationPeriods": "<p>The number of most recent periods over which data is compared to the specified threshold. If you are setting an \"M out of N\" alarm, this value (<code>evaluationPeriods</code>) is the N.</p> <p>If you are setting an alarm that requires that a number of consecutive data points be breaching to trigger the alarm, this value specifies the rolling period of time in which data points are evaluated.</p> <p>Each evaluation period is five minutes long. For example, specify an evaluation period of 24 to evaluate a metric over a rolling period of two hours.</p> <p>You can specify a minimum valuation period of 1 (5 minutes), and a maximum evaluation period of 288 (24 hours).</p>",
         "PutAlarmRequest$datapointsToAlarm": "<p>The number of data points that must be not within the specified threshold to trigger the alarm. If you are setting an \"M out of N\" alarm, this value (<code>datapointsToAlarm</code>) is the M.</p>",
         "RelationalDatabaseBundle$diskSizeInGb": "<p>The size of the disk for the database bundle.</p>",
@@ -4855,6 +4867,7 @@
         "LightsailDistribution$domainName": "<p>The domain name of the distribution.</p>",
         "LightsailDistribution$bundleId": "<p>The ID of the bundle currently applied to the distribution.</p>",
         "LightsailDistribution$originPublicDNS": "<p>The public DNS of the origin.</p>",
+        "LightsailDistribution$viewerMinimumTlsProtocolVersion": "<p>The minimum TLS protocol version that the distribution can use to communicate with viewers.</p>",
         "LoadBalancer$supportCode": "<p>The support code. Include this code in your email to support when you have questions about your Lightsail load balancer. This code enables our support team to look up your Lightsail information more easily.</p>",
         "LoadBalancerConfigurationOptions$value": null,
         "LoadBalancerTlsCertificate$supportCode": "<p>The support code. Include this code in your email to support when you have questions about your Lightsail load balancer or SSL/TLS certificate. This code enables our support team to look up your Lightsail information more easily.</p>",

diff --git a/generator/ServiceModels/lightsail/lightsail-2016-11-28.normal.json b/generator/ServiceModels/lightsail/lightsail-2016-11-28.normal.json
@@ -5153,6 +5153,14 @@
         "tags":{
           "shape":"TagList",
           "documentation":"<p>The tag keys and optional values to add to the distribution during create.</p> <p>Use the <code>TagResource</code> action to tag a resource after it's created.</p>"
+        },
+        "certificateName":{
+          "shape":"ResourceName",
+          "documentation":"<p>The name of the SSL/TLS certificate that you want to attach to the distribution.</p> <p>Use the <a href=\"https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetCertificates.html\">GetCertificates</a> action to get a list of certificate names that you can specify.</p>"
+        },
+        "viewerMinimumTlsProtocolVersion":{
+          "shape":"ViewerMinimumTlsProtocolVersionEnum",
+          "documentation":"<p>The minimum TLS protocol version for the SSL/TLS certificate.</p>"
         }
       }
     },
@@ -8740,6 +8748,10 @@
         "protocolPolicy":{
           "shape":"OriginProtocolPolicyEnum",
           "documentation":"<p>The protocol that your Amazon Lightsail distribution uses when establishing a connection with your origin to pull content.</p>"
+        },
+        "responseTimeout":{
+          "shape":"integer",
+          "documentation":"<p>The amount of time, in seconds, that the distribution waits for a response after forwarding a request to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don't specify otherwise) is 30 seconds.</p>"
         }
       },
       "documentation":"<p>Describes the origin resource of an Amazon Lightsail content delivery network (CDN) distribution.</p> <p>An origin can be a Lightsail instance, bucket, container service, or load balancer. A distribution pulls content from an origin, caches it, and serves it to viewers via a worldwide network of edge servers.</p>"
@@ -9447,6 +9459,10 @@
         "tags":{
           "shape":"TagList",
