AWSRequestAuthorizer
public class CloudFrontService extends Object implements AWSRequestAuthorizer
This class uses properties obtained through Jets3tProperties
. For more information on
these properties please refer to
JetS3t Configuration
Modifier and Type | Field | Description |
---|---|---|
static String |
DEFAULT_BUCKET_SUFFIX |
|
static String |
ENDPOINT |
|
static String |
ORIGIN_ACCESS_IDENTITY_PREFIX |
|
static String |
ORIGIN_ACCESS_IDENTITY_URI_PATH |
|
static String |
VERSION |
|
static String |
XML_NAMESPACE |
Constructor | Description |
---|---|
CloudFrontService(ProviderCredentials credentials) |
Constructs the service with default properties.
|
CloudFrontService(ProviderCredentials credentials,
String invokingApplicationDescription,
org.apache.commons.httpclient.auth.CredentialsProvider credentialsProvider,
Jets3tProperties jets3tProperties,
org.apache.commons.httpclient.HostConfiguration hostConfig) |
Constructs the service and initialises its properties.
|
Modifier and Type | Method | Description |
---|---|---|
void |
authorizeHttpRequest(org.apache.commons.httpclient.HttpMethod httpMethod) |
Sign the given HTTP method object using the AWS credentials provided
by
getAWSCredentials() . |
static String |
buildPolicyForSignedUrl(String resourcePath,
Date epochDateLessThan,
String limitToIpAddressCIDR,
Date epochDateGreaterThan) |
Generate a policy document that describes custom access permissions to apply
via a private distribution's signed URL.
|
Distribution |
createDistribution(DistributionConfig config) |
Create a public or private CloudFront distribution for an S3 bucket based
on a pre-configured
DistributionConfig . |
Distribution |
createDistribution(Origin origin) |
Create a minimally-configured CloudFront distribution for an S3 bucket that will
be publicly available once created.
|
Distribution |
createDistribution(Origin origin,
String callerReference,
String[] cnames,
String comment,
boolean enabled,
LoggingStatus loggingStatus) |
Create a public CloudFront distribution for an S3 bucket.
|
Distribution |
createDistribution(Origin origin,
String callerReference,
String[] cnames,
String comment,
boolean enabled,
LoggingStatus loggingStatus,
boolean trustedSignerSelf,
String[] trustedSignerAwsAccountNumbers,
String[] requiredProtocols,
String defaultRootObject) |
Create a public or private CloudFront distribution for an S3 bucket.
|
OriginAccessIdentity |
createOriginAccessIdentity(String callerReference,
String comment) |
Create a new Origin Access Identity
|
StreamingDistribution |
createStreamingDistribution(Origin origin,
String callerReference,
String[] cnames,
String comment,
boolean enabled,
LoggingStatus loggingStatus) |
Create a public streaming CloudFront distribution for an S3 bucket.
|
StreamingDistribution |
createStreamingDistribution(Origin origin,
String callerReference,
String[] cnames,
String comment,
boolean enabled,
LoggingStatus loggingStatus,
boolean trustedSignerSelf,
String[] trustedSignerAwsAccountNumbers) |
Create a public or private streaming CloudFront distribution for an S3 bucket.
|
void |
deleteDistribution(String id) |
Delete a disabled distribution.
|
void |
deleteOriginAccessIdentity(String id) |
Delete an Origin Access Identity.
|
void |
deleteStreamingDistribution(String id) |
Delete a disabled streaming distribution.
|
void |
disableDistributionForDeletion(String id) |
Convenience method to disable a distribution that you intend to delete.
|
void |
disableStreamingDistributionForDeletion(String id) |
Convenience method to disable a streaming distribution that you intend to delete.
|
ProviderCredentials |
getAWSCredentials() |
|
DistributionConfig |
getDistributionConfig(String id) |
Lookup configuration information for a standard distribution.
|
Distribution |
getDistributionInfo(String id) |
Lookup information for a standard distribution.
