|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/boto/cloudhsm/__pycache__/ |
Upload File : |
o
ckF[;? � @ sX d dl Z d dlmZ d dlmZ d dlmZ d dlmZ d dl m
Z
G dd� de�Z dS ) � N)�json)�AWSQueryConnection)�
RegionInfo)�JSONResponseError)�
exceptionsc s e Zd ZdZdZdZdZdZdZe Z
e j e j
e jd�Z� fdd �Zd
d � Zd d
� Z d1dd�Zd2dd�Zdd� Zdd� Zdd� Zdd� Zd3dd �Z d3d d �Zd d � Zd!d"� Z d2d#d$�Z d2d%d&�Z d2d'd(�Z d3d)d*�Z d4d+d,�Z!d-d.� Z"d/d0� Z#� Z$S )5�CloudHSMConnectionz
AWS CloudHSM Service
z
2014-05-30z us-east-1z cloudhsm.us-east-1.amazonaws.com�CloudHSM�CloudHsmFrontendService)�InvalidRequestException�CloudHsmServiceException�CloudHsmInternalExceptionc s^ |� dd �}|st| | j| j�}d|vs|d d u r |j|d< tt| �jdi |�� || _d S )N�region�host� ) �popr �DefaultRegionName�DefaultRegionEndpoint�endpoint�superr �__init__r
)�self�kwargsr
�� __class__r �6/usr/lib/python3/dist-packages/boto/cloudhsm/layer1.pyr 1 s �
zCloudHSMConnection.__init__c C s dgS )Nzhmac-v4r )r r r r �_required_auth_capability= s z,CloudHSMConnection._required_auth_capabilityc C � d|i}| j dt�|�d�S )a
Creates a high-availability partition group. A high-
availability partition group is a group of partitions that
spans multiple physical HSMs.
:type label: string
:param label: The label of the new high-availability partition group.
�Label�
CreateHapg��action�body�� make_requestr �dumps)r �label�paramsr r r � create_hapg@ �
�z CloudHSMConnection.create_hapgNc
C sb ||||d�} |dur|| d< |dur|| d< |dur || d< |dur'|| d< | j dt�| �d�S ) a�
Creates an uninitialized HSM instance. Running this command
provisions an HSM appliance and will result in charges to your
AWS account for the HSM.
:type subnet_id: string
:param subnet_id: The identifier of the subnet in your VPC in which to
place the HSM.
:type ssh_key: string
:param ssh_key: The SSH public key to install on the HSM.
:type eni_ip: string
:param eni_ip: The IP address to assign to the HSM's ENI.
:type iam_role_arn: string
:param iam_role_arn: The ARN of an IAM role to enable the AWS CloudHSM
service to allocate an ENI on your behalf.
:type external_id: string
:param external_id: The external ID from **IamRoleArn**, if present.
:type subscription_type: string
:param subscription_type: The subscription type.
:type client_token: string
:param client_token: A user-defined token to ensure idempotence.
Subsequent calls to this action with the same token will be
ignored.
:type syslog_ip: string
:param syslog_ip: The IP address for the syslog monitoring server.
)�SubnetId�SshKey�
IamRoleArn�SubscriptionTypeN�EniIp�
ExternalId� ClientToken�SyslogIp� CreateHsmr r" )
r � subnet_id�ssh_key� iam_role_arn�subscription_type�eni_ip� external_id� client_token� syslog_ipr& r r r �
create_hsmN s &��z CloudHSMConnection.create_hsmc C s, d|i}|dur ||d< | j dt�|�d�S )a(
Creates an HSM client.
:type label: string
:param label: The label for the client.
:type certificate: string
:param certificate: The contents of a Base64-Encoded X.509 v3
certificate to be installed on the HSMs used by this client.
� CertificateNr �CreateLunaClientr r" )r � certificater% r& r r r �create_luna_client� s �z%CloudHSMConnection.create_luna_clientc C r )z�
Deletes a high-availability partition group.
:type hapg_arn: string
:param hapg_arn: The ARN of the high-availability partition group to
delete.
�HapgArn�
DeleteHapgr r" �r �hapg_arnr& r r r � delete_hapg� � �z CloudHSMConnection.delete_hapgc C r )z�
Deletes an HSM. Once complete, this operation cannot be undone
and your key material cannot be recovered.
:type hsm_arn: string
:param hsm_arn: The ARN of the HSM to delete.
�HsmArn� DeleteHsmr r" )r �hsm_arnr& r r r �
delete_hsm� rD z CloudHSMConnection.delete_hsmc C r )z�
Deletes a client.
:type client_arn: string
:param client_arn: The ARN of the client to delete.
� ClientArn�DeleteLunaClientr r" )r �
client_arnr& r r r �delete_luna_client� s �z%CloudHSMConnection.delete_luna_clientc C r )z�
Retrieves information about a high-availability partition
group.
:type hapg_arn: string
:param hapg_arn: The ARN of the high-availability partition group to
describe.
r? � DescribeHapgr r" rA r r r �
describe_hapg� r( z CloudHSMConnection.describe_hapgc C �8 i }|dur
||d< |dur||d< | j dt�|�d�S )a�
Retrieves information about an HSM. You can identify the HSM
by its ARN or its serial number.
:type hsm_arn: string
:param hsm_arn: The ARN of the HSM. Either the HsmArn or the
SerialNumber parameter must be specified.
:type hsm_serial_number: string
:param hsm_serial_number: The serial number of the HSM. Either the
HsmArn or the HsmSerialNumber parameter must be specified.
NrE �HsmSerialNumber� DescribeHsmr r" )r rG �hsm_serial_numberr& r r r � describe_hsm� s �z CloudHSMConnection.describe_hsmc C rO )a
Retrieves information about an HSM client.
