aws-sdk-acmpca 1.51.0 → 1.53.0

data/lib/aws-sdk-acmpca/types.rb

@@ -17,32 +17,6 @@ module Aws::ACMPCA
     # name (DN). A DN is a sequence of relative distinguished names (RDNs).
     # The RDNs are separated by commas in the certificate.
     #
-    # @note When making an API call, you may pass ASN1Subject
-    #   data as a hash:
-    #
-    #       {
-    #         country: "CountryCodeString",
-    #         organization: "String64",
-    #         organizational_unit: "String64",
-    #         distinguished_name_qualifier: "ASN1PrintableString64",
-    #         state: "String128",
-    #         common_name: "String64",
-    #         serial_number: "ASN1PrintableString64",
-    #         locality: "String128",
-    #         title: "String64",
-    #         surname: "String40",
-    #         given_name: "String16",
-    #         initials: "String5",
-    #         pseudonym: "String128",
-    #         generation_qualifier: "String3",
-    #         custom_attributes: [
-    #           {
-    #             object_identifier: "CustomObjectIdentifier", # required
-    #             value: "String1To256", # required
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] country
     #   Two-digit code that specifies the country in which the certificate
     #   subject located.
@@ -161,53 +135,6 @@ module Aws::ACMPCA
     #
     # [1]: https://datatracker.ietf.org/doc/html/rfc5280
     #
-    # @note When making an API call, you may pass AccessDescription
-    #   data as a hash:
-    #
-    #       {
-    #         access_method: { # required
-    #           custom_object_identifier: "CustomObjectIdentifier",
-    #           access_method_type: "CA_REPOSITORY", # accepts CA_REPOSITORY, RESOURCE_PKI_MANIFEST, RESOURCE_PKI_NOTIFY
-    #         },
-    #         access_location: { # required
-    #           other_name: {
-    #             type_id: "CustomObjectIdentifier", # required
-    #             value: "String256", # required
-    #           },
-    #           rfc_822_name: "String256",
-    #           dns_name: "String253",
-    #           directory_name: {
-    #             country: "CountryCodeString",
-    #             organization: "String64",
-    #             organizational_unit: "String64",
-    #             distinguished_name_qualifier: "ASN1PrintableString64",
-    #             state: "String128",
-    #             common_name: "String64",
-    #             serial_number: "ASN1PrintableString64",
-    #             locality: "String128",
-    #             title: "String64",
-    #             surname: "String40",
-    #             given_name: "String16",
-    #             initials: "String5",
-    #             pseudonym: "String128",
-    #             generation_qualifier: "String3",
-    #             custom_attributes: [
-    #               {
-    #                 object_identifier: "CustomObjectIdentifier", # required
-    #                 value: "String1To256", # required
-    #               },
-    #             ],
-    #           },
-    #           edi_party_name: {
-    #             party_name: "String256", # required
-    #             name_assigner: "String256",
-    #           },
-    #           uniform_resource_identifier: "String253",
-    #           ip_address: "String39",
-    #           registered_id: "CustomObjectIdentifier",
-    #         },
-    #       }
-    #
     # @!attribute [rw] access_method
     #   The type and format of `AccessDescription` information.
     #   @return [Types::AccessMethod]
@@ -229,14 +156,6 @@ module Aws::ACMPCA
     # `CustomObjectIdentifier` or `AccessMethodType` may be provided.
     # Providing both results in `InvalidArgsException`.
     #
-    # @note When making an API call, you may pass AccessMethod
-    #   data as a hash:
-    #
-    #       {
-    #         custom_object_identifier: "CustomObjectIdentifier",
-    #         access_method_type: "CA_REPOSITORY", # accepts CA_REPOSITORY, RESOURCE_PKI_MANIFEST, RESOURCE_PKI_NOTIFY
-    #       }
-    #
     # @!attribute [rw] custom_object_identifier
     #   An object identifier (OID) specifying the `AccessMethod`. The OID
     #   must satisfy the regular expression shown below. For more
@@ -265,118 +184,12 @@ module Aws::ACMPCA
     # variant must be selected, or else this parameter is ignored.
     #
     # If conflicting or duplicate certificate information is supplied from
-    # other sources, ACM Private CA applies [order of operation rules][1] to
-    # determine what information is used.
-    #
-    #
-    #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html#template-order-of-operations
-    #
-    # @note When making an API call, you may pass ApiPassthrough
-    #   data as a hash:
-    #
-    #       {
-    #         extensions: {
-    #           certificate_policies: [
-    #             {
-    #               cert_policy_id: "CustomObjectIdentifier", # required
-    #               policy_qualifiers: [
-    #                 {
-    #                   policy_qualifier_id: "CPS", # required, accepts CPS
-    #                   qualifier: { # required
-    #                     cps_uri: "String256", # required
-    #                   },
-    #                 },
-    #               ],
-    #             },
-    #           ],
-    #           extended_key_usage: [
-    #             {
-    #               extended_key_usage_type: "SERVER_AUTH", # accepts SERVER_AUTH, CLIENT_AUTH, CODE_SIGNING, EMAIL_PROTECTION, TIME_STAMPING, OCSP_SIGNING, SMART_CARD_LOGIN, DOCUMENT_SIGNING, CERTIFICATE_TRANSPARENCY
-    #               extended_key_usage_object_identifier: "CustomObjectIdentifier",
-    #             },
-    #           ],
-    #           key_usage: {
-    #             digital_signature: false,
-    #             non_repudiation: false,
-    #             key_encipherment: false,
-    #             data_encipherment: false,
-    #             key_agreement: false,
-    #             key_cert_sign: false,
-    #             crl_sign: false,
-    #             encipher_only: false,
-    #             decipher_only: false,
-    #           },
-    #           subject_alternative_names: [
-    #             {
-    #               other_name: {
-    #                 type_id: "CustomObjectIdentifier", # required
-    #                 value: "String256", # required
-    #               },
-    #               rfc_822_name: "String256",
-    #               dns_name: "String253",
-    #               directory_name: {
-    #                 country: "CountryCodeString",
-    #                 organization: "String64",
-    #                 organizational_unit: "String64",
-    #                 distinguished_name_qualifier: "ASN1PrintableString64",
-    #                 state: "String128",
-    #                 common_name: "String64",
-    #                 serial_number: "ASN1PrintableString64",
-    #                 locality: "String128",
-    #                 title: "String64",
-    #                 surname: "String40",
-    #                 given_name: "String16",
-    #                 initials: "String5",
-    #                 pseudonym: "String128",
-    #                 generation_qualifier: "String3",
-    #                 custom_attributes: [
-    #                   {
-    #                     object_identifier: "CustomObjectIdentifier", # required
-    #                     value: "String1To256", # required
-    #                   },
-    #                 ],
-    #               },
-    #               edi_party_name: {
-    #                 party_name: "String256", # required
-    #                 name_assigner: "String256",
-    #               },
-    #               uniform_resource_identifier: "String253",
-    #               ip_address: "String39",
-    #               registered_id: "CustomObjectIdentifier",
-    #             },
-    #           ],
-    #           custom_extensions: [
-    #             {
-    #               object_identifier: "CustomObjectIdentifier", # required
-    #               value: "Base64String1To4096", # required
-    #               critical: false,
-    #             },
-    #           ],
-    #         },
-    #         subject: {
-    #           country: "CountryCodeString",
-    #           organization: "String64",
-    #           organizational_unit: "String64",
-    #           distinguished_name_qualifier: "ASN1PrintableString64",
-    #           state: "String128",
-    #           common_name: "String64",
-    #           serial_number: "ASN1PrintableString64",
-    #           locality: "String128",
-    #           title: "String64",
-    #           surname: "String40",
-    #           given_name: "String16",
-    #           initials: "String5",
-    #           pseudonym: "String128",
-    #           generation_qualifier: "String3",
-    #           custom_attributes: [
-    #             {
-    #               object_identifier: "CustomObjectIdentifier", # required
-    #               value: "String1To256", # required
-    #             },
-    #           ],
-    #         },
-    #       }
+    # other sources, Amazon Web Services Private CA applies [order of
+    # operation rules][1] to determine what information is used.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html#template-order-of-operations
     #
     # @!attribute [rw] extensions
     #   Specifies X.509 extension information for a certificate.
@@ -409,16 +222,16 @@ module Aws::ACMPCA
     # [CreateCertificateAuthority][1] action to create your private CA. You
     # must then call the [GetCertificateAuthorityCertificate][2] action to
     # retrieve a private CA certificate signing request (CSR). Sign the CSR
-    # with your ACM Private CA-hosted or on-premises root or subordinate CA
-    # certificate. Call the [ImportCertificateAuthorityCertificate][3]
-    # action to import the signed certificate into Certificate Manager
-    # (ACM).
