Gets the public endorsement key associated with the Nitro Trusted + * Platform Module (NitroTPM) for the specified instance.
+ * @example + * Use a bare-bones client and the command you need to make an API call. + * ```javascript + * import { EC2Client, GetInstanceTpmEkPubCommand } from "@aws-sdk/client-ec2"; // ES Modules import + * // const { EC2Client, GetInstanceTpmEkPubCommand } = require("@aws-sdk/client-ec2"); // CommonJS import + * const client = new EC2Client(config); + * const input = { // GetInstanceTpmEkPubRequest + * InstanceId: "STRING_VALUE", // required + * KeyType: "rsa-2048" || "ecc-sec-p384", // required + * KeyFormat: "der" || "tpmt", // required + * DryRun: true || false, + * }; + * const command = new GetInstanceTpmEkPubCommand(input); + * const response = await client.send(command); + * // { // GetInstanceTpmEkPubResult + * // InstanceId: "STRING_VALUE", + * // KeyType: "rsa-2048" || "ecc-sec-p384", + * // KeyFormat: "der" || "tpmt", + * // KeyValue: "STRING_VALUE", + * // }; + * + * ``` + * + * @param GetInstanceTpmEkPubCommandInput - {@link GetInstanceTpmEkPubCommandInput} + * @returns {@link GetInstanceTpmEkPubCommandOutput} + * @see {@link GetInstanceTpmEkPubCommandInput} for command's `input` shape. + * @see {@link GetInstanceTpmEkPubCommandOutput} for command's `response` shape. + * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape. + * + * @throws {@link EC2ServiceException} + *Base exception class for all service exceptions from EC2 service.
+ * + * @public + */ +export class GetInstanceTpmEkPubCommand extends $Command + .classBuilder< + GetInstanceTpmEkPubCommandInput, + GetInstanceTpmEkPubCommandOutput, + EC2ClientResolvedConfig, + ServiceInputTypes, + ServiceOutputTypes + >() + .ep({ + ...commonParams, + }) + .m(function (this: any, Command: any, cs: any, config: EC2ClientResolvedConfig, o: any) { + return [ + getSerdePlugin(config, this.serialize, this.deserialize), + getEndpointPlugin(config, Command.getEndpointParameterInstructions()), + ]; + }) + .s("AmazonEC2", "GetInstanceTpmEkPub", {}) + .n("EC2Client", "GetInstanceTpmEkPubCommand") + .f(void 0, GetInstanceTpmEkPubResultFilterSensitiveLog) + .ser(se_GetInstanceTpmEkPubCommand) + .de(de_GetInstanceTpmEkPubCommand) + .build() {} diff --git a/clients/client-ec2/src/commands/GetIpamDiscoveredAccountsCommand.ts b/clients/client-ec2/src/commands/GetIpamDiscoveredAccountsCommand.ts index f2d33439016a..9bbd58aa6a37 100644 --- a/clients/client-ec2/src/commands/GetIpamDiscoveredAccountsCommand.ts +++ b/clients/client-ec2/src/commands/GetIpamDiscoveredAccountsCommand.ts @@ -6,8 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types"; import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client"; import { commonParams } from "../endpoint/EndpointParameters"; -import { GetIpamDiscoveredAccountsRequest } from "../models/models_5"; -import { GetIpamDiscoveredAccountsResult } from "../models/models_6"; +import { GetIpamDiscoveredAccountsRequest, GetIpamDiscoveredAccountsResult } from "../models/models_6"; import { de_GetIpamDiscoveredAccountsCommand, se_GetIpamDiscoveredAccountsCommand } from "../protocols/Aws_ec2"; /** diff --git a/clients/client-ec2/src/commands/ProvisionIpamPoolCidrCommand.ts b/clients/client-ec2/src/commands/ProvisionIpamPoolCidrCommand.ts index 07d3259e1e2d..9fa8c54dc703 100644 --- a/clients/client-ec2/src/commands/ProvisionIpamPoolCidrCommand.ts +++ b/clients/client-ec2/src/commands/ProvisionIpamPoolCidrCommand.ts @@ -6,7 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types"; import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client"; import { commonParams } from "../endpoint/EndpointParameters"; -import { ProvisionIpamPoolCidrRequest, ProvisionIpamPoolCidrResult } from "../models/models_6"; +import { ProvisionIpamPoolCidrRequest, ProvisionIpamPoolCidrResult } from "../models/models_7"; import { de_ProvisionIpamPoolCidrCommand, se_ProvisionIpamPoolCidrCommand } from "../protocols/Aws_ec2"; /** diff --git a/clients/client-ec2/src/commands/ProvisionPublicIpv4PoolCidrCommand.ts b/clients/client-ec2/src/commands/ProvisionPublicIpv4PoolCidrCommand.ts index 11d527359010..ea83c17719fe 100644 --- a/clients/client-ec2/src/commands/ProvisionPublicIpv4PoolCidrCommand.ts +++ b/clients/client-ec2/src/commands/ProvisionPublicIpv4PoolCidrCommand.ts @@ -6,8 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types"; import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client"; import { commonParams } from "../endpoint/EndpointParameters"; -import { ProvisionPublicIpv4PoolCidrRequest } from "../models/models_6"; -import { ProvisionPublicIpv4PoolCidrResult } from "../models/models_7"; +import { ProvisionPublicIpv4PoolCidrRequest, ProvisionPublicIpv4PoolCidrResult } from "../models/models_7"; import { de_ProvisionPublicIpv4PoolCidrCommand, se_ProvisionPublicIpv4PoolCidrCommand } from "../protocols/Aws_ec2"; /** diff --git a/clients/client-ec2/src/commands/index.ts b/clients/client-ec2/src/commands/index.ts index 4a39eb18ef99..0b6c62147a1b 100644 --- a/clients/client-ec2/src/commands/index.ts +++ b/clients/client-ec2/src/commands/index.ts @@ -442,6 +442,7 @@ export * from "./GetGroupsForCapacityReservationCommand"; export * from "./GetHostReservationPurchasePreviewCommand"; export * from "./GetImageBlockPublicAccessStateCommand"; export * from "./GetInstanceMetadataDefaultsCommand"; +export * from "./GetInstanceTpmEkPubCommand"; export * from "./GetInstanceTypesFromInstanceRequirementsCommand"; export * from "./GetInstanceUefiDataCommand"; export * from "./GetIpamAddressHistoryCommand"; diff --git a/clients/client-ec2/src/models/models_5.ts b/clients/client-ec2/src/models/models_5.ts index 09ac206e7650..4c9d49ad8f6f 100644 --- a/clients/client-ec2/src/models/models_5.ts +++ b/clients/client-ec2/src/models/models_5.ts @@ -1,4 +1,6 @@ // smithy-typescript generated code +import { SENSITIVE_STRING } from "@smithy/smithy-client"; + import { _InstanceType, AddressTransfer, @@ -8295,6 +8297,96 @@ export interface GetInstanceMetadataDefaultsResult { AccountLevel?: InstanceMetadataDefaultsResponse; } +/** + * @public + * @enum + */ +export const EkPubKeyFormat = { + der: "der", + tpmt: "tpmt", +} as const; + +/** + * @public + */ +export type EkPubKeyFormat = (typeof EkPubKeyFormat)[keyof typeof EkPubKeyFormat]; + +/** + * @public + * @enum + */ +export const EkPubKeyType = { + ECC_SEC_P384: "ecc-sec-p384", + RSA_2048: "rsa-2048", +} as const; + +/** + * @public + */ +export type EkPubKeyType = (typeof EkPubKeyType)[keyof typeof EkPubKeyType]; + +/** + * @public + */ +export interface GetInstanceTpmEkPubRequest { + /** + *The ID of the instance for which to get the public endorsement key.
+ * @public + */ + InstanceId: string | undefined; + + /** + *The required public endorsement key type.
+ * @public + */ + KeyType: EkPubKeyType | undefined; + + /** + *The required public endorsement key format. Specify der for a DER-encoded public
+ * key that is compatible with OpenSSL. Specify tpmt for a TPM 2.0 format that is
+ * compatible with tpm2-tools. The returned key is base64 encoded.
Specify this parameter to verify whether the request will succeed, without actually making the
+ * request. If the request will succeed, the response is DryRunOperation. Otherwise,
+ * the response is UnauthorizedOperation.
The ID of the instance.
