Skip to content

Commit fff7099

Browse files
author
AWS
committed
AWS Directory Service Update: Adding client authentication feature for AWS AD Connector
1 parent 4d41616 commit fff7099

File tree

2 files changed

+148
-8
lines changed

2 files changed

+148
-8
lines changed

‎.changes/next-release/feature-AWSDirectoryService-4c4ec43.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "AWS Directory Service",
4+
"contributor": "",
5+
"description": "Adding client authentication feature for AWS AD Connector"
6+
}

‎services/directory/src/main/resources/codegen-resources/service-2.json

Lines changed: 142 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -556,6 +556,24 @@
556556
],
557557
"documentation":"<p>Obtains information about the trust relationships for this account.</p> <p>If no input parameters are provided, such as DirectoryId or TrustIds, this request describes all the trust relationships belonging to the account.</p>"
558558
},
559+
"DisableClientAuthentication":{
560+
"name":"DisableClientAuthentication",
561+
"http":{
562+
"method":"POST",
563+
"requestUri":"/"
564+
},
565+
"input":{"shape":"DisableClientAuthenticationRequest"},
566+
"output":{"shape":"DisableClientAuthenticationResult"},
567+
"errors":[
568+
{"shape":"DirectoryDoesNotExistException"},
569+
{"shape":"UnsupportedOperationException"},
570+
{"shape":"InvalidClientAuthStatusException"},
571+
{"shape":"AccessDeniedException"},
572+
{"shape":"ClientException"},
573+
{"shape":"ServiceException"}
574+
],
575+
"documentation":"<p>Disable client authentication for smart cards.</p>"
576+
},
559577
"DisableLDAPS":{
560578
"name":"DisableLDAPS",
561579
"http":{
@@ -607,6 +625,25 @@
607625
],
608626
"documentation":"<p>Disables single-sign on for a directory.</p>"
609627
},
628+
"EnableClientAuthentication":{
629+
"name":"EnableClientAuthentication",
630+
"http":{
631+
"method":"POST",
632+
"requestUri":"/"
633+
},
634+
"input":{"shape":"EnableClientAuthenticationRequest"},
635+
"output":{"shape":"EnableClientAuthenticationResult"},
636+
"errors":[
637+
{"shape":"DirectoryDoesNotExistException"},
638+
{"shape":"UnsupportedOperationException"},
639+
{"shape":"InvalidClientAuthStatusException"},
640+
{"shape":"AccessDeniedException"},
641+
{"shape":"NoAvailableCertificateException"},
642+
{"shape":"ClientException"},
643+
{"shape":"ServiceException"}
644+
],
645+
"documentation":"<p>Enable client authentication for smardtcards.</p>"
646+
},
610647
"EnableLDAPS":{
611648
"name":"EnableLDAPS",
612649
"http":{
@@ -1267,6 +1304,14 @@
12671304
"ExpiryDateTime":{
12681305
"shape":"CertificateExpiryDateTime",
12691306
"documentation":"<p>The date and time when the certificate will expire.</p>"
1307+
},
1308+
"Type":{
1309+
"shape":"CertificateType",
1310+
"documentation":"<p>Select <code>ClientCertAuth</code> for smart card integration.</p>"
1311+
},
1312+
"ClientCertAuthSettings":{
1313+
"shape":"ClientCertAuthSettings",
1314+
"documentation":"<p>Provides information about the client certificate authentication settings. The default value is <code>ClientLDAPS</code>.</p>"
12701315
}
12711316
},
12721317
"documentation":"<p>Information about the certificate.</p>"
@@ -1327,6 +1372,10 @@
13271372
"ExpiryDateTime":{
13281373
"shape":"CertificateExpiryDateTime",
13291374
"documentation":"<p>The date and time when the certificate will expire.</p>"
1375+
},
1376+
"Type":{
1377+
"shape":"CertificateType",
1378+
"documentation":"<p>Displays the type of certificate.</p>"