+    # with your Amazon Web Services Private CA-hosted or on-premises root or
+    # subordinate CA certificate. Call the
+    # [ImportCertificateAuthorityCertificate][3] action to import the signed
+    # certificate into Certificate Manager (ACM).
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
-    # [2]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetCertificateAuthorityCertificate.html
-    # [3]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ImportCertificateAuthorityCertificate.html
+    # [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
+    # [2]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_GetCertificateAuthorityCertificate.html
+    # [3]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_ImportCertificateAuthorityCertificate.html
     #
     # @!attribute [rw] arn
     #   Amazon Resource Name (ARN) for your private certificate authority
@@ -479,7 +292,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeleteCertificateAuthorityRequest.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_DeleteCertificateAuthorityRequest.html
     #   @return [Time]
     #
     # @!attribute [rw] key_storage_security_standard
@@ -537,95 +350,7 @@ module Aws::ACMPCA
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
-    #
-    # @note When making an API call, you may pass CertificateAuthorityConfiguration
-    #   data as a hash:
-    #
-    #       {
-    #         key_algorithm: "RSA_2048", # required, accepts RSA_2048, RSA_4096, EC_prime256v1, EC_secp384r1
-    #         signing_algorithm: "SHA256WITHECDSA", # required, accepts SHA256WITHECDSA, SHA384WITHECDSA, SHA512WITHECDSA, SHA256WITHRSA, SHA384WITHRSA, SHA512WITHRSA
-    #         subject: { # required
-    #           country: "CountryCodeString",
-    #           organization: "String64",
-    #           organizational_unit: "String64",
-    #           distinguished_name_qualifier: "ASN1PrintableString64",
-    #           state: "String128",
-    #           common_name: "String64",
-    #           serial_number: "ASN1PrintableString64",
-    #           locality: "String128",
-    #           title: "String64",
-    #           surname: "String40",
-    #           given_name: "String16",
-    #           initials: "String5",
-    #           pseudonym: "String128",
-    #           generation_qualifier: "String3",
-    #           custom_attributes: [
-    #             {
-    #               object_identifier: "CustomObjectIdentifier", # required
-    #               value: "String1To256", # required
-    #             },
-    #           ],
-    #         },
-    #         csr_extensions: {
-    #           key_usage: {
-    #             digital_signature: false,
-    #             non_repudiation: false,
-    #             key_encipherment: false,
-    #             data_encipherment: false,
-    #             key_agreement: false,
-    #             key_cert_sign: false,
-    #             crl_sign: false,
-    #             encipher_only: false,
-    #             decipher_only: false,
-    #           },
-    #           subject_information_access: [
-    #             {
-    #               access_method: { # required
-    #                 custom_object_identifier: "CustomObjectIdentifier",
-    #                 access_method_type: "CA_REPOSITORY", # accepts CA_REPOSITORY, RESOURCE_PKI_MANIFEST, RESOURCE_PKI_NOTIFY
-    #               },
-    #               access_location: { # required
-    #                 other_name: {
-    #                   type_id: "CustomObjectIdentifier", # required
-    #                   value: "String256", # required
-    #                 },
-    #                 rfc_822_name: "String256",
-    #                 dns_name: "String253",
-    #                 directory_name: {
-    #                   country: "CountryCodeString",
-    #                   organization: "String64",
-    #                   organizational_unit: "String64",
-    #                   distinguished_name_qualifier: "ASN1PrintableString64",
-    #                   state: "String128",
-    #                   common_name: "String64",
-    #                   serial_number: "ASN1PrintableString64",
-    #                   locality: "String128",
-    #                   title: "String64",
-    #                   surname: "String40",
-    #                   given_name: "String16",
-    #                   initials: "String5",
-    #                   pseudonym: "String128",
-    #                   generation_qualifier: "String3",
-    #                   custom_attributes: [
-    #                     {
-    #                       object_identifier: "CustomObjectIdentifier", # required
-    #                       value: "String1To256", # required
-    #                     },
-    #                   ],
-    #                 },
-    #                 edi_party_name: {
-    #                   party_name: "String256", # required
-    #                   name_assigner: "String256",
-    #                 },
-    #                 uniform_resource_identifier: "String253",
-    #                 ip_address: "String39",
-    #                 registered_id: "CustomObjectIdentifier",
-    #               },
-    #             },
-    #           ],
-    #         },
-    #       }
+    # [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #
     # @!attribute [rw] key_algorithm
     #   Type of the public key algorithm and size, in bits, of the key pair
@@ -690,15 +415,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass CreateCertificateAuthorityAuditReportRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         s3_bucket_name: "S3BucketName", # required
-    #         audit_report_response_format: "JSON", # required, accepts JSON, CSV
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) of the CA to be audited. This is of
     #   the form:
@@ -744,119 +460,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass CreateCertificateAuthorityRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_configuration: { # required
-    #           key_algorithm: "RSA_2048", # required, accepts RSA_2048, RSA_4096, EC_prime256v1, EC_secp384r1
-    #           signing_algorithm: "SHA256WITHECDSA", # required, accepts SHA256WITHECDSA, SHA384WITHECDSA, SHA512WITHECDSA, SHA256WITHRSA, SHA384WITHRSA, SHA512WITHRSA
-    #           subject: { # required
-    #             country: "CountryCodeString",
-    #             organization: "String64",
-    #             organizational_unit: "String64",
-    #             distinguished_name_qualifier: "ASN1PrintableString64",
-    #             state: "String128",
-    #             common_name: "String64",
-    #             serial_number: "ASN1PrintableString64",
-    #             locality: "String128",
-    #             title: "String64",
-    #             surname: "String40",
-    #             given_name: "String16",
-    #             initials: "String5",
-    #             pseudonym: "String128",
-    #             generation_qualifier: "String3",
-    #             custom_attributes: [
-    #               {
-    #                 object_identifier: "CustomObjectIdentifier", # required
-    #                 value: "String1To256", # required
-    #               },
-    #             ],
-    #           },
-    #           csr_extensions: {
-    #             key_usage: {
-    #               digital_signature: false,
-    #               non_repudiation: false,
-    #               key_encipherment: false,
-    #               data_encipherment: false,
-    #               key_agreement: false,
-    #               key_cert_sign: false,
-    #               crl_sign: false,
-    #               encipher_only: false,
-    #               decipher_only: false,
-    #             },
-    #             subject_information_access: [
-    #               {
-    #                 access_method: { # required
-    #                   custom_object_identifier: "CustomObjectIdentifier",
-    #                   access_method_type: "CA_REPOSITORY", # accepts CA_REPOSITORY, RESOURCE_PKI_MANIFEST, RESOURCE_PKI_NOTIFY
-    #                 },
-    #                 access_location: { # required
-    #                   other_name: {
-    #                     type_id: "CustomObjectIdentifier", # required
-    #                     value: "String256", # required
-    #                   },
-    #                   rfc_822_name: "String256",
-    #                   dns_name: "String253",
-    #                   directory_name: {
-    #                     country: "CountryCodeString",
-    #                     organization: "String64",
-    #                     organizational_unit: "String64",
-    #                     distinguished_name_qualifier: "ASN1PrintableString64",
-    #                     state: "String128",
-    #                     common_name: "String64",
-    #                     serial_number: "ASN1PrintableString64",
-    #                     locality: "String128",
-    #                     title: "String64",
-    #                     surname: "String40",
-    #                     given_name: "String16",
-    #                     initials: "String5",
-    #                     pseudonym: "String128",
-    #                     generation_qualifier: "String3",
-    #                     custom_attributes: [
-    #                       {
-    #                         object_identifier: "CustomObjectIdentifier", # required
-    #                         value: "String1To256", # required
-    #                       },
-    #                     ],
-    #                   },
-    #                   edi_party_name: {
-    #                     party_name: "String256", # required
-    #                     name_assigner: "String256",
-    #                   },
-    #                   uniform_resource_identifier: "String253",
-    #                   ip_address: "String39",
-    #                   registered_id: "CustomObjectIdentifier",
-    #                 },
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         revocation_configuration: {
-    #           crl_configuration: {
-    #             enabled: false, # required
-    #             expiration_in_days: 1,
-    #             custom_cname: "String253",
-    #             s3_bucket_name: "String3To255",
-    #             s3_object_acl: "PUBLIC_READ", # accepts PUBLIC_READ, BUCKET_OWNER_FULL_CONTROL
-    #           },
-    #           ocsp_configuration: {
-    #             enabled: false, # required
-    #             ocsp_custom_cname: "String253",
-    #           },
-    #         },
-    #         certificate_authority_type: "ROOT", # required, accepts ROOT, SUBORDINATE
-    #         idempotency_token: "IdempotencyToken",
-    #         key_storage_security_standard: "FIPS_140_2_LEVEL_2_OR_HIGHER", # accepts FIPS_140_2_LEVEL_2_OR_HIGHER, FIPS_140_2_LEVEL_3_OR_HIGHER
-    #         tags: [
-    #           {
-    #             key: "TagKey", # required
-    #             value: "TagValue",
-    #           },
-    #         ],
-    #         usage_mode: "GENERAL_PURPOSE", # accepts GENERAL_PURPOSE, SHORT_LIVED_CERTIFICATE
