Skip to content

Commit 59e2f13

Browse files
author
awstools
committed
feat(client-rds): This release adds support for specifying the CA certificate to use for the new db instance when restoring from db snapshot, restoring from s3, restoring to point in time, and creating a db instance read replica.
1 parent 18bbe71 commit 59e2f13

File tree

8 files changed

+123
-2
lines changed

8 files changed

+123
-2
lines changed

‎clients/client-rds/src/commands/CreateDBInstanceReadReplicaCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,7 @@ export interface CreateDBInstanceReadReplicaCommandOutput extends CreateDBInstan
108108
* SourceDBClusterIdentifier: "STRING_VALUE",
109109
* DedicatedLogVolume: true || false,
110110
* UpgradeStorageConfig: true || false,
111+
* CACertificateIdentifier: "STRING_VALUE",
111112
* };
112113
* const command = new CreateDBInstanceReadReplicaCommand(input);
113114
* const response = await client.send(command);
@@ -345,6 +346,11 @@ export interface CreateDBInstanceReadReplicaCommandOutput extends CreateDBInstan
345346
* @see {@link CreateDBInstanceReadReplicaCommandOutput} for command's `response` shape.
346347
* @see {@link RDSClientResolvedConfig | config} for RDSClient's `config` shape.
347348
*
349+
* @throws {@link CertificateNotFoundFault} (client fault)
350+
* <p>
351+
* <code>CertificateIdentifier</code> doesn't refer to an
352+
* existing certificate.</p>
353+
*
348354
* @throws {@link DBClusterNotFoundFault} (client fault)
349355
* <p>
350356
* <code>DBClusterIdentifier</code> doesn't refer to an existing DB cluster.</p>

‎clients/client-rds/src/commands/RestoreDBInstanceFromDBSnapshotCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,7 @@ export interface RestoreDBInstanceFromDBSnapshotCommandOutput
109109
* DBClusterSnapshotIdentifier: "STRING_VALUE",
110110
* AllocatedStorage: Number("int"),
111111
* DedicatedLogVolume: true || false,
112+
* CACertificateIdentifier: "STRING_VALUE",
112113
* };
113114
* const command = new RestoreDBInstanceFromDBSnapshotCommand(input);
114115
* const response = await client.send(command);
@@ -354,6 +355,11 @@ export interface RestoreDBInstanceFromDBSnapshotCommandOutput
354355
*
355356
* @throws {@link BackupPolicyNotFoundFault} (client fault)
356357
*
358+
* @throws {@link CertificateNotFoundFault} (client fault)
359+
* <p>
360+
* <code>CertificateIdentifier</code> doesn't refer to an
361+
* existing certificate.</p>
362+
*
357363
* @throws {@link DBClusterSnapshotNotFoundFault} (client fault)
358364
* <p>
359365
* <code>DBClusterSnapshotIdentifier</code> doesn't refer to an existing DB cluster snapshot.</p>

‎clients/client-rds/src/commands/RestoreDBInstanceFromS3Command.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,7 @@ export interface RestoreDBInstanceFromS3CommandOutput extends RestoreDBInstanceF
108108
* ManageMasterUserPassword: true || false,
109109
* MasterUserSecretKmsKeyId: "STRING_VALUE",
110110
* DedicatedLogVolume: true || false,
111+
* CACertificateIdentifier: "STRING_VALUE",
111112
* };
112113
* const command = new RestoreDBInstanceFromS3Command(input);
113114
* const response = await client.send(command);
@@ -353,6 +354,11 @@ export interface RestoreDBInstanceFromS3CommandOutput extends RestoreDBInstanceF
353354
*
354355
* @throws {@link BackupPolicyNotFoundFault} (client fault)
355356
*
357+
* @throws {@link CertificateNotFoundFault} (client fault)
358+
* <p>
359+
* <code>CertificateIdentifier</code> doesn't refer to an
360+
* existing certificate.</p>
361+
*
356362
* @throws {@link DBInstanceAlreadyExistsFault} (client fault)
357363
* <p>The user already has a DB instance with the given identifier.</p>
358364
*

‎clients/client-rds/src/commands/RestoreDBInstanceToPointInTimeCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,7 @@ export interface RestoreDBInstanceToPointInTimeCommandOutput
109109
* StorageThroughput: Number("int"),
110110
* AllocatedStorage: Number("int"),
111111
* DedicatedLogVolume: true || false,
112+
* CACertificateIdentifier: "STRING_VALUE",
112113
* };
113114
* const command = new RestoreDBInstanceToPointInTimeCommand(input);
114115
* const response = await client.send(command);
@@ -354,6 +355,11 @@ export interface RestoreDBInstanceToPointInTimeCommandOutput
354355
*
355356
* @throws {@link BackupPolicyNotFoundFault} (client fault)
356357
*
358+
* @throws {@link CertificateNotFoundFault} (client fault)
359+
* <p>
360+
* <code>CertificateIdentifier</code> doesn't refer to an
361+
* existing certificate.</p>
362+
*
357363
* @throws {@link DBInstanceAlreadyExistsFault} (client fault)
358364
* <p>The user already has a DB instance with the given identifier.</p>
359365
*

