feat(client-ec2): Enable use of tenant-specific PublicSigningKeyUrl f…

…rom device trust providers and onboard jumpcloud as a new device trust provider.
aws · Nov 16, 2023 · 9e1a837 · 9e1a837
1 parent de549d0
commit 9e1a837
Show file tree

Hide file tree

Showing 16 changed files with 246 additions and 140 deletions.
diff --git a/clients/client-ec2/src/commands/AttachVerifiedAccessTrustProviderCommand.ts b/clients/client-ec2/src/commands/AttachVerifiedAccessTrustProviderCommand.ts
@@ -67,7 +67,7 @@ export interface AttachVerifiedAccessTrustProviderCommandOutput
  * //     Description: "STRING_VALUE",
  * //     TrustProviderType: "user" || "device",
  * //     UserTrustProviderType: "iam-identity-center" || "oidc",
- * //     DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //     DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //     OidcOptions: { // OidcOptions
  * //       Issuer: "STRING_VALUE",
  * //       AuthorizationEndpoint: "STRING_VALUE",
@@ -79,6 +79,7 @@ export interface AttachVerifiedAccessTrustProviderCommandOutput
  * //     },
  * //     DeviceOptions: { // DeviceOptions
  * //       TenantId: "STRING_VALUE",
+ * //       PublicSigningKeyUrl: "STRING_VALUE",
  * //     },
  * //     PolicyReferenceName: "STRING_VALUE",
  * //     CreationTime: "STRING_VALUE",
@@ -103,7 +104,7 @@ export interface AttachVerifiedAccessTrustProviderCommandOutput
  * //         Description: "STRING_VALUE",
  * //         TrustProviderType: "user" || "device",
  * //         UserTrustProviderType: "iam-identity-center" || "oidc",
- * //         DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //         DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //       },
  * //     ],
  * //     CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/CreateVerifiedAccessInstanceCommand.ts b/clients/client-ec2/src/commands/CreateVerifiedAccessInstanceCommand.ts
@@ -76,7 +76,7 @@ export interface CreateVerifiedAccessInstanceCommandOutput
  * //         Description: "STRING_VALUE",
  * //         TrustProviderType: "user" || "device",
  * //         UserTrustProviderType: "iam-identity-center" || "oidc",
- * //         DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //         DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //       },
  * //     ],
  * //     CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/CreateVerifiedAccessTrustProviderCommand.ts b/clients/client-ec2/src/commands/CreateVerifiedAccessTrustProviderCommand.ts
@@ -60,7 +60,7 @@ export interface CreateVerifiedAccessTrustProviderCommandOutput
  * const input = { // CreateVerifiedAccessTrustProviderRequest
  *   TrustProviderType: "user" || "device", // required
  *   UserTrustProviderType: "iam-identity-center" || "oidc",
- *   DeviceTrustProviderType: "jamf" || "crowdstrike",
+ *   DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  *   OidcOptions: { // CreateVerifiedAccessTrustProviderOidcOptions
  *     Issuer: "STRING_VALUE",
  *     AuthorizationEndpoint: "STRING_VALUE",
@@ -72,6 +72,7 @@ export interface CreateVerifiedAccessTrustProviderCommandOutput
  *   },
  *   DeviceOptions: { // CreateVerifiedAccessTrustProviderDeviceOptions
  *     TenantId: "STRING_VALUE",
+ *     PublicSigningKeyUrl: "STRING_VALUE",
  *   },
  *   PolicyReferenceName: "STRING_VALUE", // required
  *   Description: "STRING_VALUE",
@@ -101,7 +102,7 @@ export interface CreateVerifiedAccessTrustProviderCommandOutput
  * //     Description: "STRING_VALUE",
  * //     TrustProviderType: "user" || "device",
  * //     UserTrustProviderType: "iam-identity-center" || "oidc",
- * //     DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //     DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //     OidcOptions: { // OidcOptions
  * //       Issuer: "STRING_VALUE",
  * //       AuthorizationEndpoint: "STRING_VALUE",
@@ -113,6 +114,7 @@ export interface CreateVerifiedAccessTrustProviderCommandOutput
  * //     },
  * //     DeviceOptions: { // DeviceOptions
  * //       TenantId: "STRING_VALUE",
+ * //       PublicSigningKeyUrl: "STRING_VALUE",
  * //     },
  * //     PolicyReferenceName: "STRING_VALUE",
  * //     CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/DeleteVerifiedAccessInstanceCommand.ts b/clients/client-ec2/src/commands/DeleteVerifiedAccessInstanceCommand.ts
@@ -63,7 +63,7 @@ export interface DeleteVerifiedAccessInstanceCommandOutput
  * //         Description: "STRING_VALUE",
  * //         TrustProviderType: "user" || "device",
  * //         UserTrustProviderType: "iam-identity-center" || "oidc",
- * //         DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //         DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //       },
  * //     ],
  * //     CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/DeleteVerifiedAccessTrustProviderCommand.ts b/clients/client-ec2/src/commands/DeleteVerifiedAccessTrustProviderCommand.ts
@@ -66,7 +66,7 @@ export interface DeleteVerifiedAccessTrustProviderCommandOutput
  * //     Description: "STRING_VALUE",
  * //     TrustProviderType: "user" || "device",
  * //     UserTrustProviderType: "iam-identity-center" || "oidc",
- * //     DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //     DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //     OidcOptions: { // OidcOptions
  * //       Issuer: "STRING_VALUE",