-    #       }
-    #
     # @!attribute [rw] certificate_authority_configuration
     #   Name and bit size of the private key algorithm, the name of the
     #   signing algorithm, and X.500 certificate subject information.
@@ -866,14 +469,36 @@ module Aws::ACMPCA
     #   Contains information to enable Online Certificate Status Protocol
     #   (OCSP) support, to enable a certificate revocation list (CRL), to
     #   enable both, or to enable neither. The default is for both
-    #   certificate validation mechanisms to be disabled. For more
-    #   information, see the [OcspConfiguration][1] and
-    #   [CrlConfiguration][2] types.
+    #   certificate validation mechanisms to be disabled.
+    #
+    #   <note markdown="1"> The following requirements apply to revocation configurations.
+    #
+    #    * A configuration disabling CRLs or OCSP must contain only the
+    #     `Enabled=False` parameter, and will fail if other parameters such
+    #     as `CustomCname` or `ExpirationInDays` are included.
     #
+    #   * In a CRL configuration, the `S3BucketName` parameter must conform
+    #     to [Amazon S3 bucket naming rules][1].
     #
+    #   * A configuration containing a custom Canonical Name (CNAME)
+    #     parameter for CRLs or OCSP must conform to [RFC2396][2]
+    #     restrictions on the use of special characters in a CNAME.
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_OcspConfiguration.html
-    #   [2]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CrlConfiguration.html
+    #   * In a CRL or OCSP configuration, the value of a CNAME parameter
+    #     must not include a protocol prefix such as "http://" or
+    #     "https://".
+    #
+    #    </note>
+    #
+    #   For more information, see the [OcspConfiguration][3] and
+    #   [CrlConfiguration][4] types.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html
+    #   [2]: https://www.ietf.org/rfc/rfc2396.txt
+    #   [3]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_OcspConfiguration.html
+    #   [4]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CrlConfiguration.html
     #   @return [Types::RevocationConfiguration]
     #
     # @!attribute [rw] certificate_authority_type
@@ -885,11 +510,11 @@ module Aws::ACMPCA
     #   **CreateCertificateAuthority** action. Idempotency tokens for
     #   **CreateCertificateAuthority** time out after five minutes.
     #   Therefore, if you call **CreateCertificateAuthority** multiple times
-    #   with the same idempotency token within five minutes, ACM Private CA
-    #   recognizes that you are requesting only certificate authority and
-    #   will issue only one. If you change the idempotency token for each
-    #   call, PCA recognizes that you are requesting multiple certificate
-    #   authorities.
+    #   with the same idempotency token within five minutes, Amazon Web
+    #   Services Private CA recognizes that you are requesting only
+    #   certificate authority and will issue only one. If you change the
+    #   idempotency token for each call, Amazon Web Services Private CA
+    #   recognizes that you are requesting multiple certificate authorities.
     #   @return [String]
     #
     # @!attribute [rw] key_storage_security_standard
@@ -963,16 +588,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass CreatePermissionRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         principal: "Principal", # required
-    #         source_account: "AccountId",
-    #         actions: ["IssueCertificate"], # required, accepts IssueCertificate, GetCertificate, ListPermissions
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) of the CA that grants the
     #   permissions. You can find the ARN by calling the
@@ -984,7 +599,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListCertificateAuthorities.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListCertificateAuthorities.html
     #   @return [String]
     #
     # @!attribute [rw] principal
@@ -1023,10 +638,11 @@ module Aws::ACMPCA
     # specifying a value for the **CustomCname** parameter. Your private CA
     # copies the CNAME or the S3 bucket name to the **CRL Distribution
     # Points** extension of each certificate it issues. Your S3 bucket
-    # policy must give write permission to ACM Private CA.
+    # policy must give write permission to Amazon Web Services Private CA.
     #
-    # ACM Private CA assets that are stored in Amazon S3 can be protected
-    # with encryption. For more information, see [Encrypting Your CRLs][1].
+    # Amazon Web Services Private CA assets that are stored in Amazon S3 can
+    # be protected with encryption. For more information, see [Encrypting
+    # Your CRLs][1].
     #
     # Your private CA uses the value in the **ExpirationInDays** parameter
     # to calculate the **nextUpdate** field in the CRL. The CRL is refreshed
@@ -1036,8 +652,8 @@ module Aws::ACMPCA
     # expiration, and it always appears in the audit report.
     #
     # A CRL is typically updated approximately 30 minutes after a
-    # certificate is revoked. If for any reason a CRL update fails, ACM
-    # Private CA makes further attempts every 15 minutes.
+    # certificate is revoked. If for any reason a CRL update fails, Amazon
+    # Web Services Private CA makes further attempts every 15 minutes.
     #
     # CRLs contain the following fields:
     #
@@ -1081,29 +697,20 @@ module Aws::ACMPCA
     #
     # * **Signature Value**\: Signature computed over the CRL.
     #
-    # Certificate revocation lists created by ACM Private CA are
-    # DER-encoded. You can use the following OpenSSL command to list a CRL.
+    # Certificate revocation lists created by Amazon Web Services Private CA
+    # are DER-encoded. You can use the following OpenSSL command to list a
+    # CRL.
     #
     # `openssl crl -inform DER -text -in crl_path -noout`
     #
     # For more information, see [Planning a certificate revocation list
-    # (CRL)][2] in the *Private Certificate Authority (PCA) User Guide*
-    #
-    #
+    # (CRL)][2] in the *Amazon Web Services Private Certificate Authority
+    # User Guide*
     #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaCreateCa.html#crl-encryption
-    # [2]: https://docs.aws.amazon.com/acm-pca/latest/userguide/crl-planning.html
     #
-    # @note When making an API call, you may pass CrlConfiguration
-    #   data as a hash:
     #
-    #       {
-    #         enabled: false, # required
-    #         expiration_in_days: 1,
-    #         custom_cname: "String253",
-    #         s3_bucket_name: "String3To255",
-    #         s3_object_acl: "PUBLIC_READ", # accepts PUBLIC_READ, BUCKET_OWNER_FULL_CONTROL
-    #       }
+    # [1]: https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#crl-encryption
+    # [2]: https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html
     #
     # @!attribute [rw] enabled
     #   Boolean value that specifies whether certificate revocation lists
@@ -1114,8 +721,8 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
-    #   [2]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_UpdateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [2]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html
     #   @return [Boolean]
     #
     # @!attribute [rw] expiration_in_days
@@ -1127,6 +734,17 @@ module Aws::ACMPCA
     #   extension that enables the use of an alias for the CRL distribution
     #   point. Use this value if you don't want the name of your S3 bucket
     #   to be public.
+    #
+    #   <note markdown="1"> The content of a Canonical Name (CNAME) record must conform to
+    #   [RFC2396][1] restrictions on the use of special characters in URIs.