|
Invalidation |
getInvalidation(String distributionId,
String invalidationId) |
|
OriginAccessIdentity |
getOriginAccessIdentity(String id) |
Obtain the complete properties of an Origin Access Identity.
|
OriginAccessIdentityConfig |
getOriginAccessIdentityConfig(String id) |
Obtain the configuration properties of an Origin Access Identity.
|
List<OriginAccessIdentity> |
getOriginAccessIdentityList() |
List the Origin Access Identities in a CloudFront account.
|
StreamingDistributionConfig |
getStreamingDistributionConfig(String id) |
Lookup configuration information for a streaming distribution.
|
StreamingDistribution |
getStreamingDistributionInfo(String id) |
Lookup information for a streaming distribution.
|
Invalidation |
invalidateObjects(String distributionId,
String[] objectKeys,
String callerReference) |
Remove distribution objects from a CloudFront edge server cache to force
a refresh of the object data from the S3 origin.
|
Invalidation |
invalidateObjects(String distributionId,
S3Object[] objects,
String callerReference) |
Remove distribution objects from a CloudFront edge server cache to force
a refresh of the object data from the S3 origin.
|
Distribution[] |
listDistributions() |
List all your standard CloudFront distributions.
|
Distribution[] |
listDistributions(int pagingSize) |
List all your standard CloudFront distributions, with a given maximum
number of Distribution items in each "page" of results.
|
Distribution[] |
listDistributions(String bucketName) |
List the distributions whose origin is the given S3 bucket name.
|
List<Distribution> |
listDistributionsByBucketName(boolean isStreaming,
String bucketName) |
List streaming or non-stream distributions whose origin is the given S3 bucket name.
|
List<InvalidationSummary> |
listInvalidations(String distributionId) |
List all past invalidation summaries, ordered from most recent to oldest.
|
InvalidationList |
listInvalidations(String distributionId,
String nextMarker,
int pagingSize) |
List a single page of up to pagingSize past invalidation summaries, ordered from
most recent to oldest.
|
StreamingDistribution[] |
listStreamingDistributions() |
List all your streaming CloudFront distributions.
|
StreamingDistribution[] |
listStreamingDistributions(int pagingSize) |
List all your streaming CloudFront distributions, with a given maximum
number of Distribution items in each "page" of results.
|
StreamingDistribution[] |
listStreamingDistributions(String bucketName) |
List the streaming distributions whose origin is the given S3 bucket name.
|
static String |
sanitizeS3BucketName(String proposedBucketName) |
Sanitizes a proposed bucket name to ensure it is fully-specified rather than
merely the bucket's short name.
|
static String |
signUrl(String resourceUrlOrPath,
String keyPairId,
byte[] derPrivateKey,
String policy) |
Generate a signed URL that allows access to distribution and S3 objects by
applying access restrictions specified in a custom policy document.
|
static String |
signUrlCanned(String resourceUrlOrPath,
String keyPairId,
byte[] derPrivateKey,
Date epochDateLessThan) |
Generate a signed URL that allows access to a specific distribution and
S3 object by applying a access restrictions from a "canned" (simplified)
policy document.
|
DistributionConfig |
updateDistributionConfig(String id,
DistributionConfig config) |
Update the configuration of an existing distribution to change its properties
or public/private status.
|
DistributionConfig |
updateDistributionConfig(String id,
Origin origin,
String[] cnames,
String comment,
boolean enabled,
LoggingStatus loggingStatus) |
Update the configuration of an existing distribution to change its properties.
|
DistributionConfig |
updateDistributionConfig(String id,
Origin origin,
String[] cnames,
String comment,
boolean enabled,
LoggingStatus loggingStatus,
boolean trustedSignerSelf,
String[] trustedSignerAwsAccountNumbers,
String[] requiredProtocols,
String defaultRootObject) |
Update the configuration of an existing distribution to change its properties
or public/private status.
