@aws-sdk/client-acm-pca 3.35.0 → 3.38.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +47 -0
- package/dist-cjs/ACMPCA.js +0 -21
- package/dist-cjs/ACMPCAClient.js +0 -26
- package/dist-cjs/commands/CreateCertificateAuthorityAuditReportCommand.js +0 -40
- package/dist-cjs/commands/CreateCertificateAuthorityCommand.js +0 -45
- package/dist-cjs/commands/CreatePermissionCommand.js +0 -51
- package/dist-cjs/commands/DeleteCertificateAuthorityCommand.js +0 -44
- package/dist-cjs/commands/DeletePermissionCommand.js +0 -53
- package/dist-cjs/commands/DeletePolicyCommand.js +0 -59
- package/dist-cjs/commands/DescribeCertificateAuthorityAuditReportCommand.js +0 -28
- package/dist-cjs/commands/DescribeCertificateAuthorityCommand.js +0 -65
- package/dist-cjs/commands/GetCertificateAuthorityCertificateCommand.js +0 -28
- package/dist-cjs/commands/GetCertificateAuthorityCsrCommand.js +0 -29
- package/dist-cjs/commands/GetCertificateCommand.js +0 -32
- package/dist-cjs/commands/GetPolicyCommand.js +0 -55
- package/dist-cjs/commands/ImportCertificateAuthorityCertificateCommand.js +0 -152
- package/dist-cjs/commands/IssueCertificateCommand.js +0 -32
- package/dist-cjs/commands/ListCertificateAuthoritiesCommand.js +0 -25
- package/dist-cjs/commands/ListPermissionsCommand.js +0 -52
- package/dist-cjs/commands/ListTagsCommand.js +0 -28
- package/dist-cjs/commands/PutPolicyCommand.js +0 -56
- package/dist-cjs/commands/RestoreCertificateAuthorityCommand.js +0 -35
- package/dist-cjs/commands/RevokeCertificateCommand.js +0 -44
- package/dist-cjs/commands/TagCertificateAuthorityCommand.js +0 -32
- package/dist-cjs/commands/UntagCertificateAuthorityCommand.js +0 -29
- package/dist-cjs/commands/UpdateCertificateAuthorityCommand.js +0 -35
- package/dist-cjs/commands/index.js +26 -0
- package/dist-cjs/endpoints.js +1 -2
- package/dist-cjs/index.js +5 -33
- package/dist-cjs/models/index.js +0 -1
- package/dist-cjs/models/models_0.js +0 -229
- package/dist-cjs/pagination/Interfaces.js +0 -1
- package/dist-cjs/pagination/ListCertificateAuthoritiesPaginator.js +0 -11
- package/dist-cjs/pagination/ListPermissionsPaginator.js +0 -11
- package/dist-cjs/pagination/ListTagsPaginator.js +0 -11
- package/dist-cjs/pagination/index.js +7 -0
- package/dist-cjs/protocols/Aws_json1_1.js +0 -6
- package/dist-cjs/runtimeConfig.browser.js +1 -6
- package/dist-cjs/runtimeConfig.js +2 -7
- package/dist-cjs/runtimeConfig.native.js +0 -4
- package/dist-cjs/runtimeConfig.shared.js +0 -4
- package/dist-cjs/waiters/index.js +6 -0
- package/dist-cjs/waiters/waitForAuditReportCreated.js +0 -10
- package/dist-cjs/waiters/waitForCertificateAuthorityCSRCreated.js +0 -10
- package/dist-cjs/waiters/waitForCertificateIssued.js +0 -10
- package/dist-es/ACMPCA.js +0 -1
- package/dist-es/ACMPCAClient.js +0 -1
- package/dist-es/commands/CreateCertificateAuthorityAuditReportCommand.js +0 -1
- package/dist-es/commands/CreateCertificateAuthorityCommand.js +0 -1
- package/dist-es/commands/CreatePermissionCommand.js +0 -1
- package/dist-es/commands/DeleteCertificateAuthorityCommand.js +0 -1
- package/dist-es/commands/DeletePermissionCommand.js +0 -1
- package/dist-es/commands/DeletePolicyCommand.js +0 -1
- package/dist-es/commands/DescribeCertificateAuthorityAuditReportCommand.js +0 -1
- package/dist-es/commands/DescribeCertificateAuthorityCommand.js +0 -1
- package/dist-es/commands/GetCertificateAuthorityCertificateCommand.js +0 -1