‎clients/client-rds/src/models/models_0.ts

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4752,7 +4752,8 @@ export interface CreateDBClusterMessage {
47524752

47534753
/**
47544754
* <p>The DB engine mode of the DB cluster, either <code>provisioned</code> or <code>serverless</code>.</p>
4755-
* <p>The <code>serverless</code> engine mode only applies for Aurora Serverless v1 DB clusters.</p>
4755+
* <p>The <code>serverless</code> engine mode only applies for Aurora Serverless v1 DB clusters. Aurora Serverless v2 DB clusters use the
4756+
* <code>provisioned</code> engine mode.</p>
47564757
* <p>For information about limitations and requirements for Serverless DB clusters, see the
47574758
* following sections in the <i>Amazon Aurora User Guide</i>:</p>
47584759
* <ul>
@@ -10274,6 +10275,18 @@ export interface CreateDBInstanceReadReplicaMessage {
1027410275
* @public
1027510276
*/
1027610277
UpgradeStorageConfig?: boolean;
10278+
10279+
/**
10280+
* <p>The CA certificate identifier to use for the read replica's server certificate.</p>
10281+
* <p>This setting doesn't apply to RDS Custom DB instances.</p>
10282+
* <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html">Using SSL/TLS to encrypt a connection to a DB
10283+
* instance</a> in the <i>Amazon RDS User Guide</i> and
10284+
* <a href="https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html">
10285+
* Using SSL/TLS to encrypt a connection to a DB cluster</a> in the <i>Amazon Aurora
10286+
* User Guide</i>.</p>
10287+
* @public
10288+
*/
10289+
CACertificateIdentifier?: string;
1027710290
}
1027810291

1027910292
/**

‎clients/client-rds/src/models/models_1.ts

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12767,6 +12767,18 @@ export interface RestoreDBInstanceFromDBSnapshotMessage {
1276712767
* @public
1276812768
*/
1276912769
DedicatedLogVolume?: boolean;
12770+
12771+
/**
12772+
* <p>The CA certificate identifier to use for the DB instance's server certificate.</p>
12773+
* <p>This setting doesn't apply to RDS Custom DB instances.</p>
12774+
* <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html">Using SSL/TLS to encrypt a connection to a DB
12775+
* instance</a> in the <i>Amazon RDS User Guide</i> and
12776+
* <a href="https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html">
12777+
* Using SSL/TLS to encrypt a connection to a DB cluster</a> in the <i>Amazon Aurora
12778+
* User Guide</i>.</p>
12779+
* @public
12780+
*/
12781+
CACertificateIdentifier?: string;
1277012782
}
1277112783

1277212784
/**
@@ -13363,6 +13375,18 @@ export interface RestoreDBInstanceFromS3Message {
1336313375
* @public
1336413376
*/
1336513377
DedicatedLogVolume?: boolean;
13378+
13379+
/**
13380+
* <p>The CA certificate identifier to use for the DB instance's server certificate.</p>
13381+
* <p>This setting doesn't apply to RDS Custom DB instances.</p>
13382+
* <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html">Using SSL/TLS to encrypt a connection to a DB
13383+
* instance</a> in the <i>Amazon RDS User Guide</i> and
13384+
* <a href="https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html">
13385+
* Using SSL/TLS to encrypt a connection to a DB cluster</a> in the <i>Amazon Aurora
13386+
* User Guide</i>.</p>
13387+
* @public
13388+
*/
13389+
CACertificateIdentifier?: string;
1336613390
}
1336713391

1336813392
/**
@@ -14026,6 +14050,18 @@ export interface RestoreDBInstanceToPointInTimeMessage {
1402614050
* @public
1402714051
*/
1402814052
DedicatedLogVolume?: boolean;
14053+
14054+
/**
14055+
* <p>The CA certificate identifier to use for the DB instance's server certificate.</p>
14056+
* <p>This setting doesn't apply to RDS Custom DB instances.</p>
14057+
* <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html">Using SSL/TLS to encrypt a connection to a DB
14058+
* instance</a> in the <i>Amazon RDS User Guide</i> and
14059+
* <a href="https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html">
14060+
* Using SSL/TLS to encrypt a connection to a DB cluster</a> in the <i>Amazon Aurora
14061+
* User Guide</i>.</p>
14062+
* @public
14063+
*/
14064+
CACertificateIdentifier?: string;
1402914065
}
1403014066