|
OriginAccessIdentityConfig |
updateOriginAccessIdentityConfig(String id,
String comment) |
Update the properties of an Origin Access Identity.
|
StreamingDistributionConfig |
updateStreamingDistributionConfig(String id,
Origin origin,
String[] cnames,
String comment,
boolean enabled,
LoggingStatus loggingStatus) |
Update the configuration of an existing streaming distribution to change its
properties.
|
StreamingDistributionConfig |
updateStreamingDistributionConfig(String id,
Origin origin,
String[] cnames,
String comment,
boolean enabled,
LoggingStatus loggingStatus,
boolean trustedSignerSelf,
String[] trustedSignerAwsAccountNumbers) |
Update the configuration of an existing streaming distribution to change its
properties.
|
public static final String ENDPOINT
public static final String VERSION
public static final String XML_NAMESPACE
public static final String DEFAULT_BUCKET_SUFFIX
public static final String ORIGIN_ACCESS_IDENTITY_URI_PATH
public static final String ORIGIN_ACCESS_IDENTITY_PREFIX
public CloudFrontService(ProviderCredentials credentials, String invokingApplicationDescription, org.apache.commons.httpclient.auth.CredentialsProvider credentialsProvider, Jets3tProperties jets3tProperties, org.apache.commons.httpclient.HostConfiguration hostConfig) throws CloudFrontServiceException
credentials
- the Storage Provider user credentials to use when communicating with CloudFrontinvokingApplicationDescription
- a short description of the application using the service, suitable for inclusion in a
user agent string for REST/HTTP requests. Ideally this would include the application's
version number, for example: Cockpit/0.7.3
or My App Name/1.0
.
May be null.credentialsProvider
- an implementation of the HttpClient CredentialsProvider interface, to provide a means for
prompting for credentials when necessary. May be null.jets3tProperties
- JetS3t properties that will be applied within this service. May be null.hostConfig
- Custom HTTP host configuration; e.g to register a custom Protocol Socket Factory.
May be null.CloudFrontServiceException
public CloudFrontService(ProviderCredentials credentials) throws CloudFrontServiceException
credentials
- the Storage Provider user credentials to use when communicating with CloudFrontCloudFrontServiceException
public ProviderCredentials getAWSCredentials()
public void authorizeHttpRequest(org.apache.commons.httpclient.HttpMethod httpMethod) throws Exception
getAWSCredentials()
.authorizeHttpRequest
in interface AWSRequestAuthorizer
httpMethod
- the request objectException
public Distribution[] listDistributions(int pagingSize) throws CloudFrontServiceException
pagingSize
- the maximum number of distributions the CloudFront service will
return in each response message.CloudFrontServiceException
public StreamingDistribution[] listStreamingDistributions(int pagingSize) throws CloudFrontServiceException
pagingSize
- the maximum number of distributions the CloudFront service will
return in each response message.CloudFrontServiceException
public Distribution[] listDistributions() throws CloudFrontServiceException
CloudFrontServiceException
public StreamingDistribution[] listStreamingDistributions() throws CloudFrontServiceException
CloudFrontServiceException
public List<Distribution> listDistributionsByBucketName(boolean isStreaming, String bucketName) throws CloudFrontServiceException
bucketName
- the name of the S3 bucket whose distributions will be returned.CloudFrontServiceException
public Distribution[] listDistributions(String bucketName) throws CloudFrontServiceException
bucketName
- the name of the S3 bucket whose distributions will be returned.CloudFrontServiceException
public StreamingDistribution[] listStreamingDistributions(String bucketName) throws CloudFrontServiceException
bucketName
- the name of the S3 bucket whose distributions will be returned.CloudFrontServiceException
public Distribution createDistribution(Origin origin, String callerReference, String[] cnames, String comment, boolean enabled, LoggingStatus loggingStatus, boolean trustedSignerSelf, String[] trustedSignerAwsAccountNumbers, String[] requiredProtocols, String defaultRootObject) throws CloudFrontServiceException
origin
- the origin to associate with the distribution, either an Amazon S3 bucket or
a custom HTTP/S-accessible location.callerReference
- A user-set unique reference value that ensures the request can't be replayed
(max UTF-8 encoding size 128 bytes). This parameter may be null, in which
case your computer's local epoch time in milliseconds will be used.cnames
- A list of up to 10 CNAME aliases to associate with the distribution. This
