Skip to content

Commit 46928a7

Browse files
author
awstools
committed
feat(client-elastic-load-balancing-v2): This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule.
1 parent 99b0f8d commit 46928a7

File tree

10 files changed

+418
-48
lines changed

10 files changed

+418
-48
lines changed

‎clients/client-elastic-load-balancing-v2/src/commands/CreateListenerCommand.ts‎

Lines changed: 28 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ export interface CreateListenerCommandOutput extends CreateListenerOutput, __Met
7777
* ],
7878
* DefaultActions: [ // Actions // required
7979
* { // Action
80-
* Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
80+
* Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
8181
* TargetGroupArn: "STRING_VALUE",
8282
* AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
8383
* Issuer: "STRING_VALUE", // required
@@ -133,6 +133,19 @@ export interface CreateListenerCommandOutput extends CreateListenerOutput, __Met
133133
* DurationSeconds: Number("int"),
134134
* },
135135
* },
136+
* JwtValidationConfig: { // JwtValidationActionConfig
137+
* JwksEndpoint: "STRING_VALUE", // required
138+
* Issuer: "STRING_VALUE", // required
139+
* AdditionalClaims: [ // JwtValidationActionAdditionalClaims
140+
* { // JwtValidationActionAdditionalClaim
141+
* Format: "single-string" || "string-array" || "space-separated-values", // required
142+
* Name: "STRING_VALUE", // required
143+
* Values: [ // JwtValidationActionAdditionalClaimValues // required
144+
* "STRING_VALUE",
145+
* ],
146+
* },
147+
* ],
148+
* },
136149
* },
137150
* ],
138151
* AlpnPolicy: [ // AlpnPolicyName
@@ -170,7 +183,7 @@ export interface CreateListenerCommandOutput extends CreateListenerOutput, __Met
170183
* // SslPolicy: "STRING_VALUE",
171184
* // DefaultActions: [ // Actions
172185
* // { // Action
173-
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
186+
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
174187
* // TargetGroupArn: "STRING_VALUE",
175188
* // AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
176189
* // Issuer: "STRING_VALUE", // required
@@ -226,6 +239,19 @@ export interface CreateListenerCommandOutput extends CreateListenerOutput, __Met
226239
* // DurationSeconds: Number("int"),
227240
* // },
228241
* // },
242+
* // JwtValidationConfig: { // JwtValidationActionConfig
243+
* // JwksEndpoint: "STRING_VALUE", // required
244+
* // Issuer: "STRING_VALUE", // required
245+
* // AdditionalClaims: [ // JwtValidationActionAdditionalClaims
246+
* // { // JwtValidationActionAdditionalClaim
247+
* // Format: "single-string" || "string-array" || "space-separated-values", // required
248+
* // Name: "STRING_VALUE", // required
249+
* // Values: [ // JwtValidationActionAdditionalClaimValues // required
250+
* // "STRING_VALUE",
251+
* // ],
252+
* // },
253+
* // ],
254+
* // },
229255
* // },
230256
* // ],
231257
* // AlpnPolicy: [ // AlpnPolicyName