- package/dist-es/commands/GetCertificateAuthorityCsrCommand.js +0 -1
- package/dist-es/commands/GetCertificateCommand.js +0 -1
- package/dist-es/commands/GetPolicyCommand.js +0 -1
- package/dist-es/commands/ImportCertificateAuthorityCertificateCommand.js +0 -1
- package/dist-es/commands/IssueCertificateCommand.js +0 -1
- package/dist-es/commands/ListCertificateAuthoritiesCommand.js +0 -1
- package/dist-es/commands/ListPermissionsCommand.js +0 -1
- package/dist-es/commands/ListTagsCommand.js +0 -1
- package/dist-es/commands/PutPolicyCommand.js +0 -1
- package/dist-es/commands/RestoreCertificateAuthorityCommand.js +0 -1
- package/dist-es/commands/RevokeCertificateCommand.js +0 -1
- package/dist-es/commands/TagCertificateAuthorityCommand.js +0 -1
- package/dist-es/commands/UntagCertificateAuthorityCommand.js +0 -1
- package/dist-es/commands/UpdateCertificateAuthorityCommand.js +0 -1
- package/dist-es/commands/index.js +23 -0
- package/dist-es/endpoints.js +1 -2
- package/dist-es/index.js +5 -33
- package/dist-es/models/index.js +0 -1
- package/dist-es/models/models_0.js +0 -1
- package/dist-es/pagination/Interfaces.js +0 -1
- package/dist-es/pagination/ListCertificateAuthoritiesPaginator.js +0 -1
- package/dist-es/pagination/ListPermissionsPaginator.js +0 -1
- package/dist-es/pagination/ListTagsPaginator.js +0 -1
- package/dist-es/pagination/index.js +4 -0
- package/dist-es/protocols/Aws_json1_1.js +0 -1
- package/dist-es/runtimeConfig.browser.js +1 -2
- package/dist-es/runtimeConfig.js +2 -3
- package/dist-es/runtimeConfig.native.js +0 -1
- package/dist-es/runtimeConfig.shared.js +0 -1
- package/dist-es/waiters/index.js +3 -0
- package/dist-es/waiters/waitForAuditReportCreated.js +0 -1
- package/dist-es/waiters/waitForCertificateAuthorityCSRCreated.js +0 -1
- package/dist-es/waiters/waitForCertificateIssued.js +0 -1
- package/dist-types/commands/index.d.ts +23 -0
- package/dist-types/index.d.ts +5 -32
- package/dist-types/pagination/index.d.ts +4 -0
- package/dist-types/ts3.4/ACMPCA.d.ts +24 -563
- package/dist-types/ts3.4/ACMPCAClient.d.ts +24 -106
- package/dist-types/ts3.4/commands/CreateCertificateAuthorityAuditReportCommand.d.ts +2 -35
- package/dist-types/ts3.4/commands/CreateCertificateAuthorityCommand.d.ts +2 -40
- package/dist-types/ts3.4/commands/CreatePermissionCommand.d.ts +2 -46
- package/dist-types/ts3.4/commands/DeleteCertificateAuthorityCommand.d.ts +2 -39
- package/dist-types/ts3.4/commands/DeletePermissionCommand.d.ts +2 -48
- package/dist-types/ts3.4/commands/DeletePolicyCommand.d.ts +2 -54
- package/dist-types/ts3.4/commands/DescribeCertificateAuthorityAuditReportCommand.d.ts +2 -23
- package/dist-types/ts3.4/commands/DescribeCertificateAuthorityCommand.d.ts +2 -60
- package/dist-types/ts3.4/commands/GetCertificateAuthorityCertificateCommand.d.ts +2 -23
- package/dist-types/ts3.4/commands/GetCertificateAuthorityCsrCommand.d.ts +2 -24
- package/dist-types/ts3.4/commands/GetCertificateCommand.d.ts +2 -27
- package/dist-types/ts3.4/commands/GetPolicyCommand.d.ts +2 -50
- package/dist-types/ts3.4/commands/ImportCertificateAuthorityCertificateCommand.d.ts +2 -147
- package/dist-types/ts3.4/commands/IssueCertificateCommand.d.ts +2 -27
- package/dist-types/ts3.4/commands/ListCertificateAuthoritiesCommand.d.ts +2 -20
- package/dist-types/ts3.4/commands/ListPermissionsCommand.d.ts +2 -47
- package/dist-types/ts3.4/commands/ListTagsCommand.d.ts +2 -23