1403114067
/**

‎clients/client-rds/src/protocols/Aws_query.ts

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11045,6 +11045,9 @@ const se_CreateDBInstanceReadReplicaMessage = (
1104511045
if (input[_USC] != null) {
1104611046
entries[_USC] = input[_USC];
1104711047
}
11048+
if (input[_CACI] != null) {
11049+
entries[_CACI] = input[_CACI];
11050+
}
1104811051
return entries;
1104911052
};
1105011053

@@ -15487,6 +15490,9 @@ const se_RestoreDBInstanceFromDBSnapshotMessage = (
1548715490
if (input[_DLV] != null) {
1548815491
entries[_DLV] = input[_DLV];
1548915492
}
15493+
if (input[_CACI] != null) {
15494+
entries[_CACI] = input[_CACI];
15495+
}
1549015496
return entries;
1549115497
};
1549215498

@@ -15677,6 +15683,9 @@ const se_RestoreDBInstanceFromS3Message = (input: RestoreDBInstanceFromS3Message
1567715683
if (input[_DLV] != null) {
1567815684
entries[_DLV] = input[_DLV];
1567915685
}
15686+
if (input[_CACI] != null) {
15687+
entries[_CACI] = input[_CACI];
15688+
}
1568015689
return entries;
1568115690
};
1568215691

@@ -15855,6 +15864,9 @@ const se_RestoreDBInstanceToPointInTimeMessage = (
1585515864
if (input[_DLV] != null) {
1585615865
entries[_DLV] = input[_DLV];
1585715866
}
15867+
if (input[_CACI] != null) {
15868+
entries[_CACI] = input[_CACI];
15869+
}
1585815870
return entries;
1585915871
};
1586015872