parameter may be a null or empty array.comment
- An optional comment to describe the distribution in your own terms
(max 128 characters). May be null.enabled
- Should the distribution should be enabled and publicly accessible upon creation?loggingStatus
- Logging status settings (bucket, prefix) for the distribution. If this value
is null, logging will be disabled for the distribution.trustedSignerSelf
- If true the owner of the distribution (you) will be be allowed to generate
signed URLs for a private distribution. Note: If either trustedSignerSelf or
trustedSignerAwsAccountNumbers parameters are provided the private distribution
will require signed URLs to access content.trustedSignerAwsAccountNumbers
- Account Number identifiers for AWS account holders other than the
distribution's owner who will be allowed to generate signed URLs for a private
distribution. If null or empty, no additional AWS account holders may generate
signed URLs. Note: If either trustedSignerSelf or
trustedSignerAwsAccountNumbers parameters are provided the private distribution
will require signed URLs to access content.requiredProtocols
- List of protocols that must be used by clients to retrieve content from the
distribution. If this value is null or is an empty array, all protocols will be
supported.defaultRootObject
- The name of an object that will be served when someone visits the root of a
distribution.CloudFrontServiceException
public Distribution createDistribution(Origin origin) throws CloudFrontServiceException
origin
- the origin to associate with the distribution, either an Amazon S3 bucket or
a custom HTTP/S-accessible location.CloudFrontServiceException
public Distribution createDistribution(Origin origin, String callerReference, String[] cnames, String comment, boolean enabled, LoggingStatus loggingStatus) throws CloudFrontServiceException
origin
- the origin to associate with the distribution, either an Amazon S3 bucket or
a custom HTTP/S-accessible location.callerReference
- A user-set unique reference value that ensures the request can't be replayed
(max UTF-8 encoding size 128 bytes). This parameter may be null, in which
case your computer's local epoch time in milliseconds will be used.cnames
- A list of up to 10 CNAME aliases to associate with the distribution. This
parameter may be a null or empty array.comment
- An optional comment to describe the distribution in your own terms
(max 128 characters). May be null.enabled
- Should the distribution should be enabled and publicly accessible upon creation?loggingStatus
- Logging status settings (bucket, prefix) for the distribution. If this value
is null, logging will be disabled for the distribution.CloudFrontServiceException
public Distribution createDistribution(DistributionConfig config) throws CloudFrontServiceException
DistributionConfig
.config
- Configuration settings to apply to the distribution.CloudFrontServiceException
public StreamingDistribution createStreamingDistribution(Origin origin, String callerReference, String[] cnames, String comment, boolean enabled, LoggingStatus loggingStatus, boolean trustedSignerSelf, String[] trustedSignerAwsAccountNumbers) throws CloudFrontServiceException
origin
- the origin to associate with the distribution, either an Amazon S3 bucket or
a custom HTTP/S-accessible location.callerReference
- A user-set unique reference value that ensures the request can't be replayed
(max UTF-8 encoding size 128 bytes). This parameter may be null, in which
case your computer's local epoch time in milliseconds will be used.cnames
- A list of up to 10 CNAME aliases to associate with the distribution. This
parameter may be a null or empty array.comment
- An optional comment to describe the distribution in your own terms
(max 128 characters). May be null.enabled
- Should the distribution should be enabled and publicly accessible upon creation?loggingStatus
- Logging status settings (bucket, prefix) for the distribution. If this value
is null, logging will be disabled for the distribution.trustedSignerSelf
- If true the owner of the distribution (you) will be be allowed to generate
signed URLs for a private distribution. Note: If either trustedSignerSelf or
trustedSignerAwsAccountNumbers parameters are provided the private distribution
will require signed URLs to access content.trustedSignerAwsAccountNumbers
- Account Number identifiers for AWS account holders other than the
distribution's owner who will be allowed to generate signed URLs for a private
distribution. If null or empty, no additional AWS account holders may generate
signed URLs. Note: If either trustedSignerSelf or