+ * @public + */ + InstanceId?: string; + + /** + *The public endorsement key type.
+ * @public + */ + KeyType?: EkPubKeyType; + + /** + *The public endorsement key format.
+ * @public + */ + KeyFormat?: EkPubKeyFormat; + + /** + *The public endorsement key material.
+ * @public + */ + KeyValue?: string; +} + /** * @public */ @@ -8601,144 +8693,6 @@ export interface GetIpamAddressHistoryResult { NextToken?: string; } -/** - * @public - */ -export interface GetIpamDiscoveredAccountsRequest { - /** - *A check for whether you have the required permissions for the action without actually making the request
- * and provides an error response. If you have the required permissions, the error response is DryRunOperation.
- * Otherwise, it is UnauthorizedOperation.
A resource discovery ID.
- * @public - */ - IpamResourceDiscoveryId: string | undefined; - - /** - *The Amazon Web Services Region that the account information is returned from.
- * @public - */ - DiscoveryRegion: string | undefined; - - /** - *Discovered account filters.
- * @public - */ - Filters?: Filter[]; - - /** - *Specify the pagination token from a previous request to retrieve the next page of results.
- * @public - */ - NextToken?: string; - - /** - *The maximum number of discovered accounts to return in one page of results.
- * @public - */ - MaxResults?: number; -} - -/** - * @public - * @enum - */ -export const IpamDiscoveryFailureCode = { - assume_role_failure: "assume-role-failure", - throttling_failure: "throttling-failure", - unauthorized_failure: "unauthorized-failure", -} as const; - -/** - * @public - */ -export type IpamDiscoveryFailureCode = (typeof IpamDiscoveryFailureCode)[keyof typeof IpamDiscoveryFailureCode]; - -/** - *The discovery failure reason.
- * @public - */ -export interface IpamDiscoveryFailureReason { - /** - *The discovery failure code.
- *
- * assume-role-failure - IPAM could not assume the Amazon Web Services IAM service-linked role. This could be because of any of the following:
SLR has not been created yet and IPAM is still creating it.
- *You have opted-out of the IPAM home Region.
- *Account you are using as your IPAM account has been suspended.
- *
- * throttling-failure - IPAM account is already using the allotted transactions per second and IPAM is receiving a throttling error when assuming the Amazon Web Services IAM SLR.
- * unauthorized-failure - Amazon Web Services account making the request is not authorized. For more information, see AuthFailure in the Amazon Elastic Compute Cloud API Reference.
The discovery failure message.
- * @public - */ - Message?: string; -} - -/** - *An IPAM discovered account. A discovered account is an Amazon Web Services account that is monitored under a resource discovery. If you have integrated IPAM with Amazon Web Services Organizations, all accounts in the organization are discovered accounts.
- * @public - */ -export interface IpamDiscoveredAccount { - /** - *The account ID.
- * @public - */ - AccountId?: string; - - /** - *The Amazon Web Services Region that the account information is returned from. - * An account can be discovered in multiple regions and will have a separate discovered account for each Region.
- * @public - */ - DiscoveryRegion?: string; - - /** - *The resource discovery failure reason.
- * @public - */ - FailureReason?: IpamDiscoveryFailureReason; - - /** - *The last attempted resource discovery time.
- * @public - */ - LastAttemptedDiscoveryTime?: Date; - - /** - *The last successful resource discovery time.
- * @public - */ - LastSuccessfulDiscoveryTime?: Date; -} - /** * @internal */ @@ -8774,3 +8728,11 @@ export const DetachVerifiedAccessTrustProviderResultFilterSensitiveLog = ( VerifiedAccessTrustProvider: VerifiedAccessTrustProviderFilterSensitiveLog(obj.VerifiedAccessTrustProvider), }), }); + +/** + * @internal + */ +export const GetInstanceTpmEkPubResultFilterSensitiveLog = (obj: GetInstanceTpmEkPubResult): any => ({ + ...obj, + ...(obj.KeyValue && { KeyValue: SENSITIVE_STRING }), +}); diff --git a/clients/client-ec2/src/models/models_6.ts b/clients/client-ec2/src/models/models_6.ts index e6a5a6b10161..ad5a44aee9f0 100644 --- a/clients/client-ec2/src/models/models_6.ts +++ b/clients/client-ec2/src/models/models_6.ts @@ -151,7 +151,6 @@ import { import { InstanceFamilyCreditSpecification, IpamComplianceStatus, - IpamDiscoveredAccount, IpamOverlapStatus, SnapshotBlockPublicAccessState, TransitGatewayPropagationState, @@ -160,6 +159,144 @@ import { VolumeModification, } from "./models_5"; +/** + * @public + */ +export interface GetIpamDiscoveredAccountsRequest { + /** + *A check for whether you have the required permissions for the action without actually making the request
+ * and provides an error response. If you have the required permissions, the error response is DryRunOperation.