:type client_arn: string
:param client_arn: The ARN of the client.
:type certificate_fingerprint: string
:param certificate_fingerprint: The certificate fingerprint.
NrI �CertificateFingerprint�DescribeLunaClientr r" )r rK �certificate_fingerprintr& r r r �describe_luna_client� s �z'CloudHSMConnection.describe_luna_clientc C s |||d�}| j dt�|�d�S )a�
Gets the configuration files necessary to connect to all high
availability partition groups the client is associated with.
:type client_arn: string
:param client_arn: The ARN of the client.
:type client_version: string
:param client_version: The client version.
:type hapg_list: list
:param hapg_list: A list of ARNs that identify the high-availability
partition groups that are associated with the client.
)rI �
ClientVersion�HapgList� GetConfigr r" )r rK �client_version� hapg_listr& r r r �
get_config� s ��z CloudHSMConnection.get_configc C s i }| j dt�|�d�S )zk
Lists the Availability Zones that have available AWS CloudHSM
capacity.
�ListAvailableZonesr r" )r r& r r r �list_available_zones s �z'CloudHSMConnection.list_available_zonesc C �( i }|dur
||d< | j dt�|�d�S )a
Lists the high-availability partition groups for the account.
This operation supports pagination with the use of the
NextToken member. If more results are available, the NextToken
member of the response contains a token that you pass in the
next call to ListHapgs to retrieve the next set of items.
:type next_token: string
:param next_token: The NextToken value from a previous call to
ListHapgs. Pass null if this is the first call.
N� NextToken� ListHapgsr r" �r �
next_tokenr& r r r �
list_hapgs s �z CloudHSMConnection.list_hapgsc C r` )a
Retrieves the identifiers of all of the HSMs provisioned for
the current customer.
This operation supports pagination with the use of the
NextToken member. If more results are available, the NextToken
member of the response contains a token that you pass in the
next call to ListHsms to retrieve the next set of items.
:type next_token: string
:param next_token: The NextToken value from a previous call to
ListHsms. Pass null if this is the first call.
Nra �ListHsmsr r" rc r r r � list_hsms+ � �z CloudHSMConnection.list_hsmsc C r` )a�
Lists all of the clients.
This operation supports pagination with the use of the
NextToken member. If more results are available, the NextToken
member of the response contains a token that you pass in the
next call to ListLunaClients to retrieve the next set of
items.
:type next_token: string
:param next_token: The NextToken value from a previous call to
ListLunaClients. Pass null if this is the first call.
Nra �ListLunaClientsr r" rc r r r �list_luna_clients@ rh z$CloudHSMConnection.list_luna_clientsc C s< d|i}|dur ||d< |dur||d< | j dt�|�d�S )a�
Modifies an existing high-availability partition group.
:type hapg_arn: string
:param hapg_arn: The ARN of the high-availability partition group to
modify.
:type label: string
:param label: The new label for the high-availability partition group.
:type partition_serial_list: list
:param partition_serial_list: The list of partition serial numbers to
make members of the high-availability partition group.
r? Nr �PartitionSerialList�
ModifyHapgr r" )r rB r% �partition_serial_listr& r r r � modify_hapgU s �z CloudHSMConnection.modify_hapgc C sl d|i}|dur ||d< |dur||d< |dur ||d< |dur$||d< |dur,||d< | j dt�|�d �S )
a�
Modifies an HSM.
:type hsm_arn: string
:param hsm_arn: The ARN of the HSM to modify.
:type subnet_id: string
:param subnet_id: The new identifier of the subnet that the HSM is in.
:type eni_ip: string
:param eni_ip: The new IP address for the elastic network interface
attached to the HSM.
:type iam_role_arn: string
:param iam_role_arn: The new IAM role ARN.
:type external_id: string
:param external_id: The new external ID.
:type syslog_ip: string
:param syslog_ip: The new IP address for the syslog monitoring server.
rE Nr) r- r+ r. r0 � ModifyHsmr r" )r rG r2 r6 r4 r7 r9 r& r r r �
modify_hsmm s �z CloudHSMConnection.modify_hsmc C s ||d�}| j dt�|�d�S )ai
Modifies the certificate used by the client.
This action can potentially start a workflow to install the
new certificate on the client's HSMs.
:type client_arn: string
:param client_arn: The ARN of the client.
:type certificate: string
:param certificate: The new certificate for the client.
)rI r; �ModifyLunaClientr r" )r rK r= r& r r r �modify_luna_client� s ��z%CloudHSMConnection.modify_luna_clientc
C s� d| j |f | jjdtt|��d�}| jdddi ||d�}| j|d dd�}|�� �d �}t j
� |� |j d
kr@|r>t
�|�S d S t
�|�}|�d d �}| j�|| j�} | |j |j|d ��)
Nz%s.%szapplication/x-amz-json-1.1)z X-Amz-Target�Hostz Content-TypezContent-Length�POST�/)�method�path� auth_pathr& �headers�data�
)�sender�override_num_retrieszutf-8�� �__type)r! )� TargetPrefixr
r �str�len�build_base_http_request�_mexe�read�decode�boto�log�debug�statusr �loads�get�_faults�
ResponseError�reason)
r r r! ry � http_request�response�
response_body� json_body�
fault_name�exception_classr r r r# � s0
���
�
�z CloudHSMConnection.make_request)NNNN)N)NN)NNNNN)%�__name__�
__module__� __qualname__�__doc__�
APIVersionr r � ServiceNamer� r r� r r
r r r� r r r' r: r> rC rH rL rN rS rW r] r_ re rg rj rn rp rr r# �
__classcell__r r r r r sL �
�
6
�
�'r ) r� � boto.compatr �boto.connectionr �boto.regioninfor �boto.exceptionr �
boto.cloudhsmr r r r r r �<module> s