- package/dist-types/ts3.4/commands/PutPolicyCommand.d.ts +2 -51
- package/dist-types/ts3.4/commands/RestoreCertificateAuthorityCommand.d.ts +2 -30
- package/dist-types/ts3.4/commands/RevokeCertificateCommand.d.ts +2 -39
- package/dist-types/ts3.4/commands/TagCertificateAuthorityCommand.d.ts +2 -27
- package/dist-types/ts3.4/commands/UntagCertificateAuthorityCommand.d.ts +2 -24
- package/dist-types/ts3.4/commands/UpdateCertificateAuthorityCommand.d.ts +2 -30
- package/dist-types/ts3.4/commands/index.d.ts +23 -0
- package/dist-types/ts3.4/index.d.ts +5 -32
- package/dist-types/ts3.4/models/models_0.d.ts +289 -1432
- package/dist-types/ts3.4/pagination/index.d.ts +4 -0
- package/dist-types/ts3.4/runtimeConfig.browser.d.ts +1 -3
- package/dist-types/ts3.4/runtimeConfig.d.ts +1 -3
- package/dist-types/ts3.4/runtimeConfig.native.d.ts +1 -3
- package/dist-types/ts3.4/runtimeConfig.shared.d.ts +1 -3
- package/dist-types/ts3.4/waiters/index.d.ts +3 -0
- package/dist-types/ts3.4/waiters/waitForAuditReportCreated.d.ts +2 -9
- package/dist-types/ts3.4/waiters/waitForCertificateAuthorityCSRCreated.d.ts +2 -9
- package/dist-types/ts3.4/waiters/waitForCertificateIssued.d.ts +2 -9
- package/dist-types/waiters/index.d.ts +3 -0
- package/package.json +34 -31
- package/dist-cjs/ACMPCA.js.map +0 -1
- package/dist-cjs/ACMPCAClient.js.map +0 -1
- package/dist-cjs/commands/CreateCertificateAuthorityAuditReportCommand.js.map +0 -1
- package/dist-cjs/commands/CreateCertificateAuthorityCommand.js.map +0 -1
- package/dist-cjs/commands/CreatePermissionCommand.js.map +0 -1
- package/dist-cjs/commands/DeleteCertificateAuthorityCommand.js.map +0 -1
- package/dist-cjs/commands/DeletePermissionCommand.js.map +0 -1
- package/dist-cjs/commands/DeletePolicyCommand.js.map +0 -1
- package/dist-cjs/commands/DescribeCertificateAuthorityAuditReportCommand.js.map +0 -1
- package/dist-cjs/commands/DescribeCertificateAuthorityCommand.js.map +0 -1
- package/dist-cjs/commands/GetCertificateAuthorityCertificateCommand.js.map +0 -1
- package/dist-cjs/commands/GetCertificateAuthorityCsrCommand.js.map +0 -1
- package/dist-cjs/commands/GetCertificateCommand.js.map +0 -1
- package/dist-cjs/commands/GetPolicyCommand.js.map +0 -1
- package/dist-cjs/commands/ImportCertificateAuthorityCertificateCommand.js.map +0 -1
- package/dist-cjs/commands/IssueCertificateCommand.js.map +0 -1
- package/dist-cjs/commands/ListCertificateAuthoritiesCommand.js.map +0 -1
- package/dist-cjs/commands/ListPermissionsCommand.js.map +0 -1
- package/dist-cjs/commands/ListTagsCommand.js.map +0 -1
- package/dist-cjs/commands/PutPolicyCommand.js.map +0 -1
- package/dist-cjs/commands/RestoreCertificateAuthorityCommand.js.map +0 -1
- package/dist-cjs/commands/RevokeCertificateCommand.js.map +0 -1
- package/dist-cjs/commands/TagCertificateAuthorityCommand.js.map +0 -1
- package/dist-cjs/commands/UntagCertificateAuthorityCommand.js.map +0 -1
- package/dist-cjs/commands/UpdateCertificateAuthorityCommand.js.map +0 -1
- package/dist-cjs/endpoints.js.map +0 -1
- package/dist-cjs/index.js.map +0 -1
- package/dist-cjs/models/index.js.map +0 -1
- package/dist-cjs/models/models_0.js.map +0 -1
- package/dist-cjs/pagination/Interfaces.js.map +0 -1
- package/dist-cjs/pagination/ListCertificateAuthoritiesPaginator.js.map +0 -1
- package/dist-cjs/pagination/ListPermissionsPaginator.js.map +0 -1
- package/dist-cjs/pagination/ListTagsPaginator.js.map +0 -1