‎clients/client-elastic-load-balancing-v2/src/commands/CreateRuleCommand.ts‎

Lines changed: 28 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -95,7 +95,7 @@ export interface CreateRuleCommandOutput extends CreateRuleOutput, __MetadataBea
9595
* Priority: Number("int"), // required
9696
* Actions: [ // Actions // required
9797
* { // Action
98-
* Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
98+
* Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
9999
* TargetGroupArn: "STRING_VALUE",
100100
* AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
101101
* Issuer: "STRING_VALUE", // required
@@ -151,6 +151,19 @@ export interface CreateRuleCommandOutput extends CreateRuleOutput, __MetadataBea
151151
* DurationSeconds: Number("int"),
152152
* },
153153
* },
154+
* JwtValidationConfig: { // JwtValidationActionConfig
155+
* JwksEndpoint: "STRING_VALUE", // required
156+
* Issuer: "STRING_VALUE", // required
157+
* AdditionalClaims: [ // JwtValidationActionAdditionalClaims
158+
* { // JwtValidationActionAdditionalClaim
159+
* Format: "single-string" || "string-array" || "space-separated-values", // required
160+
* Name: "STRING_VALUE", // required
161+
* Values: [ // JwtValidationActionAdditionalClaimValues // required
162+
* "STRING_VALUE",
163+
* ],
164+
* },
165+
* ],
166+
* },
154167
* },
155168
* ],
156169
* Tags: [ // TagList
@@ -234,7 +247,7 @@ export interface CreateRuleCommandOutput extends CreateRuleOutput, __MetadataBea
234247
* // ],
235248
* // Actions: [ // Actions
236249
* // { // Action
237-
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
250+
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
238251
* // TargetGroupArn: "STRING_VALUE",
239252
* // AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
240253
* // Issuer: "STRING_VALUE", // required
@@ -290,6 +303,19 @@ export interface CreateRuleCommandOutput extends CreateRuleOutput, __MetadataBea
290303
* // DurationSeconds: Number("int"),
291304
* // },
292305
* // },
306+
* // JwtValidationConfig: { // JwtValidationActionConfig
307+
* // JwksEndpoint: "STRING_VALUE", // required
308+
* // Issuer: "STRING_VALUE", // required
309+
* // AdditionalClaims: [ // JwtValidationActionAdditionalClaims
310+
* // { // JwtValidationActionAdditionalClaim
311+
* // Format: "single-string" || "string-array" || "space-separated-values", // required
312+
* // Name: "STRING_VALUE", // required
313+
* // Values: [ // JwtValidationActionAdditionalClaimValues // required
314+
* // "STRING_VALUE",
315+
* // ],
316+
* // },
317+
* // ],
318+
* // },
293319
* // },
294320
* // ],
295321
* // IsDefault: true || false,

‎clients/client-elastic-load-balancing-v2/src/commands/DescribeListenersCommand.ts‎

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ export interface DescribeListenersCommandOutput extends DescribeListenersOutput,
6868
* // SslPolicy: "STRING_VALUE",
6969
* // DefaultActions: [ // Actions
7070
* // { // Action
71-
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
71+
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
7272
* // TargetGroupArn: "STRING_VALUE",
7373
* // AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
7474
* // Issuer: "STRING_VALUE", // required
@@ -124,6 +124,19 @@ export interface DescribeListenersCommandOutput extends DescribeListenersOutput,
124124
* // DurationSeconds: Number("int"),
125125
* // },
126126
* // },
127+
* // JwtValidationConfig: { // JwtValidationActionConfig
128+
* // JwksEndpoint: "STRING_VALUE", // required
129+
* // Issuer: "STRING_VALUE", // required
130+
* // AdditionalClaims: [ // JwtValidationActionAdditionalClaims
131+
* // { // JwtValidationActionAdditionalClaim
132+
* // Format: "single-string" || "string-array" || "space-separated-values", // required
133+
* // Name: "STRING_VALUE", // required
134+
* // Values: [ // JwtValidationActionAdditionalClaimValues // required
135+
* // "STRING_VALUE",
136+
* // ],
137+
* // },
138+
* // ],
139+
* // },
127140
* // },
128141
* // ],
129142
* // AlpnPolicy: [ // AlpnPolicyName

‎clients/client-elastic-load-balancing-v2/src/commands/DescribeRulesCommand.ts‎

Lines changed: 15 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ export interface DescribeRulesCommandOutput extends DescribeRulesOutput, __Metad
3232