  * //       AuthorizationEndpoint: "STRING_VALUE",
@@ -78,6 +78,7 @@ export interface DeleteVerifiedAccessTrustProviderCommandOutput
  * //     },
  * //     DeviceOptions: { // DeviceOptions
  * //       TenantId: "STRING_VALUE",
+ * //       PublicSigningKeyUrl: "STRING_VALUE",
  * //     },
  * //     PolicyReferenceName: "STRING_VALUE",
  * //     CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/DescribeVerifiedAccessInstancesCommand.ts b/clients/client-ec2/src/commands/DescribeVerifiedAccessInstancesCommand.ts
@@ -78,7 +78,7 @@ export interface DescribeVerifiedAccessInstancesCommandOutput
  * //           Description: "STRING_VALUE",
  * //           TrustProviderType: "user" || "device",
  * //           UserTrustProviderType: "iam-identity-center" || "oidc",
- * //           DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //           DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //         },
  * //       ],
  * //       CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/DescribeVerifiedAccessTrustProvidersCommand.ts b/clients/client-ec2/src/commands/DescribeVerifiedAccessTrustProvidersCommand.ts
@@ -78,7 +78,7 @@ export interface DescribeVerifiedAccessTrustProvidersCommandOutput
  * //       Description: "STRING_VALUE",
  * //       TrustProviderType: "user" || "device",
  * //       UserTrustProviderType: "iam-identity-center" || "oidc",
- * //       DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //       DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //       OidcOptions: { // OidcOptions
  * //         Issuer: "STRING_VALUE",
  * //         AuthorizationEndpoint: "STRING_VALUE",
@@ -90,6 +90,7 @@ export interface DescribeVerifiedAccessTrustProvidersCommandOutput
  * //       },
  * //       DeviceOptions: { // DeviceOptions
  * //         TenantId: "STRING_VALUE",
+ * //         PublicSigningKeyUrl: "STRING_VALUE",
  * //       },
  * //       PolicyReferenceName: "STRING_VALUE",
  * //       CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/DetachVerifiedAccessTrustProviderCommand.ts b/clients/client-ec2/src/commands/DetachVerifiedAccessTrustProviderCommand.ts
@@ -67,7 +67,7 @@ export interface DetachVerifiedAccessTrustProviderCommandOutput
  * //     Description: "STRING_VALUE",
  * //     TrustProviderType: "user" || "device",
  * //     UserTrustProviderType: "iam-identity-center" || "oidc",
- * //     DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //     DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //     OidcOptions: { // OidcOptions
  * //       Issuer: "STRING_VALUE",
  * //       AuthorizationEndpoint: "STRING_VALUE",
@@ -79,6 +79,7 @@ export interface DetachVerifiedAccessTrustProviderCommandOutput
  * //     },
  * //     DeviceOptions: { // DeviceOptions
  * //       TenantId: "STRING_VALUE",
+ * //       PublicSigningKeyUrl: "STRING_VALUE",
  * //     },
  * //     PolicyReferenceName: "STRING_VALUE",
  * //     CreationTime: "STRING_VALUE",
@@ -103,7 +104,7 @@ export interface DetachVerifiedAccessTrustProviderCommandOutput
  * //         Description: "STRING_VALUE",
  * //         TrustProviderType: "user" || "device",
  * //         UserTrustProviderType: "iam-identity-center" || "oidc",
- * //         DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //         DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //       },
  * //     ],
  * //     CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/ModifyVerifiedAccessInstanceCommand.ts b/clients/client-ec2/src/commands/ModifyVerifiedAccessInstanceCommand.ts
@@ -64,7 +64,7 @@ export interface ModifyVerifiedAccessInstanceCommandOutput
  * //         Description: "STRING_VALUE",
  * //         TrustProviderType: "user" || "device",
  * //         UserTrustProviderType: "iam-identity-center" || "oidc",
- * //         DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //         DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //       },
  * //     ],
  * //     CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/commands/ModifyVerifiedAccessTrustProviderCommand.ts b/clients/client-ec2/src/commands/ModifyVerifiedAccessTrustProviderCommand.ts
@@ -65,6 +65,9 @@ export interface ModifyVerifiedAccessTrustProviderCommandOutput
  *     ClientSecret: "STRING_VALUE",
  *     Scope: "STRING_VALUE",
  *   },
+ *   DeviceOptions: { // ModifyVerifiedAccessTrustProviderDeviceOptions
+ *     PublicSigningKeyUrl: "STRING_VALUE",
+ *   },
  *   Description: "STRING_VALUE",
  *   DryRun: true || false,
  *   ClientToken: "STRING_VALUE",
@@ -81,7 +84,7 @@ export interface ModifyVerifiedAccessTrustProviderCommandOutput
  * //     Description: "STRING_VALUE",
  * //     TrustProviderType: "user" || "device",
  * //     UserTrustProviderType: "iam-identity-center" || "oidc",
- * //     DeviceTrustProviderType: "jamf" || "crowdstrike",
+ * //     DeviceTrustProviderType: "jamf" || "crowdstrike" || "jumpcloud",
  * //     OidcOptions: { // OidcOptions
  * //       Issuer: "STRING_VALUE",
  * //       AuthorizationEndpoint: "STRING_VALUE",
@@ -93,6 +96,7 @@ export interface ModifyVerifiedAccessTrustProviderCommandOutput
  * //     },
  * //     DeviceOptions: { // DeviceOptions
  * //       TenantId: "STRING_VALUE",
+ * //       PublicSigningKeyUrl: "STRING_VALUE",
  * //     },
  * //     PolicyReferenceName: "STRING_VALUE",
  * //     CreationTime: "STRING_VALUE",