- package/dist-cjs/protocols/Aws_json1_1.js.map +0 -1
- package/dist-cjs/runtimeConfig.browser.js.map +0 -1
- package/dist-cjs/runtimeConfig.js.map +0 -1
- package/dist-cjs/runtimeConfig.native.js.map +0 -1
- package/dist-cjs/runtimeConfig.shared.js.map +0 -1
- package/dist-cjs/waiters/waitForAuditReportCreated.js.map +0 -1
- package/dist-cjs/waiters/waitForCertificateAuthorityCSRCreated.js.map +0 -1
- package/dist-cjs/waiters/waitForCertificateIssued.js.map +0 -1
- package/dist-es/ACMPCA.js.map +0 -1
- package/dist-es/ACMPCAClient.js.map +0 -1
- package/dist-es/commands/CreateCertificateAuthorityAuditReportCommand.js.map +0 -1
- package/dist-es/commands/CreateCertificateAuthorityCommand.js.map +0 -1
- package/dist-es/commands/CreatePermissionCommand.js.map +0 -1
- package/dist-es/commands/DeleteCertificateAuthorityCommand.js.map +0 -1
- package/dist-es/commands/DeletePermissionCommand.js.map +0 -1
- package/dist-es/commands/DeletePolicyCommand.js.map +0 -1
- package/dist-es/commands/DescribeCertificateAuthorityAuditReportCommand.js.map +0 -1
- package/dist-es/commands/DescribeCertificateAuthorityCommand.js.map +0 -1
- package/dist-es/commands/GetCertificateAuthorityCertificateCommand.js.map +0 -1
- package/dist-es/commands/GetCertificateAuthorityCsrCommand.js.map +0 -1
- package/dist-es/commands/GetCertificateCommand.js.map +0 -1
- package/dist-es/commands/GetPolicyCommand.js.map +0 -1
- package/dist-es/commands/ImportCertificateAuthorityCertificateCommand.js.map +0 -1
- package/dist-es/commands/IssueCertificateCommand.js.map +0 -1
- package/dist-es/commands/ListCertificateAuthoritiesCommand.js.map +0 -1
- package/dist-es/commands/ListPermissionsCommand.js.map +0 -1
- package/dist-es/commands/ListTagsCommand.js.map +0 -1
- package/dist-es/commands/PutPolicyCommand.js.map +0 -1
- package/dist-es/commands/RestoreCertificateAuthorityCommand.js.map +0 -1
- package/dist-es/commands/RevokeCertificateCommand.js.map +0 -1
- package/dist-es/commands/TagCertificateAuthorityCommand.js.map +0 -1
- package/dist-es/commands/UntagCertificateAuthorityCommand.js.map +0 -1
- package/dist-es/commands/UpdateCertificateAuthorityCommand.js.map +0 -1
- package/dist-es/endpoints.js.map +0 -1
- package/dist-es/index.js.map +0 -1
- package/dist-es/models/index.js.map +0 -1
- package/dist-es/models/models_0.js.map +0 -1
- package/dist-es/pagination/Interfaces.js.map +0 -1
- package/dist-es/pagination/ListCertificateAuthoritiesPaginator.js.map +0 -1
- package/dist-es/pagination/ListPermissionsPaginator.js.map +0 -1
- package/dist-es/pagination/ListTagsPaginator.js.map +0 -1
- package/dist-es/protocols/Aws_json1_1.js.map +0 -1
- package/dist-es/runtimeConfig.browser.js.map +0 -1
- package/dist-es/runtimeConfig.js.map +0 -1
- package/dist-es/runtimeConfig.native.js.map +0 -1
- package/dist-es/runtimeConfig.shared.js.map +0 -1
- package/dist-es/waiters/waitForAuditReportCreated.js.map +0 -1
- package/dist-es/waiters/waitForCertificateAuthorityCSRCreated.js.map +0 -1
- package/dist-es/waiters/waitForCertificateIssued.js.map +0 -1
- package/jest.config.js +0 -4
- package/src/ACMPCA.ts +0 -1323
- package/src/ACMPCAClient.ts +0 -361
- package/src/commands/CreateCertificateAuthorityAuditReportCommand.ts +0 -122
- package/src/commands/CreateCertificateAuthorityCommand.ts +0 -118
- package/src/commands/CreatePermissionCommand.ts +0 -121