3333
/**
3434
* <p>Describes the specified rules or the rules for the specified listener. You must specify
35-
* either a listener or one or more rules.</p>
35+
* either a listener or rules.</p>
3636
* @example
3737
* Use a bare-bones client and the command you need to make an API call.
3838
* ```javascript
@@ -102,7 +102,7 @@ export interface DescribeRulesCommandOutput extends DescribeRulesOutput, __Metad
102102
* // ],
103103
* // Actions: [ // Actions
104104
* // { // Action
105-
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
105+
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
106106
* // TargetGroupArn: "STRING_VALUE",
107107
* // AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
108108
* // Issuer: "STRING_VALUE", // required
@@ -158,6 +158,19 @@ export interface DescribeRulesCommandOutput extends DescribeRulesOutput, __Metad
158158
* // DurationSeconds: Number("int"),
159159
* // },
160160
* // },
161+
* // JwtValidationConfig: { // JwtValidationActionConfig
162+
* // JwksEndpoint: "STRING_VALUE", // required
163+
* // Issuer: "STRING_VALUE", // required
164+
* // AdditionalClaims: [ // JwtValidationActionAdditionalClaims
165+
* // { // JwtValidationActionAdditionalClaim
166+
* // Format: "single-string" || "string-array" || "space-separated-values", // required
167+
* // Name: "STRING_VALUE", // required
168+
* // Values: [ // JwtValidationActionAdditionalClaimValues // required
169+
* // "STRING_VALUE",
170+
* // ],
171+
* // },
172+
* // ],
173+
* // },
161174
* // },
162175
* // ],
163176
* // IsDefault: true || false,

‎clients/client-elastic-load-balancing-v2/src/commands/ModifyListenerCommand.ts‎

Lines changed: 28 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ export interface ModifyListenerCommandOutput extends ModifyListenerOutput, __Met
6060
* ],
6161
* DefaultActions: [ // Actions
6262
* { // Action
63-
* Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
63+
* Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
6464
* TargetGroupArn: "STRING_VALUE",
6565
* AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
6666
* Issuer: "STRING_VALUE", // required
@@ -116,6 +116,19 @@ export interface ModifyListenerCommandOutput extends ModifyListenerOutput, __Met
116116
* DurationSeconds: Number("int"),
117117
* },
118118
* },
119+
* JwtValidationConfig: { // JwtValidationActionConfig
120+
* JwksEndpoint: "STRING_VALUE", // required
121+
* Issuer: "STRING_VALUE", // required
122+
* AdditionalClaims: [ // JwtValidationActionAdditionalClaims
123+
* { // JwtValidationActionAdditionalClaim
124+
* Format: "single-string" || "string-array" || "space-separated-values", // required
125+
* Name: "STRING_VALUE", // required
126+
* Values: [ // JwtValidationActionAdditionalClaimValues // required
127+
* "STRING_VALUE",
128+
* ],
129+
* },
130+
* ],
131+
* },
119132
* },
120133
* ],
121134
* AlpnPolicy: [ // AlpnPolicyName
@@ -147,7 +160,7 @@ export interface ModifyListenerCommandOutput extends ModifyListenerOutput, __Met
147160
* // SslPolicy: "STRING_VALUE",
148161
* // DefaultActions: [ // Actions
149162
* // { // Action
150-
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
163+
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
151164
* // TargetGroupArn: "STRING_VALUE",
152165
* // AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
153166
* // Issuer: "STRING_VALUE", // required
@@ -203,6 +216,19 @@ export interface ModifyListenerCommandOutput extends ModifyListenerOutput, __Met
203216
* // DurationSeconds: Number("int"),
204217
* // },
205218
* // },
219+
* // JwtValidationConfig: { // JwtValidationActionConfig
220+
* // JwksEndpoint: "STRING_VALUE", // required
221+
* // Issuer: "STRING_VALUE", // required
222+
* // AdditionalClaims: [ // JwtValidationActionAdditionalClaims
223+
* // { // JwtValidationActionAdditionalClaim
224+
* // Format: "single-string" || "string-array" || "space-separated-values", // required
225+
* // Name: "STRING_VALUE", // required
226+
* // Values: [ // JwtValidationActionAdditionalClaimValues // required
227+
* // "STRING_VALUE",
228+
* // ],
229+
* // },
230+
* // ],
231+
* // },
206232
* // },
207233
* // ],
208234
