AWS IoT Update: This release allows AWS IoT Core users to specify a TLS security policy when creating and updating AWS IoT Domain Configurations.

Author: AWS

.changes/next-release/feature-AWSIoT-49fcae2.json

@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "AWS IoT",
+    "contributor": "",
+    "description": "This release allows AWS IoT Core users to specify a TLS security policy when creating and updating AWS IoT Domain Configurations."
+}

services/iot/src/main/resources/codegen-resources/endpoint-tests.json

@@ -468,6 +468,17 @@
                 "UseDualStack": true
             }
         },
+        {
+            "documentation": "For region us-iso-east-1 with FIPS enabled and DualStack enabled",
+            "expect": {
+                "error": "FIPS and DualStack are enabled, but this partition does not support one or both"
+            },
+            "params": {
+                "Region": "us-iso-east-1",
+                "UseFIPS": true,
+                "UseDualStack": true
+            }
+        },
         {
             "documentation": "For region us-iso-east-1 with FIPS enabled and DualStack disabled",
             "expect": {
@@ -481,6 +492,17 @@
                 "UseDualStack": false
             }
         },
+        {
+            "documentation": "For region us-iso-east-1 with FIPS disabled and DualStack enabled",
+            "expect": {
+                "error": "DualStack is enabled but this partition does not support DualStack"
+            },
+            "params": {
+                "Region": "us-iso-east-1",
+                "UseFIPS": false,
+                "UseDualStack": true
+            }
+        },
         {
             "documentation": "For region us-iso-east-1 with FIPS disabled and DualStack disabled",
             "expect": {
@@ -494,6 +516,17 @@
                 "UseDualStack": false
             }
         },
+        {
+            "documentation": "For region us-isob-east-1 with FIPS enabled and DualStack enabled",
+            "expect": {
+                "error": "FIPS and DualStack are enabled, but this partition does not support one or both"
+            },
+            "params": {
+                "Region": "us-isob-east-1",
+                "UseFIPS": true,
+                "UseDualStack": true
+            }
+        },
         {
             "documentation": "For region us-isob-east-1 with FIPS enabled and DualStack disabled",
             "expect": {
@@ -507,6 +540,17 @@
                 "UseDualStack": false
             }
         },
+        {
+            "documentation": "For region us-isob-east-1 with FIPS disabled and DualStack enabled",
+            "expect": {
+                "error": "DualStack is enabled but this partition does not support DualStack"
+            },
+            "params": {
+                "Region": "us-isob-east-1",
+                "UseFIPS": false,
+                "UseDualStack": true
+            }
+        },
         {
             "documentation": "For region us-isob-east-1 with FIPS disabled and DualStack disabled",
             "expect": {
@@ -570,6 +614,12 @@
                 "UseDualStack": true,
                 "Endpoint": "https://example.com"
             }
+        },
+        {
+            "documentation": "Missing region",
+            "expect": {
+                "error": "Invalid Configuration: Missing Region"
+            }
         }
     ],
     "version": "1.0"

services/iot/src/main/resources/codegen-resources/service-2.json

@@ -6604,6 +6604,10 @@
         "tags":{
           "shape":"TagList",
           "documentation":"<p>Metadata which can be used to manage the domain configuration.</p> <note> <p>For URI Request parameters use format: ...key1=value1&amp;key2=value2...</p> <p>For the CLI command-line parameter use format: &amp;&amp;tags \"key1=value1&amp;key2=value2...\"</p> <p>For the cli-input-json file use format: \"tags\": \"key1=value1&amp;key2=value2...\"</p> </note>"
+        },
+        "tlsConfig":{
+          "shape":"TlsConfig",
+          "documentation":"<p>An object that specifies the TLS configuration for a domain.</p>"
         }
       }
     },
@@ -8830,6 +8834,10 @@
         "lastStatusChangeDate":{
           "shape":"DateType",
           "documentation":"<p>The date and time the domain configuration's status was last changed.</p>"
+        },
+        "tlsConfig":{
+          "shape":"TlsConfig",
+          "documentation":"<p>An object that specifies the TLS configuration for a domain.</p>"
         }
       }
     },
@@ -16443,6 +16451,11 @@
       "type":"list",
       "member":{"shape":"SecurityGroupId"}
     },
+    "SecurityPolicy":{
+      "type":"string",
+      "max":128,
+      "pattern":"[\\s\\S]*"
+    },
     "SecurityProfileArn":{"type":"string"},
     "SecurityProfileDescription":{
       "type":"string",
@@ -17953,6 +17966,16 @@
       "max":10,
       "min":1
     },
+    "TlsConfig":{
+      "type":"structure",
+      "members":{
+        "securityPolicy":{
+          "shape":"SecurityPolicy",
+          "documentation":"<p>The security policy for a domain configuration. For more information, see <a href=\"https://docs.aws.amazon.com/iot/latest/developerguide/transport-security.html#tls-policy-table\">Security policies </a> in the <i>Amazon Web Services IoT Core developer guide</i>.</p>"
+        }
+      },
+      "documentation":"<p>An object that specifies the TLS configuration for a domain.</p>"
+    },
     "TlsContext":{
       "type":"structure",
       "members":{
@@ -18640,6 +18663,10 @@
         "removeAuthorizerConfig":{
           "shape":"RemoveAuthorizerConfig",
           "documentation":"<p>Removes the authorization configuration from a domain.</p>"
+        },
+        "tlsConfig":{
+          "shape":"TlsConfig",
+          "documentation":"<p>An object that specifies the TLS configuration for a domain.</p>"
         }
       }
     },