+    #   Additionally, the value of the CNAME must not include a protocol
+    #   prefix such as "http://" or "https://".
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://www.ietf.org/rfc/rfc2396.txt
     #   @return [String]
     #
     # @!attribute [rw] s3_bucket_name
@@ -1135,13 +753,19 @@ module Aws::ACMPCA
     #   is placed into the **CRL Distribution Points** extension of the
     #   issued certificate. You can change the name of your bucket by
     #   calling the [UpdateCertificateAuthority][1] operation. You must
-    #   specify a [bucket policy][2] that allows ACM Private CA to write the
-    #   CRL to your bucket.
+    #   specify a [bucket policy][2] that allows Amazon Web Services Private
+    #   CA to write the CRL to your bucket.
     #
+    #   <note markdown="1"> The `S3BucketName` parameter must conform to the [S3 bucket naming
+    #   rules][3].
     #
+    #    </note>
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_UpdateCertificateAuthority.html
-    #   [2]: https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaCreateCa.html#s3-policies
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html
+    #   [2]: https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-policies
+    #   [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html
     #   @return [String]
     #
     # @!attribute [rw] s3_object_acl
@@ -1167,7 +791,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaCreateCa.html#s3-bpa
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-bpa
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CrlConfiguration AWS API Documentation
@@ -1185,68 +809,6 @@ module Aws::ACMPCA
     # Describes the certificate extensions to be added to the certificate
     # signing request (CSR).
     #
-    # @note When making an API call, you may pass CsrExtensions
-    #   data as a hash:
-    #
-    #       {
-    #         key_usage: {
-    #           digital_signature: false,
-    #           non_repudiation: false,
-    #           key_encipherment: false,
-    #           data_encipherment: false,
-    #           key_agreement: false,
-    #           key_cert_sign: false,
-    #           crl_sign: false,
-    #           encipher_only: false,
-    #           decipher_only: false,
-    #         },
-    #         subject_information_access: [
-    #           {
-    #             access_method: { # required
-    #               custom_object_identifier: "CustomObjectIdentifier",
-    #               access_method_type: "CA_REPOSITORY", # accepts CA_REPOSITORY, RESOURCE_PKI_MANIFEST, RESOURCE_PKI_NOTIFY
-    #             },
-    #             access_location: { # required
-    #               other_name: {
-    #                 type_id: "CustomObjectIdentifier", # required
-    #                 value: "String256", # required
-    #               },
-    #               rfc_822_name: "String256",
-    #               dns_name: "String253",
-    #               directory_name: {
-    #                 country: "CountryCodeString",
-    #                 organization: "String64",
-    #                 organizational_unit: "String64",
-    #                 distinguished_name_qualifier: "ASN1PrintableString64",
-    #                 state: "String128",
-    #                 common_name: "String64",
-    #                 serial_number: "ASN1PrintableString64",
-    #                 locality: "String128",
-    #                 title: "String64",
-    #                 surname: "String40",
-    #                 given_name: "String16",
-    #                 initials: "String5",
-    #                 pseudonym: "String128",
-    #                 generation_qualifier: "String3",
-    #                 custom_attributes: [
-    #                   {
-    #                     object_identifier: "CustomObjectIdentifier", # required
-    #                     value: "String1To256", # required
-    #                   },
-    #                 ],
-    #               },
-    #               edi_party_name: {
-    #                 party_name: "String256", # required
-    #                 name_assigner: "String256",
-    #               },
-    #               uniform_resource_identifier: "String253",
-    #               ip_address: "String39",
-    #               registered_id: "CustomObjectIdentifier",
-    #             },
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] key_usage
     #   Indicates the purpose of the certificate and of the key contained in
     #   the certificate.
@@ -1273,14 +835,6 @@ module Aws::ACMPCA
 
     # Defines the X.500 relative distinguished name (RDN).
     #
-    # @note When making an API call, you may pass CustomAttribute
-    #   data as a hash:
-    #
-    #       {
-    #         object_identifier: "CustomObjectIdentifier", # required
-    #         value: "String1To256", # required
-    #       }
-    #
     # @!attribute [rw] object_identifier
     #   Specifies the object identifier (OID) of the attribute type of the
     #   relative distinguished name (RDN).
@@ -1306,16 +860,7 @@ module Aws::ACMPCA
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html#template-order-of-operations
-    #
-    # @note When making an API call, you may pass CustomExtension
-    #   data as a hash:
-    #
-    #       {
-    #         object_identifier: "CustomObjectIdentifier", # required
-    #         value: "Base64String1To4096", # required
-    #         critical: false,
-    #       }
+    # [1]: https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html#template-order-of-operations
     #
     # @!attribute [rw] object_identifier
     #   Specifies the object identifier (OID) of the X.509 extension. For
@@ -1344,14 +889,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DeleteCertificateAuthorityRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         permanent_deletion_time_in_days: 1,
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called
     #   [CreateCertificateAuthority][1]. This must have the following form:
@@ -1361,7 +898,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @!attribute [rw] permanent_deletion_time_in_days
@@ -1379,15 +916,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DeletePermissionRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         principal: "Principal", # required
-    #         source_account: "AccountId",
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Number (ARN) of the private CA that issued the
     #   permissions. You can find the CA's ARN by calling the
@@ -1399,7 +927,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListCertificateAuthorities.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListCertificateAuthorities.html
     #   @return [String]
     #
     # @!attribute [rw] principal
@@ -1422,13 +950,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DeletePolicyRequest
-    #   data as a hash:
-    #
-    #       {
-    #         resource_arn: "Arn", # required
-    #       }
-    #
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Number (ARN) of the private CA that will have
     #   its policy deleted. You can find the CA's ARN by calling the
@@ -1438,7 +959,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListCertificateAuthorities.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListCertificateAuthorities.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DeletePolicyRequest AWS API Documentation
@@ -1449,14 +970,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DescribeCertificateAuthorityAuditReportRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         audit_report_id: "AuditReportId", # required
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) of the private CA. This must be of
     #   the form:
@@ -1471,7 +984,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthorityAuditReport.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthorityAuditReport.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DescribeCertificateAuthorityAuditReportRequest AWS API Documentation
@@ -1512,13 +1025,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DescribeCertificateAuthorityRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called
     #   [CreateCertificateAuthority][1]. This must be of the form:
@@ -1528,7 +1034,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DescribeCertificateAuthorityRequest AWS API Documentation
@@ -1545,7 +1051,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CertificateAuthority.html
     #   @return [Types::CertificateAuthority]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DescribeCertificateAuthorityResponse AWS API Documentation
@@ -1563,14 +1069,6 @@ module Aws::ACMPCA
     #
     # [1]: https://datatracker.ietf.org/doc/html/rfc5280
     #
-    # @note When making an API call, you may pass EdiPartyName
-    #   data as a hash:
-    #
-    #       {
-    #         party_name: "String256", # required
-    #         name_assigner: "String256",
-    #       }
-    #
     # @!attribute [rw] party_name
     #   Specifies the party name.
     #   @return [String]
@@ -1592,14 +1090,6 @@ module Aws::ACMPCA
     # be used other than basic purposes indicated in the `KeyUsage`
     # extension.
     #
-    # @note When making an API call, you may pass ExtendedKeyUsage
-    #   data as a hash:
-    #
-    #       {
-    #         extended_key_usage_type: "SERVER_AUTH", # accepts SERVER_AUTH, CLIENT_AUTH, CODE_SIGNING, EMAIL_PROTECTION, TIME_STAMPING, OCSP_SIGNING, SMART_CARD_LOGIN, DOCUMENT_SIGNING, CERTIFICATE_TRANSPARENCY
-    #         extended_key_usage_object_identifier: "CustomObjectIdentifier",
-    #       }
-    #
     # @!attribute [rw] extended_key_usage_type
     #   Specifies a standard `ExtendedKeyUsage` as defined as in [RFC
     #   5280][1].
@@ -1625,88 +1115,6 @@ module Aws::ACMPCA
 