* // AlpnPolicy: [ // AlpnPolicyName

‎clients/client-elastic-load-balancing-v2/src/commands/ModifyRuleCommand.ts‎

Lines changed: 28 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -92,7 +92,7 @@ export interface ModifyRuleCommandOutput extends ModifyRuleOutput, __MetadataBea
9292
* ],
9393
* Actions: [ // Actions
9494
* { // Action
95-
* Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
95+
* Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
9696
* TargetGroupArn: "STRING_VALUE",
9797
* AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
9898
* Issuer: "STRING_VALUE", // required
@@ -148,6 +148,19 @@ export interface ModifyRuleCommandOutput extends ModifyRuleOutput, __MetadataBea
148148
* DurationSeconds: Number("int"),
149149
* },
150150
* },
151+
* JwtValidationConfig: { // JwtValidationActionConfig
152+
* JwksEndpoint: "STRING_VALUE", // required
153+
* Issuer: "STRING_VALUE", // required
154+
* AdditionalClaims: [ // JwtValidationActionAdditionalClaims
155+
* { // JwtValidationActionAdditionalClaim
156+
* Format: "single-string" || "string-array" || "space-separated-values", // required
157+
* Name: "STRING_VALUE", // required
158+
* Values: [ // JwtValidationActionAdditionalClaimValues // required
159+
* "STRING_VALUE",
160+
* ],
161+
* },
162+
* ],
163+
* },
151164
* },
152165
* ],
153166
* Transforms: [ // RuleTransformList
@@ -226,7 +239,7 @@ export interface ModifyRuleCommandOutput extends ModifyRuleOutput, __MetadataBea
226239
* // ],
227240
* // Actions: [ // Actions
228241
* // { // Action
229-
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
242+
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
230243
* // TargetGroupArn: "STRING_VALUE",
231244
* // AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
232245
* // Issuer: "STRING_VALUE", // required
@@ -282,6 +295,19 @@ export interface ModifyRuleCommandOutput extends ModifyRuleOutput, __MetadataBea
282295
* // DurationSeconds: Number("int"),
283296
* // },
284297
* // },
298+
* // JwtValidationConfig: { // JwtValidationActionConfig
299+
* // JwksEndpoint: "STRING_VALUE", // required
300+
* // Issuer: "STRING_VALUE", // required
301+
* // AdditionalClaims: [ // JwtValidationActionAdditionalClaims
302+
* // { // JwtValidationActionAdditionalClaim
303+
* // Format: "single-string" || "string-array" || "space-separated-values", // required
304+
* // Name: "STRING_VALUE", // required
305+
* // Values: [ // JwtValidationActionAdditionalClaimValues // required
306+
* // "STRING_VALUE",
307+
* // ],
308+
* // },
309+
* // ],
310+
* // },
285311
* // },
286312
* // ],
287313
* // IsDefault: true || false,

‎clients/client-elastic-load-balancing-v2/src/commands/SetRulePrioritiesCommand.ts‎

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@ export interface SetRulePrioritiesCommandOutput extends SetRulePrioritiesOutput,
103103
* // ],
104104
* // Actions: [ // Actions
105105
* // { // Action
106-
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response", // required
106+
* // Type: "forward" || "authenticate-oidc" || "authenticate-cognito" || "redirect" || "fixed-response" || "jwt-validation", // required
107107
* // TargetGroupArn: "STRING_VALUE",
108108
* // AuthenticateOidcConfig: { // AuthenticateOidcActionConfig
109109
* // Issuer: "STRING_VALUE", // required
@@ -159,6 +159,19 @@ export interface SetRulePrioritiesCommandOutput extends SetRulePrioritiesOutput,
159159
* // DurationSeconds: Number("int"),
160160
* // },
161161
* // },
162+
* // JwtValidationConfig: { // JwtValidationActionConfig
163+
* // JwksEndpoint: "STRING_VALUE", // required
164+
* // Issuer: "STRING_VALUE", // required
165+
* // AdditionalClaims: [ // JwtValidationActionAdditionalClaims
166+
* // { // JwtValidationActionAdditionalClaim
167+
* // Format: "single-string" || "string-array" || "space-separated-values", // required
168+
* // Name: "STRING_VALUE", // required
169+
* // Values: [ // JwtValidationActionAdditionalClaimValues // required
170+
* // "STRING_VALUE",
171+
* // ],
172+
* // },
173+
* // ],
174+
* // },
162175
* // },
163176
* // ],
164177
* // IsDefault: true || false,

0 commit comments

Comments
 (0)