- package/src/commands/DeleteCertificateAuthorityCommand.ts +0 -117
- package/src/commands/DeletePermissionCommand.ts +0 -123
- package/src/commands/DeletePolicyCommand.ts +0 -129
- package/src/commands/DescribeCertificateAuthorityAuditReportCommand.ts +0 -113
- package/src/commands/DescribeCertificateAuthorityCommand.ts +0 -140
- package/src/commands/GetCertificateAuthorityCertificateCommand.ts +0 -109
- package/src/commands/GetCertificateAuthorityCsrCommand.ts +0 -102
- package/src/commands/GetCertificateCommand.ts +0 -102
- package/src/commands/GetPolicyCommand.ts +0 -122
- package/src/commands/ImportCertificateAuthorityCertificateCommand.ts +0 -229
- package/src/commands/IssueCertificateCommand.ts +0 -102
- package/src/commands/ListCertificateAuthoritiesCommand.ts +0 -98
- package/src/commands/ListPermissionsCommand.ts +0 -122
- package/src/commands/ListTagsCommand.ts +0 -91
- package/src/commands/PutPolicyCommand.ts +0 -123
- package/src/commands/RestoreCertificateAuthorityCommand.ts +0 -108
- package/src/commands/RevokeCertificateCommand.ts +0 -114
- package/src/commands/TagCertificateAuthorityCommand.ts +0 -102
- package/src/commands/UntagCertificateAuthorityCommand.ts +0 -102
- package/src/commands/UpdateCertificateAuthorityCommand.ts +0 -108
- package/src/endpoints.ts +0 -91
- package/src/index.ts +0 -33
- package/src/models/index.ts +0 -1
- package/src/models/models_0.ts +0 -2571
- package/src/pagination/Interfaces.ts +0 -8
- package/src/pagination/ListCertificateAuthoritiesPaginator.ts +0 -59
- package/src/pagination/ListPermissionsPaginator.ts +0 -59
- package/src/pagination/ListTagsPaginator.ts +0 -55
- package/src/protocols/Aws_json1_1.ts +0 -3845
- package/src/runtimeConfig.browser.ts +0 -41
- package/src/runtimeConfig.native.ts +0 -17
- package/src/runtimeConfig.shared.ts +0 -17
- package/src/runtimeConfig.ts +0 -46
- package/src/waiters/waitForAuditReportCreated.ts +0 -61
- package/src/waiters/waitForCertificateAuthorityCSRCreated.ts +0 -49
- package/src/waiters/waitForCertificateIssued.ts +0 -43
- package/tsconfig.es.json +0 -10
- package/tsconfig.json +0 -33
- package/tsconfig.types.json +0 -9
|
@@ -6,32 +6,11 @@ export interface GetCertificateAuthorityCertificateCommandInput extends GetCerti
|
|
|
6
6
|
}
|
|
7
7
|
export interface GetCertificateAuthorityCertificateCommandOutput extends GetCertificateAuthorityCertificateResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Retrieves the certificate and certificate chain for your private certificate authority
|
|
11
|
-
* (CA) or one that has been shared with you. Both the certificate and the chain are base64
|
|
12
|
-
* PEM-encoded. The chain does not include the CA certificate. Each certificate in the
|
|
13
|
-
* chain signs the one before it. </p>
|
|
14
|
-
* @example
|
|
15
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
16
|
-
* ```javascript
|
|
17
|
-
* import { ACMPCAClient, GetCertificateAuthorityCertificateCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
18
|
-
* // const { ACMPCAClient, GetCertificateAuthorityCertificateCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
19
|
-
* const client = new ACMPCAClient(config);
|
|
20
|
-
* const command = new GetCertificateAuthorityCertificateCommand(input);
|
|
21
|
-
* const response = await client.send(command);
|
|
22
|
-
* ```
|
|
23
|
-
*
|
|
24
|
-
* @see {@link GetCertificateAuthorityCertificateCommandInput} for command's `input` shape.