           "documentation":"<p>The tag keys and optional values for the resource. For more information about tags in Lightsail, see the <a href=\"https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-tags\">Amazon Lightsail Developer Guide</a>.</p>"
+        },
+        "viewerMinimumTlsProtocolVersion":{
+          "shape":"string",
+          "documentation":"<p>The minimum TLS protocol version that the distribution can use to communicate with viewers.</p>"
         }
       },
       "documentation":"<p>Describes an Amazon Lightsail content delivery network (CDN) distribution.</p>"
@@ -10314,6 +10330,10 @@
         "protocolPolicy":{
           "shape":"OriginProtocolPolicyEnum",
           "documentation":"<p>The protocol that your Amazon Lightsail distribution uses when establishing a connection with your origin to pull content.</p>"
+        },
+        "responseTimeout":{
+          "shape":"integer",
+          "documentation":"<p>The amount of time, in seconds, that the distribution waits for a response after forwarding a request to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don't specify otherwise) is 30 seconds.</p>"
         }
       },
       "documentation":"<p>Describes the origin resource of an Amazon Lightsail content delivery network (CDN) distribution.</p> <p>An origin can be a Lightsail instance, bucket, or load balancer. A distribution pulls content from an origin, caches it, and serves it to viewers via a worldwide network of edge servers.</p>"
@@ -12183,6 +12203,18 @@
         "isEnabled":{
           "shape":"boolean",
           "documentation":"<p>Indicates whether to enable the distribution.</p>"
+        },
+        "viewerMinimumTlsProtocolVersion":{
+          "shape":"ViewerMinimumTlsProtocolVersionEnum",
+          "documentation":"<p>Use this parameter to update the minimum TLS protocol version for the SSL/TLS certificate that's attached to the distribution.</p>"
+        },
+        "certificateName":{
+          "shape":"ResourceName",
+          "documentation":"<p>The name of the SSL/TLS certificate that you want to attach to the distribution.</p> <p>Only certificates with a status of <code>ISSUED</code> can be attached to a distribution.</p> <p>Use the <a href=\"https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_GetCertificates.html\">GetCertificates</a> action to get a list of certificate names that you can specify.</p>"
+        },
+        "useDefaultCertificate":{
+          "shape":"boolean",
+          "documentation":"<p>Indicates whether the default SSL/TLS certificate is attached to the distribution. The default value is <code>true</code>. When <code>true</code>, the distribution uses the default domain name such as <code>d111111abcdef8.cloudfront.net</code>.</p> <p> Set this value to <code>false</code> to attach a new certificate to the distribution.</p>"
         }
       }
     },
@@ -12372,6 +12404,15 @@
         }
       }
     },
+    "ViewerMinimumTlsProtocolVersionEnum":{
+      "type":"string",
+      "enum":[
+        "TLSv1.1_2016",
+        "TLSv1.2_2018",
+        "TLSv1.2_2019",
+        "TLSv1.2_2021"
+      ]
+    },
     "boolean":{"type":"boolean"},
     "double":{"type":"double"},
     "float":{"type":"float"},

diff --git a/sdk/code-analysis/ServiceAnalysis/Lightsail/Generated/PropertyValueRules.xml b/sdk/code-analysis/ServiceAnalysis/Lightsail/Generated/PropertyValueRules.xml
@@ -126,6 +126,10 @@
     <property>Amazon.Lightsail.Model.CreateDiskSnapshotRequest.InstanceName</property>
     <pattern>\w[\w\-]*\w</pattern>
   </property-value-rule>
+  <property-value-rule>
+    <property>Amazon.Lightsail.Model.CreateDistributionRequest.CertificateName</property>
+    <pattern>\w[\w\-]*\w</pattern>
+  </property-value-rule>
   <property-value-rule>
     <property>Amazon.Lightsail.Model.CreateDistributionRequest.DistributionName</property>
     <pattern>\w[\w\-]*\w</pattern>
@@ -712,6 +716,10 @@
     <max>63</max>
     <pattern>^[a-z0-9]{1,2}|[a-z0-9][a-z0-9-]+[a-z0-9]$</pattern>
   </property-value-rule>
+  <property-value-rule>
+    <property>Amazon.Lightsail.Model.UpdateDistributionRequest.CertificateName</property>
+    <pattern>\w[\w\-]*\w</pattern>
+  </property-value-rule>
   <property-value-rule>
     <property>Amazon.Lightsail.Model.UpdateDistributionRequest.DistributionName</property>
     <pattern>\w[\w\-]*\w</pattern>