     # Contains X.509 extension information for a certificate.
     #
-    # @note When making an API call, you may pass Extensions
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_policies: [
-    #           {
-    #             cert_policy_id: "CustomObjectIdentifier", # required
-    #             policy_qualifiers: [
-    #               {
-    #                 policy_qualifier_id: "CPS", # required, accepts CPS
-    #                 qualifier: { # required
-    #                   cps_uri: "String256", # required
-    #                 },
-    #               },
-    #             ],
-    #           },
-    #         ],
-    #         extended_key_usage: [
-    #           {
-    #             extended_key_usage_type: "SERVER_AUTH", # accepts SERVER_AUTH, CLIENT_AUTH, CODE_SIGNING, EMAIL_PROTECTION, TIME_STAMPING, OCSP_SIGNING, SMART_CARD_LOGIN, DOCUMENT_SIGNING, CERTIFICATE_TRANSPARENCY
-    #             extended_key_usage_object_identifier: "CustomObjectIdentifier",
-    #           },
-    #         ],
-    #         key_usage: {
-    #           digital_signature: false,
-    #           non_repudiation: false,
-    #           key_encipherment: false,
-    #           data_encipherment: false,
-    #           key_agreement: false,
-    #           key_cert_sign: false,
-    #           crl_sign: false,
-    #           encipher_only: false,
-    #           decipher_only: false,
-    #         },
-    #         subject_alternative_names: [
-    #           {
-    #             other_name: {
-    #               type_id: "CustomObjectIdentifier", # required
-    #               value: "String256", # required
-    #             },
-    #             rfc_822_name: "String256",
-    #             dns_name: "String253",
-    #             directory_name: {
-    #               country: "CountryCodeString",
-    #               organization: "String64",
-    #               organizational_unit: "String64",
-    #               distinguished_name_qualifier: "ASN1PrintableString64",
-    #               state: "String128",
-    #               common_name: "String64",
-    #               serial_number: "ASN1PrintableString64",
-    #               locality: "String128",
-    #               title: "String64",
-    #               surname: "String40",
-    #               given_name: "String16",
-    #               initials: "String5",
-    #               pseudonym: "String128",
-    #               generation_qualifier: "String3",
-    #               custom_attributes: [
-    #                 {
-    #                   object_identifier: "CustomObjectIdentifier", # required
-    #                   value: "String1To256", # required
-    #                 },
-    #               ],
-    #             },
-    #             edi_party_name: {
-    #               party_name: "String256", # required
-    #               name_assigner: "String256",
-    #             },
-    #             uniform_resource_identifier: "String253",
-    #             ip_address: "String39",
-    #             registered_id: "CustomObjectIdentifier",
-    #           },
-    #         ],
-    #         custom_extensions: [
-    #           {
-    #             object_identifier: "CustomObjectIdentifier", # required
-    #             value: "Base64String1To4096", # required
-    #             critical: false,
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] certificate_policies
     #   Contains a sequence of one or more policy information terms, each of
     #   which consists of an object identifier (OID) and optional
@@ -1772,47 +1180,6 @@ module Aws::ACMPCA
     #
     # [1]: https://datatracker.ietf.org/doc/html/rfc5280
     #
-    # @note When making an API call, you may pass GeneralName
-    #   data as a hash:
-    #
-    #       {
-    #         other_name: {
-    #           type_id: "CustomObjectIdentifier", # required
-    #           value: "String256", # required
-    #         },
-    #         rfc_822_name: "String256",
-    #         dns_name: "String253",
-    #         directory_name: {
-    #           country: "CountryCodeString",
-    #           organization: "String64",
-    #           organizational_unit: "String64",
-    #           distinguished_name_qualifier: "ASN1PrintableString64",
-    #           state: "String128",
-    #           common_name: "String64",
-    #           serial_number: "ASN1PrintableString64",
-    #           locality: "String128",
-    #           title: "String64",
-    #           surname: "String40",
-    #           given_name: "String16",
-    #           initials: "String5",
-    #           pseudonym: "String128",
-    #           generation_qualifier: "String3",
-    #           custom_attributes: [
-    #             {
-    #               object_identifier: "CustomObjectIdentifier", # required
-    #               value: "String1To256", # required
-    #             },
-    #           ],
-    #         },
-    #         edi_party_name: {
-    #           party_name: "String256", # required
-    #           name_assigner: "String256",
-    #         },
-    #         uniform_resource_identifier: "String253",
-    #         ip_address: "String39",
-    #         registered_id: "CustomObjectIdentifier",
-    #       }
-    #
     # @!attribute [rw] other_name
     #   Represents `GeneralName` using an `OtherName` object.
     #   @return [Types::OtherName]
@@ -1870,13 +1237,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetCertificateAuthorityCertificateRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) of your private CA. This is of the
     #   form:
@@ -1913,13 +1273,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetCertificateAuthorityCsrRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called the
     #   [CreateCertificateAuthority][1] action. This must be of the form:
@@ -1929,7 +1282,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificateAuthorityCsrRequest AWS API Documentation
@@ -1953,14 +1306,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetCertificateRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         certificate_arn: "Arn", # required
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called
     #   [CreateCertificateAuthority][1]. This must be of the form:
@@ -1970,7 +1315,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @!attribute [rw] certificate_arn
@@ -2009,13 +1354,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass GetPolicyRequest
-    #   data as a hash:
-    #
-    #       {
-    #         resource_arn: "Arn", # required
-    #       }
-    #
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Number (ARN) of the private CA that will have
     #   its policy retrieved. You can find the CA's ARN by calling the
@@ -2042,15 +1380,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ImportCertificateAuthorityCertificateRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         certificate: "data", # required
-    #         certificate_chain: "data",
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called
     #   [CreateCertificateAuthority][1]. This must be of the form:
@@ -2060,7 +1389,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @!attribute [rw] certificate
@@ -2072,9 +1401,9 @@ module Aws::ACMPCA
     # @!attribute [rw] certificate_chain
     #   A PEM-encoded file that contains all of your certificates, other
     #   than the certificate you're importing, chaining up to your root CA.
-    #   Your ACM Private CA-hosted or on-premises root certificate is the
-    #   last in the chain, and each certificate in the chain signs the one
-    #   preceding.
+    #   Your Amazon Web Services Private CA-hosted or on-premises root
+    #   certificate is the last in the chain, and each certificate in the
+    #   chain signs the one preceding.