‎codegen/sdk-codegen/aws-models/rds.json

Lines changed: 37 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4297,7 +4297,7 @@
42974297
"EngineMode": {
42984298
"target": "com.amazonaws.rds#String",
42994299
"traits": {
4300-
"smithy.api#documentation": "<p>The DB engine mode of the DB cluster, either <code>provisioned</code> or <code>serverless</code>.</p>\n <p>The <code>serverless</code> engine mode only applies for Aurora Serverless v1 DB clusters.</p>\n <p>For information about limitations and requirements for Serverless DB clusters, see the \n following sections in the <i>Amazon Aurora User Guide</i>:</p>\n <ul>\n <li>\n <p>\n <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations\">Limitations of Aurora\n Serverless v1</a>\n </p>\n </li>\n <li>\n <p>\n <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html\">Requirements\n for Aurora Serverless v2</a>\n </p>\n </li>\n </ul>\n <p>Valid for Cluster Type: Aurora DB clusters only</p>"
4300+
"smithy.api#documentation": "<p>The DB engine mode of the DB cluster, either <code>provisioned</code> or <code>serverless</code>.</p>\n <p>The <code>serverless</code> engine mode only applies for Aurora Serverless v1 DB clusters. Aurora Serverless v2 DB clusters use the \n <code>provisioned</code> engine mode.</p>\n <p>For information about limitations and requirements for Serverless DB clusters, see the \n following sections in the <i>Amazon Aurora User Guide</i>:</p>\n <ul>\n <li>\n <p>\n <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations\">Limitations of Aurora\n Serverless v1</a>\n </p>\n </li>\n <li>\n <p>\n <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html\">Requirements\n for Aurora Serverless v2</a>\n </p>\n </li>\n </ul>\n <p>Valid for Cluster Type: Aurora DB clusters only</p>"
43014301
}
43024302
},
43034303
"ScalingConfiguration": {
@@ -5255,6 +5255,9 @@
52555255
"target": "com.amazonaws.rds#CreateDBInstanceReadReplicaResult"
52565256
},
52575257
"errors": [
5258+
{
5259+
"target": "com.amazonaws.rds#CertificateNotFoundFault"
5260+
},
52585261
{
52595262
"target": "com.amazonaws.rds#DBClusterNotFoundFault"
52605263
},
@@ -5613,6 +5616,12 @@
56135616
"traits": {
56145617
"smithy.api#documentation": "<p>Whether to upgrade the storage file system configuration on the read replica. This option\n migrates the read replica from the old storage file system layout to the preferred layout.</p>"
56155618
}
5619+
},
5620+
"CACertificateIdentifier": {
5621+
"target": "com.amazonaws.rds#String",
5622+
"traits": {
5623+
"smithy.api#documentation": "<p>The CA certificate identifier to use for the read replica's server certificate.</p>\n <p>This setting doesn't apply to RDS Custom DB instances.</p>\n <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html\">Using SSL/TLS to encrypt a connection to a DB \n instance</a> in the <i>Amazon RDS User Guide</i> and \n <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html\">\n Using SSL/TLS to encrypt a connection to a DB cluster</a> in the <i>Amazon Aurora \n User Guide</i>.</p>"
5624+
}
56165625
}
56175626
},
56185627
"traits": {
@@ -27451,6 +27460,9 @@
2745127460
{
2745227461
"target": "com.amazonaws.rds#BackupPolicyNotFoundFault"
2745327462
},
27463+
{
27464+
"target": "com.amazonaws.rds#CertificateNotFoundFault"
27465+
},
2745427466
{
2745527467
"target": "com.amazonaws.rds#DBClusterSnapshotNotFoundFault"
2745627468
},
@@ -27791,6 +27803,12 @@
2779127803
"traits": {
2779227804
"smithy.api#documentation": "<p>Specifies whether to enable a dedicated log volume (DLV) for the DB instance.</p>"
2779327805
}
27806+
},
27807+
"CACertificateIdentifier": {
27808+
"target": "com.amazonaws.rds#String",
27809+
"traits": {
27810+
"smithy.api#documentation": "<p>The CA certificate identifier to use for the DB instance's server certificate.</p>\n <p>This setting doesn't apply to RDS Custom DB instances.</p>\n <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html\">Using SSL/TLS to encrypt a connection to a DB \n instance</a> in the <i>Amazon RDS User Guide</i> and \n <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html\">\n Using SSL/TLS to encrypt a connection to a DB cluster</a> in the <i>Amazon Aurora \n User Guide</i>.</p>"
27811+
}
2779427812
}
2779527813
},
2779627814
"traits": {
@@ -27824,6 +27842,9 @@
2782427842
{
2782527843
"target": "com.amazonaws.rds#BackupPolicyNotFoundFault"
2782627844
},
27845+
{
27846+
"target": "com.amazonaws.rds#CertificateNotFoundFault"
27847+
},
2782727848
{
2782827849
"target": "com.amazonaws.rds#DBInstanceAlreadyExistsFault"
2782927850
},
@@ -28187,6 +28208,12 @@
2818728208
"traits": {
2818828209
"smithy.api#documentation": "<p>Specifies whether to enable a dedicated log volume (DLV) for the DB instance.</p>"
2818928210
}
28211+
},
28212+
"CACertificateIdentifier": {
28213+
"target": "com.amazonaws.rds#String",
28214+
"traits": {
28215+
"smithy.api#documentation": "<p>The CA certificate identifier to use for the DB instance's server certificate.</p>\n <p>This setting doesn't apply to RDS Custom DB instances.</p>\n <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html\">Using SSL/TLS to encrypt a connection to a DB \n instance</a> in the <i>Amazon RDS User Guide</i> and \n <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html\">\n Using SSL/TLS to encrypt a connection to a DB cluster</a> in the <i>Amazon Aurora \n User Guide</i>.</p>"
28216+
}
2819028217
}
2819128218
},
2819228219
"traits": {
@@ -28219,6 +28246,9 @@
2821928246
{
2822028247
"target": "com.amazonaws.rds#BackupPolicyNotFoundFault"
2822128248
},
28249+
{
28250+
"target": "com.amazonaws.rds#CertificateNotFoundFault"
28251+
},
2822228252
{
2822328253
"target": "com.amazonaws.rds#DBInstanceAlreadyExistsFault"
2822428254
},
@@ -28645,6 +28675,12 @@
2864528675
"traits": {
2864628676
"smithy.api#documentation": "<p>Specifies whether to enable a dedicated log volume (DLV) for the DB instance.</p>"
2864728677
}
28678+
},
28679+
"CACertificateIdentifier": {
28680+
"target": "com.amazonaws.rds#String",
28681+
"traits": {
28682+
"smithy.api#documentation": "<p>The CA certificate identifier to use for the DB instance's server certificate.</p>\n <p>This setting doesn't apply to RDS Custom DB instances.</p>\n <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html\">Using SSL/TLS to encrypt a connection to a DB \n instance</a> in the <i>Amazon RDS User Guide</i> and \n <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html\">\n Using SSL/TLS to encrypt a connection to a DB cluster</a> in the <i>Amazon Aurora \n User Guide</i>.</p>"
28683+
}
2864828684
}
2864928685
},
2865028686
"traits": {

0 commit comments

Comments
 (0)