Skip to content

Commit bb1a8f8

Browse files
author
AWS
committed
Amazon Elastic Compute Cloud Update: This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices.
1 parent de523bf commit bb1a8f8

File tree

2 files changed

+123
-0
lines changed

2 files changed

+123
-0
lines changed

‎.changes/next-release/feature-AmazonElasticComputeCloud-3af7cc2.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "Amazon Elastic Compute Cloud",
4+
"contributor": "",
5+
"description": "This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices."
6+
}

‎services/ec2/src/main/resources/codegen-resources/service-2.json

Lines changed: 117 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4731,6 +4731,16 @@
47314731
"output":{"shape":"ExportVerifiedAccessInstanceClientConfigurationResult"},
47324732
"documentation":"<p>Exports the client configuration for a Verified Access instance.</p>"
47334733
},
4734+
"GetActiveVpnTunnelStatus":{
4735+
"name":"GetActiveVpnTunnelStatus",
4736+
"http":{
4737+
"method":"POST",
4738+
"requestUri":"/"
4739+
},
4740+
"input":{"shape":"GetActiveVpnTunnelStatusRequest"},
4741+
"output":{"shape":"GetActiveVpnTunnelStatusResult"},
4742+
"documentation":"<p>Returns the currently negotiated security parameters for an active VPN tunnel, including IKE version, DH groups, encryption algorithms, and integrity algorithms.</p>"
4743+
},
47344744
"GetAllowedImagesSettings":{
47354745
"name":"GetAllowedImagesSettings",
47364746
"http":{
@@ -7332,6 +7342,57 @@
73327342
"locationName":"item"
73337343
}
73347344
},
7345+
"ActiveVpnTunnelStatus":{
7346+
"type":"structure",
7347+
"members":{
7348+
"Phase1EncryptionAlgorithm":{
7349+
"shape":"String",
7350+
"documentation":"<p>The encryption algorithm negotiated in Phase 1 IKE negotiations.</p>",
7351+
"locationName":"phase1EncryptionAlgorithm"
7352+
},
7353+
"Phase2EncryptionAlgorithm":{
7354+
"shape":"String",
7355+
"documentation":"<p>The encryption algorithm negotiated in Phase 2 IKE negotiations.</p>",
7356+
"locationName":"phase2EncryptionAlgorithm"
7357+
},
7358+
"Phase1IntegrityAlgorithm":{
7359+
"shape":"String",
7360+
"documentation":"<p>The integrity algorithm negotiated in Phase 1 IKE negotiations.</p>",
7361+
"locationName":"phase1IntegrityAlgorithm"
7362+
},
7363+
"Phase2IntegrityAlgorithm":{
7364+
"shape":"String",
7365+
"documentation":"<p>The integrity algorithm negotiated in Phase 2 IKE negotiations.</p>",
7366+
"locationName":"phase2IntegrityAlgorithm"
7367+
},
7368+
"Phase1DHGroup":{
7369+
"shape":"Integer",
7370+
"documentation":"<p>The Diffie-Hellman group number being used in Phase 1 IKE negotiations.</p>",
7371+
"locationName":"phase1DHGroup"
7372+
},
7373+
"Phase2DHGroup":{
7374+
"shape":"Integer",
7375+
"documentation":"<p>The Diffie-Hellman group number being used in Phase 2 IKE negotiations.</p>",
7376+
"locationName":"phase2DHGroup"
7377+
},
7378+
"IkeVersion":{
7379+
"shape":"String",
7380+
"documentation":"<p>The version of the Internet Key Exchange (IKE) protocol being used.</p>",
7381+
"locationName":"ikeVersion"
7382+
},
7383+
"ProvisioningStatus":{
7384+
"shape":"VpnTunnelProvisioningStatus",
7385+
"documentation":"<p>The current provisioning status of the VPN tunnel.</p>",
7386+
"locationName":"provisioningStatus"
7387+
},
7388+
"ProvisioningStatusReason":{
7389+
"shape":"String",
7390+
"documentation":"<p>The reason for the current provisioning status.</p>",
7391+
"locationName":"provisioningStatusReason"
7392+
}
7393+
},
7394+
"documentation":"<p>Contains information about the current security configuration of an active VPN tunnel.</p>"
7395+
},
73357396
"ActivityStatus":{
73367397
"type":"string",
73377398
"enum":[
@@ -18294,6 +18355,10 @@
1829418355
"documentation":"<p>The tags to apply to the VPN connection.</p>",
1829518356
"locationName":"TagSpecification"
1829618357
},
18358+
"PreSharedKeyStorage":{
18359+
"shape":"String",
18360+