diff --git a/clients/client-ec2/src/models/models_0.ts b/clients/client-ec2/src/models/models_0.ts
@@ -5595,6 +5595,7 @@ export interface AttachVerifiedAccessTrustProviderRequest {
 export const DeviceTrustProviderType = {
   crowdstrike: "crowdstrike",
   jamf: "jamf",
+  jumpcloud: "jumpcloud",
 } as const;
 
 /**
@@ -5724,6 +5725,14 @@ export interface DeviceOptions {
    * <p>The ID of the tenant application with the device-identity provider.</p>
    */
   TenantId?: string;
+
+  /**
+   * @public
+   * <p>
+   *          The URL Amazon Web Services Verified Access will use to verify the authenticity of the device tokens.
+   *       </p>
+   */
+  PublicSigningKeyUrl?: string;
 }
 
 /**

diff --git a/clients/client-ec2/src/models/models_2.ts b/clients/client-ec2/src/models/models_2.ts
@@ -4776,6 +4776,14 @@ export interface CreateVerifiedAccessTrustProviderDeviceOptions {
    * <p>The ID of the tenant application with the device-identity provider.</p>
    */
   TenantId?: string;
+
+  /**
+   * @public
+   * <p>
+   *          The URL Amazon Web Services Verified Access will use to verify the authenticity of the device tokens.
+   *       </p>
+   */
+  PublicSigningKeyUrl?: string;
 }
 
 /**