     #
     #   This parameter must be supplied when you import a subordinate CA.
     #   When you import a root CA, there is no chain.
@@ -2123,7 +1452,7 @@ module Aws::ACMPCA
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListCertificateAuthorities.html
+    # [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListCertificateAuthorities.html
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -2195,127 +1524,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass IssueCertificateRequest
-    #   data as a hash:
-    #
-    #       {
-    #         api_passthrough: {
-    #           extensions: {
-    #             certificate_policies: [
-    #               {
-    #                 cert_policy_id: "CustomObjectIdentifier", # required
-    #                 policy_qualifiers: [
-    #                   {
-    #                     policy_qualifier_id: "CPS", # required, accepts CPS
-    #                     qualifier: { # required
-    #                       cps_uri: "String256", # required
-    #                     },
-    #                   },
-    #                 ],
-    #               },
-    #             ],
-    #             extended_key_usage: [
-    #               {
-    #                 extended_key_usage_type: "SERVER_AUTH", # accepts SERVER_AUTH, CLIENT_AUTH, CODE_SIGNING, EMAIL_PROTECTION, TIME_STAMPING, OCSP_SIGNING, SMART_CARD_LOGIN, DOCUMENT_SIGNING, CERTIFICATE_TRANSPARENCY
-    #                 extended_key_usage_object_identifier: "CustomObjectIdentifier",
-    #               },
-    #             ],
-    #             key_usage: {
-    #               digital_signature: false,
-    #               non_repudiation: false,
-    #               key_encipherment: false,
-    #               data_encipherment: false,
-    #               key_agreement: false,
-    #               key_cert_sign: false,
-    #               crl_sign: false,
-    #               encipher_only: false,
-    #               decipher_only: false,
-    #             },
-    #             subject_alternative_names: [
-    #               {
-    #                 other_name: {
-    #                   type_id: "CustomObjectIdentifier", # required
-    #                   value: "String256", # required
-    #                 },
-    #                 rfc_822_name: "String256",
-    #                 dns_name: "String253",
-    #                 directory_name: {
-    #                   country: "CountryCodeString",
-    #                   organization: "String64",
-    #                   organizational_unit: "String64",
-    #                   distinguished_name_qualifier: "ASN1PrintableString64",
-    #                   state: "String128",
-    #                   common_name: "String64",
-    #                   serial_number: "ASN1PrintableString64",
-    #                   locality: "String128",
-    #                   title: "String64",
-    #                   surname: "String40",
-    #                   given_name: "String16",
-    #                   initials: "String5",
-    #                   pseudonym: "String128",
-    #                   generation_qualifier: "String3",
-    #                   custom_attributes: [
-    #                     {
-    #                       object_identifier: "CustomObjectIdentifier", # required
-    #                       value: "String1To256", # required
-    #                     },
-    #                   ],
-    #                 },
-    #                 edi_party_name: {
-    #                   party_name: "String256", # required
-    #                   name_assigner: "String256",
-    #                 },
-    #                 uniform_resource_identifier: "String253",
-    #                 ip_address: "String39",
-    #                 registered_id: "CustomObjectIdentifier",
-    #               },
-    #             ],
-    #             custom_extensions: [
-    #               {
-    #                 object_identifier: "CustomObjectIdentifier", # required
-    #                 value: "Base64String1To4096", # required
-    #                 critical: false,
-    #               },
-    #             ],
-    #           },
-    #           subject: {
-    #             country: "CountryCodeString",
-    #             organization: "String64",
-    #             organizational_unit: "String64",
-    #             distinguished_name_qualifier: "ASN1PrintableString64",
-    #             state: "String128",
-    #             common_name: "String64",
-    #             serial_number: "ASN1PrintableString64",
-    #             locality: "String128",
-    #             title: "String64",
-    #             surname: "String40",
-    #             given_name: "String16",
-    #             initials: "String5",
-    #             pseudonym: "String128",
-    #             generation_qualifier: "String3",
-    #             custom_attributes: [
-    #               {
-    #                 object_identifier: "CustomObjectIdentifier", # required
-    #                 value: "String1To256", # required
-    #               },
-    #             ],
-    #           },
-    #         },
-    #         certificate_authority_arn: "Arn", # required
-    #         csr: "data", # required
-    #         signing_algorithm: "SHA256WITHECDSA", # required, accepts SHA256WITHECDSA, SHA384WITHECDSA, SHA512WITHECDSA, SHA256WITHRSA, SHA384WITHRSA, SHA512WITHRSA
-    #         template_arn: "Arn",
-    #         validity: { # required
-    #           value: 1, # required
-    #           type: "END_DATE", # required, accepts END_DATE, ABSOLUTE, DAYS, MONTHS, YEARS
-    #         },
-    #         validity_not_before: {
-    #           value: 1, # required
-    #           type: "END_DATE", # required, accepts END_DATE, ABSOLUTE, DAYS, MONTHS, YEARS
-    #         },
-    #         idempotency_token: "IdempotencyToken",
-    #       }
-    #
     # @!attribute [rw] api_passthrough
     #   Specifies X.509 certificate information to be included in the issued
     #   certificate. An `APIPassthrough` or `APICSRPassthrough` template
@@ -2324,13 +1532,13 @@ module Aws::ACMPCA
     #   Certificate Templates][1].
     #
     #   If conflicting or duplicate certificate information is supplied
-    #   during certificate issuance, ACM Private CA applies [order of
-    #   operation rules][2] to determine what information is used.
+    #   during certificate issuance, Amazon Web Services Private CA applies
+    #   [order of operation rules][2] to determine what information is used.
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html
-    #   [2]: https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html#template-order-of-operations
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html
+    #   [2]: https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html#template-order-of-operations
     #   @return [Types::ApiPassthrough]
     #
     # @!attribute [rw] certificate_authority_arn
@@ -2342,7 +1550,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @!attribute [rw] csr
@@ -2381,22 +1589,22 @@ module Aws::ACMPCA
     #
     # @!attribute [rw] template_arn
     #   Specifies a custom configuration template to use when issuing a
-    #   certificate. If this parameter is not provided, ACM Private CA
-    #   defaults to the `EndEntityCertificate/V1` template. For CA
-    #   certificates, you should choose the shortest path length that meets
-    #   your needs. The path length is indicated by the PathLen*N* portion
-    #   of the ARN, where *N* is the [CA depth][1].
+    #   certificate. If this parameter is not provided, Amazon Web Services
+    #   Private CA defaults to the `EndEntityCertificate/V1` template. For
+    #   CA certificates, you should choose the shortest path length that
+    #   meets your needs. The path length is indicated by the PathLen*N*
+    #   portion of the ARN, where *N* is the [CA depth][1].
     #
     #   Note: The CA depth configured on a subordinate CA certificate must
     #   not exceed the limit set by its parents in the CA hierarchy.
     #
-    #   For a list of `TemplateArn` values supported by ACM Private CA, see
-    #   [Understanding Certificate Templates][2].
+    #   For a list of `TemplateArn` values supported by Amazon Web Services
+    #   Private CA, see [Understanding Certificate Templates][2].
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaTerms.html#terms-cadepth
-    #   [2]: https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/userguide/PcaTerms.html#terms-cadepth
+    #   [2]: https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html
     #   @return [String]
     #
     # @!attribute [rw] validity
@@ -2428,11 +1636,11 @@ module Aws::ACMPCA
     #   certificate. This parameter sets the “Not Before" date for the
     #   certificate.
     #
-    #   By default, when issuing a certificate, ACM Private CA sets the
-    #   "Not Before" date to the issuance time minus 60 minutes. This
-    #   compensates for clock inconsistencies across computer systems. The
-    #   `ValidityNotBefore` parameter can be used to customize the “Not
-    #   Before” value.
+    #   By default, when issuing a certificate, Amazon Web Services Private
+    #   CA sets the "Not Before" date to the issuance time minus 60
+    #   minutes. This compensates for clock inconsistencies across computer
+    #   systems. The `ValidityNotBefore` parameter can be used to customize
+    #   the “Not Before” value.
     #
     #   Unlike the `Validity` parameter, the `ValidityNotBefore` parameter
     #   is optional.
@@ -2453,10 +1661,11 @@ module Aws::ACMPCA
     #   the **IssueCertificate** action. Idempotency tokens for
     #   **IssueCertificate** time out after one minute. Therefore, if you
     #   call **IssueCertificate** multiple times with the same idempotency
-    #   token within one minute, ACM Private CA recognizes that you are
-    #   requesting only one certificate and will issue only one. If you
-    #   change the idempotency token for each call, PCA recognizes that you
-    #   are requesting multiple certificates.
+    #   token within one minute, Amazon Web Services Private CA recognizes
+    #   that you are requesting only one certificate and will issue only
+    #   one. If you change the idempotency token for each call, Amazon Web
+    #   Services Private CA recognizes that you are requesting multiple
+    #   certificates.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/IssueCertificateRequest AWS API Documentation
@@ -2493,21 +1702,6 @@ module Aws::ACMPCA
     # Defines one or more purposes for which the key contained in the
     # certificate can be used. Default value for each option is false.
     #
-    # @note When making an API call, you may pass KeyUsage
-    #   data as a hash:
-    #
-    #       {
-    #         digital_signature: false,
-    #         non_repudiation: false,
-    #         key_encipherment: false,
-    #         data_encipherment: false,
-    #         key_agreement: false,
-    #         key_cert_sign: false,
-    #         crl_sign: false,
-    #         encipher_only: false,
-    #         decipher_only: false,
-    #       }
-    #
     # @!attribute [rw] digital_signature
     #   Key can be used for digital signing.
     #   @return [Boolean]
@@ -2560,8 +1754,8 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # An ACM Private CA quota has been exceeded. See the exception message
-    # returned to determine the quota that was exceeded.
+    # An Amazon Web Services Private CA quota has been exceeded. See the
+    # exception message returned to determine the quota that was exceeded.