+ * Otherwise, it is UnauthorizedOperation.
A resource discovery ID.
+ * @public + */ + IpamResourceDiscoveryId: string | undefined; + + /** + *The Amazon Web Services Region that the account information is returned from.
+ * @public + */ + DiscoveryRegion: string | undefined; + + /** + *Discovered account filters.
+ * @public + */ + Filters?: Filter[]; + + /** + *Specify the pagination token from a previous request to retrieve the next page of results.
+ * @public + */ + NextToken?: string; + + /** + *The maximum number of discovered accounts to return in one page of results.
+ * @public + */ + MaxResults?: number; +} + +/** + * @public + * @enum + */ +export const IpamDiscoveryFailureCode = { + assume_role_failure: "assume-role-failure", + throttling_failure: "throttling-failure", + unauthorized_failure: "unauthorized-failure", +} as const; + +/** + * @public + */ +export type IpamDiscoveryFailureCode = (typeof IpamDiscoveryFailureCode)[keyof typeof IpamDiscoveryFailureCode]; + +/** + *The discovery failure reason.
+ * @public + */ +export interface IpamDiscoveryFailureReason { + /** + *The discovery failure code.
+ *
+ * assume-role-failure - IPAM could not assume the Amazon Web Services IAM service-linked role. This could be because of any of the following:
SLR has not been created yet and IPAM is still creating it.
+ *You have opted-out of the IPAM home Region.
+ *Account you are using as your IPAM account has been suspended.
+ *
+ * throttling-failure - IPAM account is already using the allotted transactions per second and IPAM is receiving a throttling error when assuming the Amazon Web Services IAM SLR.
+ * unauthorized-failure - Amazon Web Services account making the request is not authorized. For more information, see AuthFailure in the Amazon Elastic Compute Cloud API Reference.
The discovery failure message.
+ * @public + */ + Message?: string; +} + +/** + *An IPAM discovered account. A discovered account is an Amazon Web Services account that is monitored under a resource discovery. If you have integrated IPAM with Amazon Web Services Organizations, all accounts in the organization are discovered accounts.
+ * @public + */ +export interface IpamDiscoveredAccount { + /** + *The account ID.
+ * @public + */ + AccountId?: string; + + /** + *The Amazon Web Services Region that the account information is returned from. + * An account can be discovered in multiple regions and will have a separate discovered account for each Region.
+ * @public + */ + DiscoveryRegion?: string; + + /** + *The resource discovery failure reason.
+ * @public + */ + FailureReason?: IpamDiscoveryFailureReason; + + /** + *The last attempted resource discovery time.
+ * @public + */ + LastAttemptedDiscoveryTime?: Date; + + /** + *The last successful resource discovery time.
+ * @public + */ + LastSuccessfulDiscoveryTime?: Date; +} + /** * @public */ @@ -9430,109 +9567,6 @@ export interface ProvisionIpamByoasnResult { Byoasn?: Byoasn; } -/** - *A signed document that proves that you are authorized to bring the specified IP address range to Amazon using BYOIP.
- * @public - */ -export interface IpamCidrAuthorizationContext { - /** - *The plain-text authorization message for the prefix and account.
- * @public - */ - Message?: string; - - /** - *The signed authorization message for the prefix and account.
- * @public - */ - Signature?: string; -} - -/** - * @public - */ -export interface ProvisionIpamPoolCidrRequest { - /** - *A check for whether you have the required permissions for the action without actually making the request
- * and provides an error response. If you have the required permissions, the error response is DryRunOperation.
- * Otherwise, it is UnauthorizedOperation.