"documentation":"<p>Specifies the storage mode for the pre-shared key (PSK). Valid values are <code>Standard</code>\" (stored in the Site-to-Site VPN service) or <code>SecretsManager</code> (stored in Amazon Web Services Secrets Manager).</p>"
18361+
},
1829718362
"DryRun":{
1829818363
"shape":"Boolean",
1829918364
"documentation":"<p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>",
@@ -33795,6 +33860,37 @@
3379533860
"type":"string",
3379633861
"enum":["ipsec.1"]
3379733862
},
33863+
"GetActiveVpnTunnelStatusRequest":{
33864+
"type":"structure",
33865+
"required":[
33866+
"VpnConnectionId",
33867+
"VpnTunnelOutsideIpAddress"
33868+
],
33869+
"members":{
33870+
"VpnConnectionId":{
33871+
"shape":"VpnConnectionId",
33872+
"documentation":"<p>The ID of the VPN connection for which to retrieve the active tunnel status.</p>"
33873+
},
33874+
"VpnTunnelOutsideIpAddress":{
33875+
"shape":"String",
33876+
"documentation":"<p>The external IP address of the VPN tunnel for which to retrieve the active status.</p>"
33877+
},
33878+
"DryRun":{
33879+
"shape":"Boolean",
33880+
"documentation":"<p>Checks whether you have the required permissions for the action, without actually making the request.</p>"
33881+
}
33882+
}
33883+
},
33884+
"GetActiveVpnTunnelStatusResult":{
33885+
"type":"structure",
33886+
"members":{
33887+
"ActiveVpnTunnelStatus":{
33888+
"shape":"ActiveVpnTunnelStatus",
33889+
"documentation":"<p>Information about the current security configuration of the VPN tunnel.</p>",
33890+
"locationName":"activeVpnTunnelStatus"
33891+
}
33892+
}
33893+
},
3379833894
"GetAllowedImagesSettingsRequest":{
3379933895
"type":"structure",
3380033896
"members":{
@@ -35913,6 +36009,10 @@
3591336009
"shape":"String",
3591436010
"documentation":"<p>The IKE version to be used in the sample configuration file for your customer gateway device. You can specify one of the following versions: <code>ikev1</code> or <code>ikev2</code>.</p>"
3591536011
},
36012+
"SampleType":{
36013+
"shape":"String",
36014+
"documentation":"<p>The type of sample configuration to generate. Valid values are \"compatibility\" (includes IKEv1) or \"recommended\" (throws UnsupportedOperationException for IKEv1).</p>"
36015+
},
3591636016
"DryRun":{
3591736017
"shape":"Boolean",
3591836018
"documentation":"<p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>"
@@ -49670,6 +49770,10 @@
4967049770
"SkipTunnelReplacement":{
4967149771
"shape":"Boolean",
4967249772
"documentation":"<p>Choose whether or not to trigger immediate tunnel replacement. This is only applicable when turning on or off <code>EnableTunnelLifecycleControl</code>.</p> <p>Valid values: <code>True</code> | <code>False</code> </p>"
49773+
},
49774+
"PreSharedKeyStorage":{
49775+
"shape":"String",
49776+
"documentation":"<p>Specifies the storage mode for the pre-shared key (PSK). Valid values are <code>Standard</code> (stored in Site-to-Site VPN service) or <code>SecretsManager</code> (stored in Amazon Web Services Secrets Manager).</p>"
4967349777
}
4967449778
}
4967549779
},
@@ -67798,6 +67902,11 @@
6779867902
"documentation":"<p>Information about the VPN tunnel.</p>",
6779967903
"locationName":"vgwTelemetry"
6780067904
},
67905+
"PreSharedKeyArn":{
67906+
"shape":"String",
67907+
"documentation":"<p>The Amazon Resource Name (ARN) of the Secrets Manager secret storing the pre-shared key(s) for the VPN connection.</p>",
67908+
"locationName":"preSharedKeyArn"
67909+
},
6780167910
"VpnConnectionId":{
6780267911
"shape":"String",
6780367912
"documentation":"<p>The ID of the VPN connection.</p>",
@@ -68213,6 +68322,14 @@
6821368322
"type":"list",
6821468323
"member":{"shape":"VpnTunnelOptionsSpecification"}
6821568324
},
68325+
"VpnTunnelProvisioningStatus":{
68326+
"type":"string",
68327+
"enum":[
68328+
"available",
68329+
"pending",
68330+
"failed"
68331+
]
68332+
},
6821668333
"WeekDay":{
6821768334
"type":"string",
6821868335
"enum":[

0 commit comments

Comments
 (0)