13301379
}
13311380
},
13321381
"documentation":"<p>Contains general information about a certificate.</p>"
@@ -1353,6 +1402,13 @@
13531402
]
13541403
},
13551404
"CertificateStateReason":{"type":"string"},
1405+
"CertificateType":{
1406+
"type":"string",
1407+
"enum":[
1408+
"ClientCertAuth",
1409+
"ClientLDAPS"
1410+
]
1411+
},
13561412
"CertificatesInfo":{
13571413
"type":"list",
13581414
"member":{"shape":"CertificateInfo"}
@@ -1365,6 +1421,20 @@
13651421
"type":"list",
13661422
"member":{"shape":"CidrIp"}
13671423
},
1424+
"ClientAuthenticationType":{
1425+
"type":"string",
1426+
"enum":["SmartCard"]
1427+
},
1428+
"ClientCertAuthSettings":{
1429+
"type":"structure",
1430+
"members":{
1431+
"OCSPUrl":{
1432+
"shape":"OCSPUrl",
1433+
"documentation":"<p>Specifies the URL of the default OCSP server used to check for revocation status.</p>"
1434+
}
1435+
},
1436+
"documentation":"<p>Contains information about the client certificate authentication settings, such as <code>ClientLDAPS</code> or <code>ClientCertAuth</code>.</p>"
1437+
},
13681438
"ClientException":{
13691439
"type":"structure",
13701440
"members":{
@@ -2137,7 +2207,7 @@
21372207
},
21382208
"NextToken":{
21392209
"shape":"NextToken",
2140-
"documentation":"<p>The <i>DescribeRegionsResult.NextToken</i> value from a previous call to <a>DescribeRegions</a>. Pass null if this is the first call.</p>"
2210+
"documentation":"<p>The <code>DescribeRegionsResult.NextToken</code> value from a previous call to <a>DescribeRegions</a>. Pass null if this is the first call.</p>"
21412211
}
21422212
}
21432213
},
@@ -2146,11 +2216,11 @@
21462216
"members":{
21472217
"RegionsDescription":{
21482218
"shape":"RegionsDescription",
2149-
"documentation":"<p>List of regional information related to the directory per replicated Region.</p>"
2219+
"documentation":"<p>List of Region information related to the directory for each replicated Region.</p>"
21502220
},
21512221
"NextToken":{
21522222
"shape":"NextToken",
2153-
"documentation":"<p>If not null, more results are available. Pass this value for the <i>NextToken</i> parameter in a subsequent call to <a>DescribeRegions</a> to retrieve the next set of items.</p>"
2223+
"documentation":"<p>If not null, more results are available. Pass this value for the <code>NextToken</code> parameter in a subsequent call to <a>DescribeRegions</a> to retrieve the next set of items.</p>"
21542224
}
21552225
}
21562226
},
@@ -2632,6 +2702,28 @@
26322702
},
26332703
"documentation":"<p>Contains information about the directory.</p>"
26342704
},
2705+
"DisableClientAuthenticationRequest":{
2706+
"type":"structure",
2707+
"required":[
2708+
"DirectoryId",
2709+
"Type"
2710+
],
2711+
"members":{
2712+
"DirectoryId":{
2713+
"shape":"DirectoryId",
2714+
"documentation":"<p>Disable client authentication in a specified directory for smart cards. </p>"
2715+
},
2716+
"Type":{
2717+
"shape":"ClientAuthenticationType",
2718+
"documentation":"<p>Disable the type of client authentication request. </p>"
2719+
}
2720+
}
2721+
},
2722+
"DisableClientAuthenticationResult":{
2723+
"type":"structure",
2724+
"members":{
2725+
}
2726+
},
26352727
"DisableLDAPSRequest":{
26362728
"type":"structure",
26372729
"required":[
@@ -2780,6 +2872,28 @@
27802872
"type":"list",
27812873
"member":{"shape":"DomainController"}
27822874
},
2875+
"EnableClientAuthenticationRequest":{
2876+
"type":"structure",
2877+
"required":[
2878+
"DirectoryId",
2879+
"Type"
2880+
],
2881+
"members":{
2882+