trustedSignerAwsAccountNumbers parameters are provided the private distribution
will require signed URLs to access content.CloudFrontServiceException
public StreamingDistribution createStreamingDistribution(Origin origin, String callerReference, String[] cnames, String comment, boolean enabled, LoggingStatus loggingStatus) throws CloudFrontServiceException
origin
- the origin to associate with the distribution, either an Amazon S3 bucket or
a custom HTTP/S-accessible location.callerReference
- A user-set unique reference value that ensures the request can't be replayed
(max UTF-8 encoding size 128 bytes). This parameter may be null, in which
case your computer's local epoch time in milliseconds will be used.cnames
- A list of up to 10 CNAME aliases to associate with the distribution. This
parameter may be a null or empty array.comment
- An optional comment to describe the distribution in your own terms
(max 128 characters). May be null.enabled
- Should the distribution should be enabled and publicly accessible upon creation?loggingStatus
- Logging status settings (bucket, prefix) for the distribution. If this value
is null, logging will be disabled for the distribution.CloudFrontServiceException
public Distribution getDistributionInfo(String id) throws CloudFrontServiceException
id
- the distribution's unique identifier.CloudFrontServiceException
public StreamingDistribution getStreamingDistributionInfo(String id) throws CloudFrontServiceException
id
- the distribution's unique identifier.CloudFrontServiceException
public DistributionConfig getDistributionConfig(String id) throws CloudFrontServiceException
getDistributionInfo(String)
method.id
- the distribution's unique identifier.CloudFrontServiceException
public StreamingDistributionConfig getStreamingDistributionConfig(String id) throws CloudFrontServiceException
getDistributionInfo(String)
method.id
- the distribution's unique identifier.CloudFrontServiceException
public DistributionConfig updateDistributionConfig(String id, Origin origin, String[] cnames, String comment, boolean enabled, LoggingStatus loggingStatus, boolean trustedSignerSelf, String[] trustedSignerAwsAccountNumbers, String[] requiredProtocols, String defaultRootObject) throws CloudFrontServiceException
This method performs all the steps necessary to update the configuration. It
first performs lookup on the distribution using
getDistributionConfig(String)
to find its origin and caller reference
values, then uses this information to apply your configuration changes.
id
- the distribution's unique identifier.cnames
- A list of up to 10 CNAME aliases to associate with the distribution. This
parameter may be null, in which case the original CNAME aliases are retained.comment
- An optional comment to describe the distribution in your own terms
(max 128 characters). May be null, in which case the original comment is retained.enabled
- Should the distribution should be enabled and publicly accessible after the
configuration update?loggingStatus
- Logging status settings (bucket, prefix) for the distribution. If this value
is null, logging will be disabled for the distribution.trustedSignerSelf
- If true the owner of the distribution (you) will be be allowed to generate
signed URLs for a private distribution. Note: If either trustedSignerSelf or
trustedSignerAwsAccountNumbers parameters are provided the private distribution
will require signed URLs to access content.trustedSignerAwsAccountNumbers
- Account Number identifiers for AWS account holders other than the
distribution's owner who will be allowed to generate signed URLs for a private
distribution. If null or empty, no additional AWS account holders may generate
signed URLs. Note: If either trustedSignerSelf or
trustedSignerAwsAccountNumbers parameters are provided the private distribution
will require signed URLs to access content.requiredProtocols
- List of protocols that must be used by clients to retrieve content from the
distribution. If this value is null or is an empty array all protocols will be
permitted.defaultRootObject
- The name of an object that will be served when someone visits the root of a
distribution.CloudFrontServiceException
public StreamingDistributionConfig updateStreamingDistributionConfig(String id, Origin origin, String[] cnames, String comment, boolean enabled, LoggingStatus loggingStatus) throws CloudFrontServiceException
This method performs all the steps necessary to update the configuration. It
first performs lookup on the distribution using
getDistributionConfig(String)
to find its origin and caller reference
values, then uses this information to apply your configuration changes.