|
|
25
|
-
* @see {@link GetCertificateAuthorityCertificateCommandOutput} for command's `response` shape.
|
|
26
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
27
|
-
*
|
|
28
|
-
*/
|
|
9
|
+
|
|
29
10
|
export declare class GetCertificateAuthorityCertificateCommand extends $Command<GetCertificateAuthorityCertificateCommandInput, GetCertificateAuthorityCertificateCommandOutput, ACMPCAClientResolvedConfig> {
|
|
30
11
|
readonly input: GetCertificateAuthorityCertificateCommandInput;
|
|
31
12
|
constructor(input: GetCertificateAuthorityCertificateCommandInput);
|
|
32
|
-
|
|
33
|
-
* @internal
|
|
34
|
-
*/
|
|
13
|
+
|
|
35
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<GetCertificateAuthorityCertificateCommandInput, GetCertificateAuthorityCertificateCommandOutput>;
|
|
36
15
|
private serialize;
|
|
37
16
|
private deserialize;
|
|
@@ -6,33 +6,11 @@ export interface GetCertificateAuthorityCsrCommandInput extends GetCertificateAu
|
|
|
6
6
|
}
|
|
7
7
|
export interface GetCertificateAuthorityCsrCommandOutput extends GetCertificateAuthorityCsrResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Retrieves the certificate signing request (CSR) for your private certificate authority
|
|
11
|
-
* (CA). The CSR is created when you call the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html">CreateCertificateAuthority</a> action. Sign the CSR with your ACM Private CA-hosted or
|
|
12
|
-
* on-premises root or subordinate CA. Then import the signed certificate back into ACM Private CA
|
|
13
|
-
* by calling the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ImportCertificateAuthorityCertificate.html">ImportCertificateAuthorityCertificate</a> action. The CSR is returned as a
|
|
14
|
-
* base64 PEM-encoded string. </p>
|
|
15
|
-
* @example
|
|
16
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
17
|
-
* ```javascript
|
|
18
|
-
* import { ACMPCAClient, GetCertificateAuthorityCsrCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
19
|
-
* // const { ACMPCAClient, GetCertificateAuthorityCsrCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
20
|
-
* const client = new ACMPCAClient(config);
|
|
21
|
-
* const command = new GetCertificateAuthorityCsrCommand(input);
|
|
22
|
-
* const response = await client.send(command);
|
|
23
|
-
* ```
|
|
24
|
-
*
|
|
25
|
-
* @see {@link GetCertificateAuthorityCsrCommandInput} for command's `input` shape.
|
|
26
|
-
* @see {@link GetCertificateAuthorityCsrCommandOutput} for command's `response` shape.
