feat(client-cloudfront): Added new viewer security policy, TLSv1.2_2025, for CloudFront.

awstools · awstools · commit bbe5fc550036 · 2025-10-10T18:56:04.000Z
diff --git a/clients/client-cloudfront/src/commands/CopyDistributionCommand.ts b/clients/client-cloudfront/src/commands/CopyDistributionCommand.ts
@@ -371,7 +371,7 @@ export interface CopyDistributionCommandOutput extends CopyDistributionResult, _
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/CreateDistributionCommand.ts b/clients/client-cloudfront/src/commands/CreateDistributionCommand.ts
@@ -326,7 +326,7 @@ export interface CreateDistributionCommandOutput extends CreateDistributionResul
  *       IAMCertificateId: "STRING_VALUE",
  *       ACMCertificateArn: "STRING_VALUE",
  *       SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- *       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ *       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  *       Certificate: "STRING_VALUE",
  *       CertificateSource: "cloudfront" || "iam" || "acm",
  *     },
@@ -685,7 +685,7 @@ export interface CreateDistributionCommandOutput extends CreateDistributionResul
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/CreateDistributionWithTagsCommand.ts b/clients/client-cloudfront/src/commands/CreateDistributionWithTagsCommand.ts
@@ -327,7 +327,7 @@ export interface CreateDistributionWithTagsCommandOutput extends CreateDistribut
  *         IAMCertificateId: "STRING_VALUE",
  *         ACMCertificateArn: "STRING_VALUE",
  *         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- *         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ *         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  *         Certificate: "STRING_VALUE",
  *         CertificateSource: "cloudfront" || "iam" || "acm",
  *       },
@@ -695,7 +695,7 @@ export interface CreateDistributionWithTagsCommandOutput extends CreateDistribut
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/GetDistributionCommand.ts b/clients/client-cloudfront/src/commands/GetDistributionCommand.ts
@@ -367,7 +367,7 @@ export interface GetDistributionCommandOutput extends GetDistributionResult, __M
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/GetDistributionConfigCommand.ts b/clients/client-cloudfront/src/commands/GetDistributionConfigCommand.ts
@@ -330,7 +330,7 @@ export interface GetDistributionConfigCommandOutput extends GetDistributionConfi
  * //       IAMCertificateId: "STRING_VALUE",
  * //       ACMCertificateArn: "STRING_VALUE",
  * //       SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //       Certificate: "STRING_VALUE",
  * //       CertificateSource: "cloudfront" || "iam" || "acm",
  * //     },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsByAnycastIpListIdCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsByAnycastIpListIdCommand.ts
@@ -342,7 +342,7 @@ export interface ListDistributionsByAnycastIpListIdCommandOutput
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsByConnectionModeCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsByConnectionModeCommand.ts
@@ -342,7 +342,7 @@ export interface ListDistributionsByConnectionModeCommandOutput
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsByRealtimeLogConfigCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsByRealtimeLogConfigCommand.ts
@@ -343,7 +343,7 @@ export interface ListDistributionsByRealtimeLogConfigCommandOutput
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsByWebACLIdCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsByWebACLIdCommand.ts
@@ -337,7 +337,7 @@ export interface ListDistributionsByWebACLIdCommandOutput extends ListDistributi
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/ListDistributionsCommand.ts b/clients/client-cloudfront/src/commands/ListDistributionsCommand.ts
@@ -336,7 +336,7 @@ export interface ListDistributionsCommandOutput extends ListDistributionsResult,
  * //           IAMCertificateId: "STRING_VALUE",
  * //           ACMCertificateArn: "STRING_VALUE",
  * //           SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //           MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //           Certificate: "STRING_VALUE",
  * //           CertificateSource: "cloudfront" || "iam" || "acm",
  * //         },
diff --git a/clients/client-cloudfront/src/commands/UpdateDistributionCommand.ts b/clients/client-cloudfront/src/commands/UpdateDistributionCommand.ts
@@ -326,7 +326,7 @@ export interface UpdateDistributionCommandOutput extends UpdateDistributionResul
  *       IAMCertificateId: "STRING_VALUE",
  *       ACMCertificateArn: "STRING_VALUE",
  *       SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- *       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ *       MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  *       Certificate: "STRING_VALUE",
  *       CertificateSource: "cloudfront" || "iam" || "acm",
  *     },
@@ -687,7 +687,7 @@ export interface UpdateDistributionCommandOutput extends UpdateDistributionResul
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/commands/UpdateDistributionWithStagingConfigCommand.ts b/clients/client-cloudfront/src/commands/UpdateDistributionWithStagingConfigCommand.ts
@@ -374,7 +374,7 @@ export interface UpdateDistributionWithStagingConfigCommandOutput
  * //         IAMCertificateId: "STRING_VALUE",
  * //         ACMCertificateArn: "STRING_VALUE",
  * //         SSLSupportMethod: "sni-only" || "vip" || "static-ip",
- * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025",
+ * //         MinimumProtocolVersion: "SSLv3" || "TLSv1" || "TLSv1_2016" || "TLSv1.1_2016" || "TLSv1.2_2018" || "TLSv1.2_2019" || "TLSv1.2_2021" || "TLSv1.3_2025" || "TLSv1.2_2025",
  * //         Certificate: "STRING_VALUE",
  * //         CertificateSource: "cloudfront" || "iam" || "acm",
  * //       },
diff --git a/clients/client-cloudfront/src/models/models_0.ts b/clients/client-cloudfront/src/models/models_0.ts
@@ -2415,6 +2415,7 @@ export const MinimumProtocolVersion = {
   TLSv1_2_2018: "TLSv1.2_2018",
   TLSv1_2_2019: "TLSv1.2_2019",
   TLSv1_2_2021: "TLSv1.2_2021",
+  TLSv1_2_2025: "TLSv1.2_2025",
   TLSv1_3_2025: "TLSv1.3_2025",
 } as const;
 