id
- the distribution's unique identifier.cnames
- A list of up to 10 CNAME aliases to associate with the distribution. This
parameter may be null, in which case the original CNAME aliases are retained.comment
- An optional comment to describe the distribution in your own terms
(max 128 characters). May be null, in which case the original comment is retained.enabled
- Should the distribution should be enabled and publicly accessible after the
configuration update?loggingStatus
- Logging status settings (bucket, prefix) for the distribution. If this value
is null, logging will be disabled for the distribution.CloudFrontServiceException
public StreamingDistributionConfig updateStreamingDistributionConfig(String id, Origin origin, String[] cnames, String comment, boolean enabled, LoggingStatus loggingStatus, boolean trustedSignerSelf, String[] trustedSignerAwsAccountNumbers) throws CloudFrontServiceException
This method performs all the steps necessary to update the configuration. It
first performs lookup on the distribution using
getDistributionConfig(String)
to find its origin and caller reference
values, then uses this information to apply your configuration changes.
id
- the distribution's unique identifier.cnames
- A list of up to 10 CNAME aliases to associate with the distribution. This
parameter may be null, in which case the original CNAME aliases are retained.comment
- An optional comment to describe the distribution in your own terms
(max 128 characters). May be null, in which case the original comment is retained.enabled
- Should the distribution should be enabled and publicly accessible after the
configuration update?loggingStatus
- Logging status settings (bucket, prefix) for the distribution. If this value
is null, logging will be disabled for the distribution.origin
- the origin to associate with the distribution, either an Amazon S3 bucket or
a custom HTTP/S-accessible location.trustedSignerSelf
- If true the owner of the distribution (you) will be be allowed to generate
signed URLs for a private distribution. Note: If either trustedSignerSelf or
trustedSignerAwsAccountNumbers parameters are provided the private distribution
will require signed URLs to access content.trustedSignerAwsAccountNumbers
- Account Number identifiers for AWS account holders other than the
distribution's owner who will be allowed to generate signed URLs for a private
distribution. If null or empty, no additional AWS account holders may generate
signed URLs. Note: If either trustedSignerSelf or
trustedSignerAwsAccountNumbers parameters are provided the private distribution
will require signed URLs to access content.CloudFrontServiceException
public DistributionConfig updateDistributionConfig(String id, Origin origin, String[] cnames, String comment, boolean enabled, LoggingStatus loggingStatus) throws CloudFrontServiceException
This method performs all the steps necessary to update the configuration. It
first performs lookup on the distribution using
getDistributionConfig(String)
to find its origin and caller reference
values, then uses this information to apply your configuration changes.
id
- the distribution's unique identifier.cnames
- A list of up to 10 CNAME aliases to associate with the distribution. This
parameter may be null, in which case the original CNAME aliases are retained.comment
- An optional comment to describe the distribution in your own terms
(max 128 characters). May be null, in which case the original comment is retained.enabled
- Should the distribution should be enabled and publicly accessible after the
configuration update?loggingStatus
- Logging status settings (bucket, prefix) for the distribution. If this value
is null, logging will be disabled for the distribution.CloudFrontServiceException
public DistributionConfig updateDistributionConfig(String id, DistributionConfig config) throws CloudFrontServiceException
This method performs all the steps necessary to update the configuration. It
first performs lookup on the distribution using
getDistributionConfig(String)
to find its origin and caller reference
values, then uses this information to apply your configuration changes.
id
- the distribution's unique identifier.config
- Configuration properties to apply to the distribution.CloudFrontServiceException
public void disableDistributionForDeletion(String id) throws CloudFrontServiceException
updateDistributionConfig(String, Origin, String[], String, boolean, LoggingStatus)
method with default values for most of the distribution's configuration
settings.