The ID of the IPAM pool to which you want to assign a CIDR.
- * @public - */ - IpamPoolId: string | undefined; - - /** - *The CIDR you want to assign to the IPAM pool. Either "NetmaskLength" or "Cidr" is required. This value will be null if you specify "NetmaskLength" and will be filled in during the provisioning process.
- * @public - */ - Cidr?: string; - - /** - *A signed document that proves that you are authorized to bring a specified IP address range to Amazon using BYOIP. This option applies to public pools only.
- * @public - */ - CidrAuthorizationContext?: IpamCidrAuthorizationContext; - - /** - *The netmask length of the CIDR you'd like to provision to a pool. Can be used for provisioning Amazon-provided IPv6 CIDRs to top-level pools and for provisioning CIDRs to pools with source pools. Cannot be used to provision BYOIP CIDRs to top-level pools. Either "NetmaskLength" or "Cidr" is required.
- * @public - */ - NetmaskLength?: number; - - /** - *A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see Ensuring Idempotency.
- * @public - */ - ClientToken?: string; -} - -/** - * @public - */ -export interface ProvisionIpamPoolCidrResult { - /** - *Information about the provisioned CIDR.
- * @public - */ - IpamPoolCidr?: IpamPoolCidr; -} - -/** - * @public - */ -export interface ProvisionPublicIpv4PoolCidrRequest { - /** - *A check for whether you have the required permissions for the action without actually making the request
- * and provides an error response. If you have the required permissions, the error response is DryRunOperation.
- * Otherwise, it is UnauthorizedOperation.
The ID of the IPAM pool you would like to use to allocate this CIDR.
- * @public - */ - IpamPoolId: string | undefined; - - /** - *The ID of the public IPv4 pool you would like to use for this CIDR.
- * @public - */ - PoolId: string | undefined; - - /** - *The netmask length of the CIDR you would like to allocate to the public IPv4 pool.
- * @public - */ - NetmaskLength: number | undefined; -} - /** * @internal */ diff --git a/clients/client-ec2/src/models/models_7.ts b/clients/client-ec2/src/models/models_7.ts index e353595a348e..3fa55e8181b7 100644 --- a/clients/client-ec2/src/models/models_7.ts +++ b/clients/client-ec2/src/models/models_7.ts @@ -51,6 +51,7 @@ import { Filter, ImdsSupportValues, InstanceTagNotificationAttribute, + IpamPoolCidr, TpmSupportValues, } from "./models_3"; @@ -80,6 +81,109 @@ import { Purchase } from "./models_5"; import { CapacityReservationSpecification, InstanceMonitoring, Status } from "./models_6"; +/** + *A signed document that proves that you are authorized to bring the specified IP address range to Amazon using BYOIP.
+ * @public + */ +export interface IpamCidrAuthorizationContext { + /** + *The plain-text authorization message for the prefix and account.
+ * @public + */ + Message?: string; + + /** + *The signed authorization message for the prefix and account.
+ * @public + */ + Signature?: string; +} + +/** + * @public + */ +export interface ProvisionIpamPoolCidrRequest { + /** + *A check for whether you have the required permissions for the action without actually making the request
+ * and provides an error response. If you have the required permissions, the error response is DryRunOperation.
+ * Otherwise, it is UnauthorizedOperation.
The ID of the IPAM pool to which you want to assign a CIDR.
+ * @public + */ + IpamPoolId: string | undefined; + + /** + *The CIDR you want to assign to the IPAM pool. Either "NetmaskLength" or "Cidr" is required. This value will be null if you specify "NetmaskLength" and will be filled in during the provisioning process.
+ * @public + */ + Cidr?: string; + + /** + *A signed document that proves that you are authorized to bring a specified IP address range to Amazon using BYOIP. This option applies to public pools only.
+ * @public + */ + CidrAuthorizationContext?: IpamCidrAuthorizationContext; + + /** + *The netmask length of the CIDR you'd like to provision to a pool. Can be used for provisioning Amazon-provided IPv6 CIDRs to top-level pools and for provisioning CIDRs to pools with source pools. Cannot be used to provision BYOIP CIDRs to top-level pools. Either "NetmaskLength" or "Cidr" is required.
+ * @public + */ + NetmaskLength?: number; + + /** + *A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see Ensuring Idempotency.