|
|
27
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
28
|
-
*
|
|
29
|
-
*/
|
|
9
|
+
|
|
30
10
|
export declare class GetCertificateAuthorityCsrCommand extends $Command<GetCertificateAuthorityCsrCommandInput, GetCertificateAuthorityCsrCommandOutput, ACMPCAClientResolvedConfig> {
|
|
31
11
|
readonly input: GetCertificateAuthorityCsrCommandInput;
|
|
32
12
|
constructor(input: GetCertificateAuthorityCsrCommandInput);
|
|
33
|
-
|
|
34
|
-
* @internal
|
|
35
|
-
*/
|
|
13
|
+
|
|
36
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<GetCertificateAuthorityCsrCommandInput, GetCertificateAuthorityCsrCommandOutput>;
|
|
37
15
|
private serialize;
|
|
38
16
|
private deserialize;
|
|
@@ -6,36 +6,11 @@ export interface GetCertificateCommandInput extends GetCertificateRequest {
|
|
|
6
6
|
}
|
|
7
7
|
export interface GetCertificateCommandOutput extends GetCertificateResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Retrieves a certificate from your private CA or one that has been shared with you. The
|
|
11
|
-
* ARN of the certificate is returned when you call the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_IssueCertificate.html">IssueCertificate</a> action. You
|
|
12
|
-
* must specify both the ARN of your private CA and the ARN of the issued certificate when
|
|
13
|
-
* calling the <b>GetCertificate</b> action. You can retrieve the
|
|
14
|
-
* certificate if it is in the <b>ISSUED</b> state. You can call
|
|
15
|
-
* the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthorityAuditReport.html">CreateCertificateAuthorityAuditReport</a> action to create a report that
|
|
16
|
-
* contains information about all of the certificates issued and revoked by your private
|
|
17
|
-
* CA. </p>
|
|
18
|
-
* @example
|
|
19
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
20
|
-
* ```javascript
|
|
21
|
-
* import { ACMPCAClient, GetCertificateCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
22
|
-
* // const { ACMPCAClient, GetCertificateCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
23
|
-
* const client = new ACMPCAClient(config);
|
|
24
|
-
* const command = new GetCertificateCommand(input);
|
|
25
|
-
* const response = await client.send(command);
|
|
26
|
-
* ```
|
|
27
|
-
*
|
|
28
|
-
* @see {@link GetCertificateCommandInput} for command's `input` shape.
|
|
29
|
-
* @see {@link GetCertificateCommandOutput} for command's `response` shape.
|
|
30
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
31
|
-
*
|
|
32
|
-
*/
|
|
9
|
+
|
|
33
10
|
export declare class GetCertificateCommand extends $Command<GetCertificateCommandInput, GetCertificateCommandOutput, ACMPCAClientResolvedConfig> {
|
|
34
11
|
readonly input: GetCertificateCommandInput;
|
|
35
12
|
constructor(input: GetCertificateCommandInput);
|
|
36
|
-
|
|
37
|
-
* @internal
|
|
38
|
-
*/
|
|
13
|
+
|
|
39
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<GetCertificateCommandInput, GetCertificateCommandOutput>;
|
|
40
15
|
private serialize;
|
|
41
16
|
private deserialize;
|
|
@@ -6,59 +6,11 @@ export interface GetPolicyCommandInput extends GetPolicyRequest {
|
|
|
6
6
|
}
|
|
7
7
|
export interface GetPolicyCommandOutput extends GetPolicyResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Retrieves the resource-based policy attached to a private CA. If either the private CA
|
|
11
|
-
* resource or the policy cannot be found, this action returns a
|
|
12
|
-
* <code>ResourceNotFoundException</code>. </p>
|
|
13
|
-
* <p>The policy can be attached or updated with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_PutPolicy.html">PutPolicy</a> and removed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePolicy.html">DeletePolicy</a>.</p>
|
|
14
|
-
* <p class="title">
|
|
15
|
-
* <b>About Policies</b>
|
|
16
|
-
* </p>
|
|
17
|
-
* <ul>
|
|
18
|
-
* <li>
|
|
19
|
-
* <p>A policy grants access on a private CA to an AWS customer account, to AWS Organizations, or to
|
|
20
|
-
* an AWS Organizations unit. Policies are under the control of a CA administrator. For more information,
|
|
21
|
-
* see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/pca-rbp.html">Using a Resource Based Policy with ACM Private CA</a>.</p>
|
|
22
|
-
* </li>
|
|
23
|
-
* <li>
|
|
24
|
-
* <p>A policy permits a user of AWS Certificate Manager (ACM) to issue ACM certificates
|
|
25
|
-
* signed by a CA in another account.</p>
|
|
26
|
-
* </li>
|
|
27
|
-
* <li>
|
|
28
|
-
* <p>For ACM to manage automatic renewal of these certificates,
|
|
29
|
-
* the ACM user must configure a Service Linked Role (SLR). The SLR allows
|
|
30
|
-
* the ACM service to assume the identity of the user, subject to confirmation against the
|
|
31
|
-
* ACM Private CA policy. For more information, see
|
|
32
|
-
* <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-slr.html">Using a
|
|
33
|
-
* Service Linked Role with ACM</a>.</p>
|
|
34
|
-
* </li>
|
|
35
|
-
* <li>
|
|
36
|
-
* <p>Updates made in AWS Resource Manager (RAM) are reflected in policies. For more information,
|
|
37
|
-
* see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/pca-ram.html">Attach a Policy for Cross-Account
|
|
38
|
-
* Access</a>.</p>
|
|
39
|
-
* </li>
|
|
40
|
-
* </ul>
|
|
41
|
-
* @example
|
|
42
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
43
|
-
* ```javascript
|
|
44
|
-
* import { ACMPCAClient, GetPolicyCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
45
|
-
* // const { ACMPCAClient, GetPolicyCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
46
|
-
* const client = new ACMPCAClient(config);
|
|
47
|
-
* const command = new GetPolicyCommand(input);
|
|
48
|
-
* const response = await client.send(command);
|
|
49
|
-
* ```
|
|
50
|
-
*
|
|
51
|
-
* @see {@link GetPolicyCommandInput} for command's `input` shape.