Warning: Do not use this method on distributions you intend to keep, because it will reset most of the distribution's configuration settings such as CNAMEs and logging status.
id
- the distribution's unique identifier.CloudFrontServiceException
public void disableStreamingDistributionForDeletion(String id) throws CloudFrontServiceException
updateStreamingDistributionConfig(String, Origin, String[], String, boolean, LoggingStatus)
method with default values for most of the distribution's configuration
settings.
Warning: Do not use this method on distributions you intend to keep, because it will reset most of the distribution's configuration settings such as CNAMEs and logging status.
id
- the distribution's unique identifier.CloudFrontServiceException
public void deleteDistribution(String id) throws CloudFrontServiceException
This method performs many of the steps necessary to delete a disabled
distribution. It first performs lookup on the distribution using
getDistributionConfig(String)
to find its ETag value, then uses
this information to delete the distribution.
Because it can take a long time (minutes) to disable a distribution, this task is not performed automatically by this method. In your own code, you need to verify that a distribution is disabled with a status of Deployed before you invoke this method.
id
- the distribution's unique identifier.CloudFrontServiceException
public void deleteStreamingDistribution(String id) throws CloudFrontServiceException
This method performs many of the steps necessary to delete a disabled
distribution. It first performs lookup on the distribution using
getDistributionConfig(String)
to find its ETag value, then uses
this information to delete the distribution.
Because it can take a long time (minutes) to disable a distribution, this task is not performed automatically by this method. In your own code, you need to verify that a distribution is disabled with a status of Deployed before you invoke this method.
id
- the distribution's unique identifier.CloudFrontServiceException
public OriginAccessIdentity createOriginAccessIdentity(String callerReference, String comment) throws CloudFrontServiceException
callerReference
- A user-set unique reference value that ensures the request can't be replayed
(max UTF-8 encoding size 128 bytes). This parameter may be null, in which
case your computer's local epoch time in milliseconds will be used.comment
- An optional comment to describe the identity (max 128 characters). May be null.CloudFrontServiceException
public List<OriginAccessIdentity> getOriginAccessIdentityList() throws CloudFrontServiceException
OriginAccessIdentity
objects describing the identities.CloudFrontServiceException
public OriginAccessIdentity getOriginAccessIdentity(String id) throws CloudFrontServiceException
id
- The identifier of the Origin Access Identity.CloudFrontServiceException
public OriginAccessIdentityConfig getOriginAccessIdentityConfig(String id) throws CloudFrontServiceException
id
- The identifier of the Origin Access Identity.CloudFrontServiceException
public OriginAccessIdentityConfig updateOriginAccessIdentityConfig(String id, String comment) throws CloudFrontServiceException
id
- The identifier of the Origin Access Identity.comment
- A new comment to apply to the identity.CloudFrontServiceException
public void deleteOriginAccessIdentity(String id) throws CloudFrontServiceException
id
- The identifier of the Origin Access Identity.CloudFrontServiceException
public Invalidation invalidateObjects(String distributionId, String[] objectKeys, String callerReference) throws CloudFrontServiceException
distributionId
- objectKeys
- S3 object key names of object(s) to invalidate.callerReference
- CloudFrontServiceException
public Invalidation invalidateObjects(String distributionId, S3Object[] objects, String callerReference) throws CloudFrontServiceException
distributionId
- objects
- S3 object(s) to invalidate.callerReference
- CloudFrontServiceException
public Invalidation getInvalidation(String distributionId, String invalidationId) throws CloudFrontServiceException
distributionId
- invalidationId
- CloudFrontServiceException
public InvalidationList listInvalidations(String distributionId, String nextMarker, int pagingSize) throws CloudFrontServiceException
distributionId
- nextMarker
- a marker string indicating where to begin the next page of listing results.