+ * @public + */ + ClientToken?: string; +} + +/** + * @public + */ +export interface ProvisionIpamPoolCidrResult { + /** + *Information about the provisioned CIDR.
+ * @public + */ + IpamPoolCidr?: IpamPoolCidr; +} + +/** + * @public + */ +export interface ProvisionPublicIpv4PoolCidrRequest { + /** + *A check for whether you have the required permissions for the action without actually making the request
+ * and provides an error response. If you have the required permissions, the error response is DryRunOperation.
+ * Otherwise, it is UnauthorizedOperation.
The ID of the IPAM pool you would like to use to allocate this CIDR.
+ * @public + */ + IpamPoolId: string | undefined; + + /** + *The ID of the public IPv4 pool you would like to use for this CIDR.
+ * @public + */ + PoolId: string | undefined; + + /** + *The netmask length of the CIDR you would like to allocate to the public IPv4 pool.
+ * @public + */ + NetmaskLength: number | undefined; +} + /** * @public */ diff --git a/clients/client-ec2/src/protocols/Aws_ec2.ts b/clients/client-ec2/src/protocols/Aws_ec2.ts index 4f1f6dcfd6f8..d3bf2b1e20c6 100644 --- a/clients/client-ec2/src/protocols/Aws_ec2.ts +++ b/clients/client-ec2/src/protocols/Aws_ec2.ts @@ -1519,6 +1519,10 @@ import { GetInstanceMetadataDefaultsCommandInput, GetInstanceMetadataDefaultsCommandOutput, } from "../commands/GetInstanceMetadataDefaultsCommand"; +import { + GetInstanceTpmEkPubCommandInput, + GetInstanceTpmEkPubCommandOutput, +} from "../commands/GetInstanceTpmEkPubCommand"; import { GetInstanceTypesFromInstanceRequirementsCommandInput, GetInstanceTypesFromInstanceRequirementsCommandOutput, @@ -3600,13 +3604,14 @@ import { GetImageBlockPublicAccessStateResult, GetInstanceMetadataDefaultsRequest, GetInstanceMetadataDefaultsResult, + GetInstanceTpmEkPubRequest, + GetInstanceTpmEkPubResult, GetInstanceTypesFromInstanceRequirementsRequest, GetInstanceTypesFromInstanceRequirementsResult, GetInstanceUefiDataRequest, GetInstanceUefiDataResult, GetIpamAddressHistoryRequest, GetIpamAddressHistoryResult, - GetIpamDiscoveredAccountsRequest, InstanceEventWindowDisassociationRequest, InstanceFamilyCreditSpecification, InstanceMetadataDefaultsResponse, @@ -3614,8 +3619,6 @@ import { InstanceUsage, IntegrateServices, IpamAddressHistoryRecord, - IpamDiscoveredAccount, - IpamDiscoveryFailureReason, Ipv6CidrAssociation, MetricPoint, PrivateDnsDetails, @@ -3656,6 +3659,7 @@ import { DiskImageDetail, DnsServersOptionsModifyStructure, EbsInstanceBlockDeviceSpecification, + GetIpamDiscoveredAccountsRequest, GetIpamDiscoveredAccountsResult, GetIpamDiscoveredPublicAddressesRequest, GetIpamDiscoveredPublicAddressesResult, @@ -3735,9 +3739,10 @@ import { InstanceCreditSpecificationRequest, InstanceMonitoring, InstanceRequirementsWithMetadataRequest, - IpamCidrAuthorizationContext, + IpamDiscoveredAccount, IpamDiscoveredPublicAddress, IpamDiscoveredResourceCidr, + IpamDiscoveryFailureReason, IpamPublicAddressSecurityGroup, IpamPublicAddressTag, IpamPublicAddressTags, @@ -3895,9 +3900,6 @@ import { ProvisionByoipCidrResult, ProvisionIpamByoasnRequest, ProvisionIpamByoasnResult, - ProvisionIpamPoolCidrRequest, - ProvisionIpamPoolCidrResult, - ProvisionPublicIpv4PoolCidrRequest, RemoveIpamOperatingRegion, RemovePrefixListEntry, ReservationValue, @@ -3940,9 +3942,13 @@ import { InstanceMarketOptionsRequest, InstanceMetadataOptionsRequest, InstanceStateChange, + IpamCidrAuthorizationContext, LaunchTemplateSpecification, LicenseConfigurationRequest, PrivateDnsNameOptionsRequest, + ProvisionIpamPoolCidrRequest, + ProvisionIpamPoolCidrResult, + ProvisionPublicIpv4PoolCidrRequest, ProvisionPublicIpv4PoolCidrResult, PurchaseCapacityBlockRequest, PurchaseCapacityBlockResult, @@ -11611,6 +11617,23 @@ export const se_GetInstanceMetadataDefaultsCommand = async ( return buildHttpRpcRequest(context, headers, "/", undefined, body); }; +/** + * serializeAws_ec2GetInstanceTpmEkPubCommand + */ +export const se_GetInstanceTpmEkPubCommand = async ( + input: GetInstanceTpmEkPubCommandInput, + context: __SerdeContext +): Promise<__HttpRequest> => { + const headers: __HeaderBag = SHARED_HEADERS; + let body: any; + body = buildFormUrlencodedString({ + ...se_GetInstanceTpmEkPubRequest(input, context), + [_A]: _GITEP, + [_V]: _, + }); + return buildHttpRpcRequest(context, headers, "/", undefined, body); +}; + /** * serializeAws_ec2GetInstanceTypesFromInstanceRequirementsCommand */ @@ -23375,6 +23398,26 @@ export const de_GetInstanceMetadataDefaultsCommand = async ( return response; }; +/** + * deserializeAws_ec2GetInstanceTpmEkPubCommand + */ +export const de_GetInstanceTpmEkPubCommand = async ( + output: __HttpResponse, + context: __SerdeContext +): PromiseGets the public endorsement key associated with the Nitro Trusted \n Platform Module (NitroTPM) for the specified instance.
" + } + }, + "com.amazonaws.ec2#GetInstanceTpmEkPubRequest": { + "type": "structure", + "members": { + "InstanceId": { + "target": "com.amazonaws.ec2#InstanceId", + "traits": { + "smithy.api#clientOptional": {}, + "smithy.api#documentation": "The ID of the instance for which to get the public endorsement key.
", + "smithy.api#required": {}, + "smithy.api#xmlName": "InstanceId" + } + }, + "KeyType": { + "target": "com.amazonaws.ec2#EkPubKeyType", + "traits": { + "smithy.api#clientOptional": {}, + "smithy.api#documentation": "The required public endorsement key type.
", + "smithy.api#required": {} + } + }, + "KeyFormat": { + "target": "com.amazonaws.ec2#EkPubKeyFormat", + "traits": { + "smithy.api#clientOptional": {}, + "smithy.api#documentation": "The required public endorsement key format. Specify der for a DER-encoded public \n key that is compatible with OpenSSL. Specify tpmt for a TPM 2.0 format that is \n compatible with tpm2-tools. The returned key is base64 encoded.
Specify this parameter to verify whether the request will succeed, without actually making the \n request. If the request will succeed, the response is DryRunOperation. Otherwise, \n the response is UnauthorizedOperation.
The ID of the instance.
", + "smithy.api#xmlName": "instanceId" + } + }, + "KeyType": { + "target": "com.amazonaws.ec2#EkPubKeyType", + "traits": { + "aws.protocols#ec2QueryName": "KeyType", + "smithy.api#documentation": "The public endorsement key type.
", + "smithy.api#xmlName": "keyType" + } + }, + "KeyFormat": { + "target": "com.amazonaws.ec2#EkPubKeyFormat", + "traits": { + "aws.protocols#ec2QueryName": "KeyFormat", + "smithy.api#documentation": "The public endorsement key format.
", + "smithy.api#xmlName": "keyFormat" + } + }, + "KeyValue": { + "target": "com.amazonaws.ec2#EkPubKeyValue", + "traits": { + "aws.protocols#ec2QueryName": "KeyValue", + "smithy.api#documentation": "The public endorsement key material.
", + "smithy.api#xmlName": "keyValue" + } + } + }, + "traits": { + "smithy.api#output": {} + } + }, "com.amazonaws.ec2#GetInstanceTypesFromInstanceRequirements": { "type": "operation", "input": {