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -2574,15 +1768,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListCertificateAuthoritiesRequest
-    #   data as a hash:
-    #
-    #       {
-    #         next_token: "NextToken",
-    #         max_results: 1,
-    #         resource_owner: "SELF", # accepts SELF, OTHER_ACCOUNTS
-    #       }
-    #
     # @!attribute [rw] next_token
     #   Use this parameter when paginating results in a subsequent request
     #   after you receive a response with truncated results. Set it to the
@@ -2632,15 +1817,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListPermissionsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         next_token: "NextToken",
-    #         max_results: 1,
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Number (ARN) of the private CA to inspect. You
     #   can find the ARN by calling the [ListCertificateAuthorities][1]
@@ -2651,7 +1827,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListCertificateAuthorities.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListCertificateAuthorities.html
     #   @return [String]
     #
     # @!attribute [rw] next_token
@@ -2698,15 +1874,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass ListTagsRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         next_token: "NextToken",
-    #         max_results: 1,
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called the
     #   [CreateCertificateAuthority][1] action. This must be of the form:
@@ -2716,7 +1883,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @!attribute [rw] next_token
@@ -2809,35 +1976,32 @@ module Aws::ACMPCA
     # When you revoke a certificate, OCSP responses may take up to 60
     # minutes to reflect the new status.
     #
-    # @note When making an API call, you may pass OcspConfiguration
-    #   data as a hash:
-    #
-    #       {
-    #         enabled: false, # required
-    #         ocsp_custom_cname: "String253",
-    #       }
-    #
     # @!attribute [rw] enabled
     #   Flag enabling use of the Online Certificate Status Protocol (OCSP)
     #   for validating certificate revocation status.
     #   @return [Boolean]
     #
     # @!attribute [rw] ocsp_custom_cname
-    #   By default, ACM Private CA injects an Amazon Web Services domain
-    #   into certificates being validated by the Online Certificate Status
-    #   Protocol (OCSP). A customer can alternatively use this object to
-    #   define a CNAME specifying a customized OCSP domain.
+    #   By default, Amazon Web Services Private CA injects an Amazon Web
+    #   Services domain into certificates being validated by the Online
+    #   Certificate Status Protocol (OCSP). A customer can alternatively use
+    #   this object to define a CNAME specifying a customized OCSP domain.
     #
-    #   Note: The value of the CNAME must not include a protocol prefix such
-    #   as "http://" or "https://".
+    #   <note markdown="1"> The content of a Canonical Name (CNAME) record must conform to
+    #   [RFC2396][1] restrictions on the use of special characters in URIs.
+    #   Additionally, the value of the CNAME must not include a protocol
+    #   prefix such as "http://" or "https://".
+    #
+    #    </note>
     #
     #   For more information, see [Customizing Online Certificate Status
-    #   Protocol (OCSP) ][1] in the *Private Certificate Authority (PCA)
-    #   User Guide*.
+    #   Protocol (OCSP) ][2] in the *Amazon Web Services Private Certificate
+    #   Authority User Guide*.
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/userguide/ocsp-customize.html
+    #   [1]: https://www.ietf.org/rfc/rfc2396.txt
+    #   [2]: https://docs.aws.amazon.com/privateca/latest/userguide/ocsp-customize.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/OcspConfiguration AWS API Documentation
@@ -2858,14 +2022,6 @@ module Aws::ACMPCA
     #
     # [1]: https://csrc.nist.gov/glossary/term/Object_Identifier
     #
-    # @note When making an API call, you may pass OtherName
-    #   data as a hash:
-    #
-    #       {
-    #         type_id: "CustomObjectIdentifier", # required
-    #         value: "String256", # required
-    #       }
-    #
     # @!attribute [rw] type_id
     #   Specifies an OID.
     #   @return [String]
@@ -2894,9 +2050,9 @@ module Aws::ACMPCA
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreatePermission.html
-    # [2]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePermission.html
-    # [3]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListPermissions.html
+    # [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreatePermission.html
+    # [2]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_DeletePermission.html
+    # [3]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListPermissions.html
     #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Number (ARN) of the private CA from which the
@@ -2953,21 +2109,6 @@ module Aws::ACMPCA
 
     # Defines the X.509 `CertificatePolicies` extension.
     #
-    # @note When making an API call, you may pass PolicyInformation
-    #   data as a hash:
-    #
-    #       {
-    #         cert_policy_id: "CustomObjectIdentifier", # required
-    #         policy_qualifiers: [
-    #           {
-    #             policy_qualifier_id: "CPS", # required, accepts CPS
-    #             qualifier: { # required
-    #               cps_uri: "String256", # required
-    #             },
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] cert_policy_id
     #   Specifies the object identifier (OID) of the certificate policy
     #   under which the certificate was issued. For more information, see
@@ -2979,8 +2120,9 @@ module Aws::ACMPCA
     #   @return [String]
     #
     # @!attribute [rw] policy_qualifiers
-    #   Modifies the given `CertPolicyId` with a qualifier. ACM Private CA
-    #   supports the certification practice statement (CPS) qualifier.
+    #   Modifies the given `CertPolicyId` with a qualifier. Amazon Web
+    #   Services Private CA supports the certification practice statement
+    #   (CPS) qualifier.
     #   @return [Array<Types::PolicyQualifierInfo>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/PolicyInformation AWS API Documentation
@@ -2993,26 +2135,16 @@ module Aws::ACMPCA
     end
 
     # Modifies the `CertPolicyId` of a `PolicyInformation` object with a
-    # qualifier. ACM Private CA supports the certification practice
-    # statement (CPS) qualifier.
-    #
-    # @note When making an API call, you may pass PolicyQualifierInfo
-    #   data as a hash:
-    #
-    #       {
-    #         policy_qualifier_id: "CPS", # required, accepts CPS
-    #         qualifier: { # required
-    #           cps_uri: "String256", # required
-    #         },
-    #       }
+    # qualifier. Amazon Web Services Private CA supports the certification
+    # practice statement (CPS) qualifier.
     #
     # @!attribute [rw] policy_qualifier_id
     #   Identifies the qualifier modifying a `CertPolicyId`.
     #   @return [String]
     #
     # @!attribute [rw] qualifier
-    #   Defines the qualifier type. ACM Private CA supports the use of a URI
-    #   for a CPS qualifier in this field.
+    #   Defines the qualifier type. Amazon Web Services Private CA supports
+    #   the use of a URI for a CPS qualifier in this field.
     #   @return [Types::Qualifier]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/PolicyQualifierInfo AWS API Documentation
@@ -3024,14 +2156,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass PutPolicyRequest
-    #   data as a hash:
-    #
-    #       {
-    #         resource_arn: "Arn", # required
-    #         policy: "AWSPolicy", # required
-    #       }
-    #
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Number (ARN) of the private CA to associate with
     #   the policy. The ARN of the CA can be found by calling the
@@ -3041,7 +2165,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListCertificateAuthorities.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListCertificateAuthorities.html
     #   @return [String]
     #
     # @!attribute [rw] policy
@@ -3066,21 +2190,14 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # Defines a `PolicyInformation` qualifier. ACM Private CA supports the
-    # [certification practice statement (CPS) qualifier][1] defined in RFC
-    # 5280.
+    # Defines a `PolicyInformation` qualifier. Amazon Web Services Private
+    # CA supports the [certification practice statement (CPS) qualifier][1]
+    # defined in RFC 5280.
     #
     #
     #
     # [1]: https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.4
     #
-    # @note When making an API call, you may pass Qualifier
-    #   data as a hash:
-    #
-    #       {
-    #         cps_uri: "String256", # required
-    #       }
-    #
     # @!attribute [rw] cps_uri
     #   Contains a pointer to a certification practice statement (CPS)
     #   published by the CA.
@@ -3147,13 +2264,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass RestoreCertificateAuthorityRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called the
     #   [CreateCertificateAuthority][1] action. This must be of the form:
@@ -3163,7 +2273,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/RestoreCertificateAuthorityRequest AWS API Documentation
@@ -3182,38 +2292,22 @@ module Aws::ACMPCA
     # about certificates as requested by clients, and a CRL contains an
     # updated list of certificates revoked by your CA. For more information,
     # see [RevokeCertificate][3] and [Setting up a certificate revocation
-    # method][4] in the *Private Certificate Authority (PCA) User Guide*.
-    #
+    # method][4] in the *Amazon Web Services Private Certificate Authority
+    # User Guide*.