Start with null for an initial listing page, then set to the NextMarker value
of each subsequent page returned.pagingSize
- maximum number of invalidation summaries to include in each result page, up to 100.CloudFrontServiceException
public List<InvalidationSummary> listInvalidations(String distributionId) throws CloudFrontServiceException
distributionId
- CloudFrontServiceException
public static String sanitizeS3BucketName(String proposedBucketName)
proposedBucketName
- the proposed S3 bucket name that will be sanitized.DEFAULT_BUCKET_SUFFIX
added, if necessary.public static String buildPolicyForSignedUrl(String resourcePath, Date epochDateLessThan, String limitToIpAddressCIDR, Date epochDateGreaterThan) throws CloudFrontServiceException
resourcePath
- An optional HTTP/S or RTMP resource path that restricts which distribution and S3 objects
will be accessible in a signed URL. For standard distributions the resource URL will be
"http://" + distributionName + "/" + objectKey (may also include URL
parameters. For distributions with the HTTPS required protocol, the resource URL
must start with "https://". RTMP resources do not take the form of a URL,
and instead the resource path is nothing but the stream's name.
The '*' and '?' characters can be used as a wildcards to allow multi-character or
single-character matches respectively:
epochDateLessThan
- The time and date when the signed URL will expire. REQUIRED.limitToIpAddressCIDR
- An optional range of client IP addresses that will be allowed to access the distribution,
specified as a CIDR range. If null, the CIDR will be 0.0.0.0/0 and any
client will be permitted.epochDateGreaterThan
- An optional time and date when the signed URL will become active. If null, the signed
URL will be active as soon as it is created.CloudFrontServiceException
public static String signUrl(String resourceUrlOrPath, String keyPairId, byte[] derPrivateKey, String policy) throws CloudFrontServiceException
resourceUrlOrPath
- The URL or path that uniquely identifies a resource within a distribution.
For standard distributions the resource URL will be
"http://" + distributionName + "/" + objectKey (may also include URL
parameters. For distributions with the HTTPS required protocol, the resource URL
must start with "https://". RTMP resources do not take the form of a URL,
and instead the resource path is nothing but the stream's name.keyPairId
- Identifier of a public/private certificate keypair already configured in your
Amazon Web Services account.derPrivateKey
- The RSA private key data that corresponding to the certificate keypair identified by
keyPairId, in DER format. To convert a standard PEM private key file into this format
use the utility method EncryptionUtil.convertRsaPemToDer(java.io.InputStream)
policy
- A policy document that describes the access permissions that will be applied by the
signed URL. To generate a custom policy use
buildPolicyForSignedUrl(String, Date, String, Date)
.CloudFrontServiceException
public static String signUrlCanned(String resourceUrlOrPath, String keyPairId, byte[] derPrivateKey, Date epochDateLessThan) throws CloudFrontServiceException
resourceUrlOrPath
- The URL or path that uniquely identifies a resource within a distribution.
For standard distributions the resource URL will be
"http://" + distributionName + "/" + objectKey (may also include URL
parameters. For distributions with the HTTPS required protocol, the resource URL
must start with "https://". RTMP resources do not take the form of a URL,
and instead the resource path is nothing but the stream's name.keyPairId
- Identifier of a public/private certificate keypair already configured in your
Amazon Web Services account.derPrivateKey
- The RSA private key data that corresponding to the certificate keypair identified by
keyPairId, in DER format. To convert a standard PEM private key file into this format
use the utility method EncryptionUtil.convertRsaPemToDer(java.io.InputStream)
epochDateLessThan
- The time and date when the signed URL will expire. REQUIRED.CloudFrontServiceException