"DirectoryId":{
2883+
"shape":"DirectoryId",
2884+
"documentation":"<p>Enable client authentication in a specified directory for smart cards. </p>"
2885+
},
2886+
"Type":{
2887+
"shape":"ClientAuthenticationType",
2888+
"documentation":"<p>Enable the type of client authentication request. </p>"
2889+
}
2890+
}
2891+
},
2892+
"EnableClientAuthenticationResult":{
2893+
"type":"structure",
2894+
"members":{
2895+
}
2896+
},
27832897
"EnableLDAPSRequest":{
27842898
"type":"structure",
27852899
"required":[
@@ -2959,6 +3073,15 @@
29593073
"documentation":"<p>The certificate PEM that was provided has incorrect encoding.</p>",
29603074
"exception":true
29613075
},
3076+
"InvalidClientAuthStatusException":{
3077+
"type":"structure",
3078+
"members":{
3079+
"Message":{"shape":"ExceptionMessage"},
3080+
"RequestId":{"shape":"RequestId"}
3081+
},
3082+
"documentation":"<p>The client authorization was invalid.</p>",
3083+
"exception":true
3084+
},
29623085
"InvalidLDAPSStatusException":{
29633086
"type":"structure",
29643087
"members":{
@@ -3330,6 +3453,12 @@
33303453
"max":1024,
33313454
"sensitive":true
33323455
},
3456+
"OCSPUrl":{
3457+
"type":"string",
3458+
"max":1024,
3459+
"min":1,
3460+
"pattern":"^(https?|ftp|file|ldaps?)://[-a-zA-Z0-9+&@#/%?=~_|!:,.;()]*[-a-zA-Z0-9+&@#/%=~_|()]"
3461+
},
33333462
"OrganizationalUnitDN":{
33343463
"type":"string",
33353464
"max":2000,
@@ -3478,7 +3607,7 @@
34783607
},
34793608
"RegionType":{
34803609
"shape":"RegionType",
3481-
"documentation":"<p>Specifies if the Region is the primary Region or an additional Region.</p>"
3610+
"documentation":"<p>Specifies whether the Region is the primary Region or an additional Region.</p>"
34823611
},
34833612
"Status":{
34843613
"shape":"DirectoryStage",
@@ -3502,15 +3631,15 @@
35023631
"documentation":"<p>The date and time that the Region description was last updated.</p>"
35033632
}
35043633
},
3505-
"documentation":"<p>The replicated regional information for a directory.</p>"
3634+
"documentation":"<p>The replicated Region information for a directory.</p>"
35063635
},
35073636
"RegionLimitExceededException":{
35083637
"type":"structure",
35093638
"members":{
35103639
"Message":{"shape":"ExceptionMessage"},
35113640
"RequestId":{"shape":"RequestId"}
35123641
},
3513-
"documentation":"<p>You have reached the limit for maximum number of simultaneous region replications per directory.</p>",
3642+
"documentation":"<p>You have reached the limit for maximum number of simultaneous Region replications per directory.</p>",
35143643
"exception":true
35153644
},
35163645
"RegionName":{
@@ -3534,7 +3663,7 @@
35343663
"members":{
35353664
"PrimaryRegion":{
35363665
"shape":"RegionName",
3537-
"documentation":"<p>The Region from where the AWS Managed Microsoft AD directory was originally created.</p>"
3666+
"documentation":"<p>The Region where the AWS Managed Microsoft AD directory was originally created.</p>"
35383667
},
35393668
"AdditionalRegions":{
35403669
"shape":"AdditionalRegions",
@@ -3557,7 +3686,12 @@
35573686
"CertificateData":{
35583687
"shape":"CertificateData",
35593688
"documentation":"<p>The certificate PEM string that needs to be registered.</p>"
3560-
}
3689+
},
3690+
"Type":{
3691+
"shape":"CertificateType",
3692+
"documentation":"<p>The certificate type to register for the request.</p>"
3693+
},
3694+
"ClientCertAuthSettings":{"shape":"ClientCertAuthSettings"}
35613695
}
35623696
},
35633697
"RegisterCertificateResult":{

0 commit comments

Comments
 (0)