diff --git a/clients/client-cloudfront/src/models/models_1.ts b/clients/client-cloudfront/src/models/models_1.ts
@@ -420,7 +420,7 @@ export class TooManyQueryStringsInOriginRequestPolicy extends __BaseException {
 }
 
 /**
- * <p>Configuration information about a public key that you can use with <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html">signed URLs and signed cookies</a>, or with <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html">field-level encryption</a>.</p>
+ * <p>Configuration information about a public key that you can use with <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html">signed URLs and signed cookies</a>, or with <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html">field-level encryption</a>.</p> <p>CloudFront supports signed URLs and signed cookies with RSA 2048 or ECDSA 256 key signatures. Field-level encryption is only compatible with RSA 2048 key signatures.</p>
  * @public
  */
 export interface PublicKeyConfig {
@@ -461,7 +461,7 @@ export interface CreatePublicKeyRequest {
 }
 
 /**
- * <p>A public key that you can use with <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html">signed URLs and signed cookies</a>, or with <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html">field-level encryption</a>.</p>
+ * <p>A public key that you can use with <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html">signed URLs and signed cookies</a>, or with <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html">field-level encryption</a>.</p> <p>CloudFront supports signed URLs and signed cookies with RSA 2048 or ECDSA 256 key signatures. Field-level encryption is only compatible with RSA 2048 key signatures.</p>
  * @public
  */
 export interface PublicKey {
diff --git a/codegen/sdk-codegen/aws-models/cloudfront.json b/codegen/sdk-codegen/aws-models/cloudfront.json
@@ -16619,6 +16619,12 @@
           "traits": {
             "smithy.api#enumValue": "TLSv1.3_2025"
           }
+        },
+        "TLSv1_2_2025": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "TLSv1.2_2025"
+          }
         }
       }
     },
@@ -18078,7 +18084,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>A public key that you can use with <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html\">signed URLs and signed cookies</a>, or with <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html\">field-level encryption</a>.</p>"
+        "smithy.api#documentation": "<p>A public key that you can use with <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html\">signed URLs and signed cookies</a>, or with <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html\">field-level encryption</a>.</p> <p>CloudFront supports signed URLs and signed cookies with RSA 2048 or ECDSA 256 key signatures. Field-level encryption is only compatible with RSA 2048 key signatures.</p>"
       }
     },
     "com.amazonaws.cloudfront#PublicKeyAlreadyExists": {
@@ -18126,7 +18132,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>Configuration information about a public key that you can use with <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html\">signed URLs and signed cookies</a>, or with <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html\">field-level encryption</a>.</p>"
+        "smithy.api#documentation": "<p>Configuration information about a public key that you can use with <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html\">signed URLs and signed cookies</a>, or with <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html\">field-level encryption</a>.</p> <p>CloudFront supports signed URLs and signed cookies with RSA 2048 or ECDSA 256 key signatures. Field-level encryption is only compatible with RSA 2048 key signatures.</p>"
       }
     },
     "com.amazonaws.cloudfront#PublicKeyIdList": {
