Amazon CloudFront Update: CloudFront Origin Access Control extends support to AWS Elemental MediaStore origins.

AWS · AWS · commit a418073b4a99 · 2023-02-08T19:08:31.000Z
diff --git a/.changes/next-release/feature-AmazonCloudFront-8fd86d4.json b/.changes/next-release/feature-AmazonCloudFront-8fd86d4.json
@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "Amazon CloudFront",
+    "contributor": "",
+    "description": "CloudFront Origin Access Control extends support to AWS Elemental MediaStore origins."
+}
diff --git a/services/cloudfront/src/main/resources/codegen-resources/endpoint-tests.json b/services/cloudfront/src/main/resources/codegen-resources/endpoint-tests.json
@@ -7,19 +7,19 @@
                     "properties": {
                         "authSchemes": [
                             {
-                                "signingRegion": "cn-northwest-1",
+                                "name": "sigv4",
                                 "signingName": "cloudfront",
-                                "name": "sigv4"
+                                "signingRegion": "cn-northwest-1"
                             }
                         ]
                     },
                     "url": "https://cloudfront.cn-northwest-1.amazonaws.com.cn"
                 }
             },
             "params": {
+                "UseDualStack": false,
                 "UseFIPS": false,
-                "Region": "aws-cn-global",
-                "UseDualStack": false
+                "Region": "aws-cn-global"
             }
         },
         {
@@ -29,19 +29,19 @@
                     "properties": {
                         "authSchemes": [
                             {
-                                "signingRegion": "us-east-1",
+                                "name": "sigv4",
                                 "signingName": "cloudfront",
-                                "name": "sigv4"
+                                "signingRegion": "us-east-1"
                             }
                         ]
                     },
                     "url": "https://cloudfront.amazonaws.com"
                 }
             },
             "params": {
+                "UseDualStack": false,
                 "UseFIPS": false,
-                "Region": "aws-global",
-                "UseDualStack": false
+                "Region": "aws-global"
             }
         },
         {
@@ -52,9 +52,9 @@
                 }
             },
             "params": {
+                "UseDualStack": false,
                 "UseFIPS": false,
                 "Region": "us-east-1",
-                "UseDualStack": false,
                 "Endpoint": "https://example.com"
             }
         },
@@ -64,9 +64,9 @@
                 "error": "Invalid Configuration: FIPS and custom endpoint are not supported"
             },
             "params": {
+                "UseDualStack": false,
                 "UseFIPS": true,
                 "Region": "us-east-1",
-                "UseDualStack": false,
                 "Endpoint": "https://example.com"
             }
         },
@@ -76,9 +76,9 @@
                 "error": "Invalid Configuration: Dualstack and custom endpoint are not supported"
             },
             "params": {
+                "UseDualStack": true,
                 "UseFIPS": false,
                 "Region": "us-east-1",
-                "UseDualStack": true,
                 "Endpoint": "https://example.com"
             }
         }
diff --git a/services/cloudfront/src/main/resources/codegen-resources/service-2.json b/services/cloudfront/src/main/resources/codegen-resources/service-2.json
@@ -453,7 +453,7 @@
         {"shape":"TooManyOriginAccessControls"},
         {"shape":"InvalidArgument"}
       ],
-      "documentation":"<p>Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.</p> <p>For an Amazon S3 origin, this makes it possible to block public access to the Amazon S3 bucket so that viewers (users) can access the content in the bucket only through CloudFront.</p> <p>For more information about using a CloudFront origin access control, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html\">Restricting access to an Amazon S3 origin</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"