     #
     #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
-    # [2]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_UpdateCertificateAuthority.html
-    # [3]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_RevokeCertificate.html
-    # [4]: https://docs.aws.amazon.com/acm-pca/latest/userguide/revocation-setup.html
     #
-    # @note When making an API call, you may pass RevocationConfiguration
-    #   data as a hash:
-    #
-    #       {
-    #         crl_configuration: {
-    #           enabled: false, # required
-    #           expiration_in_days: 1,
-    #           custom_cname: "String253",
-    #           s3_bucket_name: "String3To255",
-    #           s3_object_acl: "PUBLIC_READ", # accepts PUBLIC_READ, BUCKET_OWNER_FULL_CONTROL
-    #         },
-    #         ocsp_configuration: {
-    #           enabled: false, # required
-    #           ocsp_custom_cname: "String253",
-    #         },
-    #       }
+    # [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
+    # [2]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html
+    # [3]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_RevokeCertificate.html
+    # [4]: https://docs.aws.amazon.com/privateca/latest/userguide/revocation-setup.html
     #
     # @!attribute [rw] crl_configuration
     #   Configuration of the certificate revocation list (CRL), if any,
     #   maintained by your private CA. A CRL is typically updated
     #   approximately 30 minutes after a certificate is revoked. If for any
-    #   reason a CRL update fails, ACM Private CA makes further attempts
-    #   every 15 minutes.
+    #   reason a CRL update fails, Amazon Web Services Private CA makes
+    #   further attempts every 15 minutes.
     #   @return [Types::CrlConfiguration]
     #
     # @!attribute [rw] ocsp_configuration
@@ -3232,15 +2326,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass RevokeCertificateRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         certificate_serial: "String128", # required
-    #         revocation_reason: "UNSPECIFIED", # required, accepts UNSPECIFIED, KEY_COMPROMISE, CERTIFICATE_AUTHORITY_COMPROMISE, AFFILIATION_CHANGED, SUPERSEDED, CESSATION_OF_OPERATION, PRIVILEGE_WITHDRAWN, A_A_COMPROMISE
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   Amazon Resource Name (ARN) of the private CA that issued the
     #   certificate to be revoked. This must be of the form:
@@ -3266,7 +2351,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetCertificate.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_GetCertificate.html
     #   [2]: https://docs.aws.amazon.com/acm/latest/APIReference/API_DescribeCertificate.html
     #   @return [String]
     #
@@ -3292,16 +2377,8 @@ module Aws::ACMPCA
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_TagCertificateAuthority.html
-    # [2]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_UntagCertificateAuthority.html
-    #
-    # @note When making an API call, you may pass Tag
-    #   data as a hash:
-    #
-    #       {
-    #         key: "TagKey", # required
-    #         value: "TagValue",
-    #       }
+    # [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_TagCertificateAuthority.html
+    # [2]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_UntagCertificateAuthority.html
     #
     # @!attribute [rw] key
     #   Key (name) of the tag.
@@ -3320,19 +2397,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass TagCertificateAuthorityRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         tags: [ # required
-    #           {
-    #             key: "TagKey", # required
-    #             value: "TagValue",
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called
     #   [CreateCertificateAuthority][1]. This must be of the form:
@@ -3342,7 +2406,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @!attribute [rw] tags
@@ -3372,19 +2436,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass UntagCertificateAuthorityRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         tags: [ # required
-    #           {
-    #             key: "TagKey", # required
-    #             value: "TagValue",
-    #           },
-    #         ],
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   The Amazon Resource Name (ARN) that was returned when you called
     #   [CreateCertificateAuthority][1]. This must be of the form:
@@ -3394,7 +2445,7 @@ module Aws::ACMPCA
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
     #   @return [String]
     #
     # @!attribute [rw] tags
@@ -3410,27 +2461,6 @@ module Aws::ACMPCA
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass UpdateCertificateAuthorityRequest
-    #   data as a hash:
-    #
-    #       {
-    #         certificate_authority_arn: "Arn", # required
-    #         revocation_configuration: {
-    #           crl_configuration: {
-    #             enabled: false, # required
-    #             expiration_in_days: 1,
-    #             custom_cname: "String253",
-    #             s3_bucket_name: "String3To255",
-    #             s3_object_acl: "PUBLIC_READ", # accepts PUBLIC_READ, BUCKET_OWNER_FULL_CONTROL
-    #           },
-    #           ocsp_configuration: {
-    #             enabled: false, # required
-    #             ocsp_custom_cname: "String253",
-    #           },
-    #         },
-    #         status: "CREATING", # accepts CREATING, PENDING_CERTIFICATE, ACTIVE, DELETED, DISABLED, EXPIRED, FAILED
-    #       }
-    #
     # @!attribute [rw] certificate_authority_arn
     #   Amazon Resource Name (ARN) of the private CA that issued the
     #   certificate to be revoked. This must be of the form:
@@ -3447,10 +2477,31 @@ module Aws::ACMPCA
     #   information, see the [OcspConfiguration][1] and
     #   [CrlConfiguration][2] types.
     #
+    #   <note markdown="1"> The following requirements apply to revocation configurations.
+    #
+    #    * A configuration disabling CRLs or OCSP must contain only the
+    #     `Enabled=False` parameter, and will fail if other parameters such
+    #     as `CustomCname` or `ExpirationInDays` are included.
+    #
+    #   * In a CRL configuration, the `S3BucketName` parameter must conform
+    #     to [Amazon S3 bucket naming rules][3].
+    #
+    #   * A configuration containing a custom Canonical Name (CNAME)
+    #     parameter for CRLs or OCSP must conform to [RFC2396][4]
+    #     restrictions on the use of special characters in a CNAME.
     #
+    #   * In a CRL or OCSP configuration, the value of a CNAME parameter
+    #     must not include a protocol prefix such as "http://" or
+    #     "https://".
     #
-    #   [1]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_OcspConfiguration.html
-    #   [2]: https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CrlConfiguration.html
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_OcspConfiguration.html
+    #   [2]: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CrlConfiguration.html
+    #   [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html
+    #   [4]: https://www.ietf.org/rfc/rfc2396.txt
     #   @return [Types::RevocationConfiguration]
     #
     # @!attribute [rw] status
@@ -3473,34 +2524,26 @@ module Aws::ACMPCA
     # after issuance, stated in days, months, or years. For more
     # information, see [Validity][1] in RFC 5280.
     #
-    # ACM Private CA API consumes the `Validity` data type differently in
-    # two distinct parameters of the `IssueCertificate` action. The required
-    # parameter `IssueCertificate`\:`Validity` specifies the end of a
-    # certificate's validity period. The optional parameter
-    # `IssueCertificate`\:`ValidityNotBefore` specifies a customized
-    # starting time for the validity period.
+    # Amazon Web Services Private CA API consumes the `Validity` data type
+    # differently in two distinct parameters of the `IssueCertificate`
+    # action. The required parameter `IssueCertificate`\:`Validity`
+    # specifies the end of a certificate's validity period. The optional
+    # parameter `IssueCertificate`\:`ValidityNotBefore` specifies a
+    # customized starting time for the validity period.
     #
     #
     #
     # [1]: https://tools.ietf.org/html/rfc5280#section-4.1.2.5
     #
-    # @note When making an API call, you may pass Validity
-    #   data as a hash:
-    #
-    #       {
-    #         value: 1, # required
-    #         type: "END_DATE", # required, accepts END_DATE, ABSOLUTE, DAYS, MONTHS, YEARS
-    #       }
-    #
     # @!attribute [rw] value
     #   A long integer interpreted according to the value of `Type`, below.
     #   @return [Integer]
     #
     # @!attribute [rw] type
-    #   Determines how *ACM Private CA* interprets the `Value` parameter, an
-    #   integer. Supported validity types include those listed below. Type
-    #   definitions with values include a sample input value and the
-    #   resulting output.
+    #   Determines how *Amazon Web Services Private CA* interprets the
+    #   `Value` parameter, an integer. Supported validity types include
+    #   those listed below. Type definitions with values include a sample
+    #   input value and the resulting output.
     #
     #   `END_DATE`\: The specific date and time when the certificate will
     #   expire, expressed using UTCTime (YYMMDDHHMMSS) or GeneralizedTime