+      "documentation":"<p>Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.</p> <p>This makes it possible to block public access to the origin, allowing viewers (users) to access the origin's content only through CloudFront.</p> <p>For more information about using a CloudFront origin access control, see <a href=\"https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html\">Restricting access to an Amazon Web Services origin</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>"
     },
     "CreateOriginRequestPolicy":{
       "name":"CreateOriginRequestPolicy2020_05_31",
@@ -7729,7 +7729,7 @@
         },
         "OriginAccessControlOriginType":{
           "shape":"OriginAccessControlOriginTypes",
-          "documentation":"<p>The type of origin that this origin access control is for. The only valid value is <code>s3</code>.</p>"
+          "documentation":"<p>The type of origin that this origin access control is for.</p>"
         }
       },
       "documentation":"<p>A CloudFront origin access control configuration.</p>"
@@ -7781,7 +7781,10 @@
     },
     "OriginAccessControlOriginTypes":{
       "type":"string",
-      "enum":["s3"]
+      "enum":[
+        "s3",
+        "mediastore"
+      ]
     },
     "OriginAccessControlSigningBehaviors":{
       "type":"string",
@@ -7828,7 +7831,7 @@
         },
         "OriginAccessControlOriginType":{
           "shape":"OriginAccessControlOriginTypes",
-          "documentation":"<p>The type of origin that this origin access control is for. The only valid value is <code>s3</code>.</p>"
+          "documentation":"<p>The type of origin that this origin access control is for.</p>"
         }
       },
       "documentation":"<p>A CloudFront origin access control.</p>"

Original file line number	Diff line number	Diff line change
`@@ -7,19 +7,19 @@`
`7`	`7`	`"properties": {`
`8`	`8`	`"authSchemes": [`
`9`	`9`	`{`
`10`		`- "signingRegion": "cn-northwest-1",`
	`10`	`+ "name": "sigv4",`
`11`	`11`	`"signingName": "cloudfront",`
`12`		`- "name": "sigv4"`
	`12`	`+ "signingRegion": "cn-northwest-1"`
`13`	`13`	`}`
`14`	`14`	`]`
`15`	`15`	`},`
`16`	`16`	`"url": "https://cloudfront.cn-northwest-1.amazonaws.com.cn"`
`17`	`17`	`}`
`18`	`18`	`},`
`19`	`19`	`"params": {`
	`20`	`+ "UseDualStack": false,`
`20`	`21`	`"UseFIPS": false,`
`21`		`- "Region": "aws-cn-global",`
`22`		`- "UseDualStack": false`
	`22`	`+ "Region": "aws-cn-global"`
`23`	`23`	`}`
`24`	`24`	`},`
`25`	`25`	`{`
`@@ -29,19 +29,19 @@`
`29`	`29`	`"properties": {`
`30`	`30`	`"authSchemes": [`
`31`	`31`	`{`
`32`		`- "signingRegion": "us-east-1",`
	`32`	`+ "name": "sigv4",`
`33`	`33`	`"signingName": "cloudfront",`
`34`		`- "name": "sigv4"`
	`34`	`+ "signingRegion": "us-east-1"`
`35`	`35`	`}`
`36`	`36`	`]`
`37`	`37`	`},`
`38`	`38`	`"url": "https://cloudfront.amazonaws.com"`
`39`	`39`	`}`
`40`	`40`	`},`
`41`	`41`	`"params": {`
	`42`	`+ "UseDualStack": false,`
`42`	`43`	`"UseFIPS": false,`
`43`		`- "Region": "aws-global",`
`44`		`- "UseDualStack": false`
	`44`	`+ "Region": "aws-global"`
`45`	`45`	`}`
`46`	`46`	`},`
`47`	`47`	`{`
`@@ -52,9 +52,9 @@`
`52`	`52`	`}`
`53`	`53`	`},`
`54`	`54`	`"params": {`
	`55`	`+ "UseDualStack": false,`
`55`	`56`	`"UseFIPS": false,`
`56`	`57`	`"Region": "us-east-1",`
`57`		`- "UseDualStack": false,`
`58`	`58`	`"Endpoint": "https://example.com"`
`59`	`59`	`}`
`60`	`60`	`},`
`@@ -64,9 +64,9 @@`
`64`	`64`	`"error": "Invalid Configuration: FIPS and custom endpoint are not supported"`
`65`	`65`	`},`
`66`	`66`	`"params": {`
	`67`	`+ "UseDualStack": false,`
`67`	`68`	`"UseFIPS": true,`
`68`	`69`	`"Region": "us-east-1",`
`69`		`- "UseDualStack": false,`
`70`	`70`	`"Endpoint": "https://example.com"`
`71`	`71`	`}`
`72`	`72`	`},`
`@@ -76,9 +76,9 @@`
`76`	`76`	`"error": "Invalid Configuration: Dualstack and custom endpoint are not supported"`
`77`	`77`	`},`
`78`	`78`	`"params": {`
	`79`	`+ "UseDualStack": true,`
`79`	`80`	`"UseFIPS": false,`
`80`	`81`	`"Region": "us-east-1",`
`81`		`- "UseDualStack": true,`
`82`	`82`	`"Endpoint": "https://example.com"`
`83`	`83`	`}`
`84`	`84`	`}`