|
|
52
|
-
* @see {@link GetPolicyCommandOutput} for command's `response` shape.
|
|
53
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
54
|
-
*
|
|
55
|
-
*/
|
|
9
|
+
|
|
56
10
|
export declare class GetPolicyCommand extends $Command<GetPolicyCommandInput, GetPolicyCommandOutput, ACMPCAClientResolvedConfig> {
|
|
57
11
|
readonly input: GetPolicyCommandInput;
|
|
58
12
|
constructor(input: GetPolicyCommandInput);
|
|
59
|
-
|
|
60
|
-
* @internal
|
|
61
|
-
*/
|
|
13
|
+
|
|
62
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<GetPolicyCommandInput, GetPolicyCommandOutput>;
|
|
63
15
|
private serialize;
|
|
64
16
|
private deserialize;
|
|
@@ -6,156 +6,11 @@ export interface ImportCertificateAuthorityCertificateCommandInput extends Impor
|
|
|
6
6
|
}
|
|
7
7
|
export interface ImportCertificateAuthorityCertificateCommandOutput extends __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Imports a signed private CA certificate into ACM Private CA. This action is used when you are
|
|
11
|
-
* using a chain of trust whose root is located outside ACM Private CA. Before you can call this
|
|
12
|
-
* action, the following preparations must in place:</p>
|
|
13
|
-
* <ol>
|
|
14
|
-
* <li>
|
|
15
|
-
* <p>In ACM Private CA, call the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html">CreateCertificateAuthority</a> action to create the private CA that you
|
|
16
|
-
* plan to back with the imported certificate.</p>
|
|
17
|
-
* </li>
|
|
18
|
-
* <li>
|
|
19
|
-
* <p>Call the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetCertificateAuthorityCsr.html">GetCertificateAuthorityCsr</a> action to generate a certificate signing
|
|
20
|
-
* request (CSR).</p>
|
|
21
|
-
* </li>
|
|
22
|
-
* <li>
|
|
23
|
-
* <p>Sign the CSR using a root or intermediate CA hosted by either an on-premises
|
|
24
|
-
* PKI hierarchy or by a commercial CA.</p>
|
|
25
|
-
* </li>
|
|
26
|
-
* <li>
|
|
27
|
-
* <p>Create a certificate chain and copy the signed certificate and the certificate
|
|
28
|
-
* chain to your working directory.</p>
|
|
29
|
-
* </li>
|
|
30
|
-
* </ol>
|
|
31
|
-
* <p>ACM Private CA supports three scenarios for installing a CA certificate:</p>
|
|
32
|
-
* <ul>
|
|
33
|
-
* <li>
|
|
34
|
-
* <p>Installing a certificate for a root CA hosted by ACM Private CA.</p>
|
|
35
|
-
* </li>
|
|
36
|
-
* <li>
|
|
37
|
-
* <p>Installing a subordinate CA certificate whose parent authority is hosted by
|
|
38
|
-
* ACM Private CA.</p>
|
|
39
|
-
* </li>
|
|
40
|
-
* <li>
|
|
41
|
-
* <p>Installing a subordinate CA certificate whose parent authority is externally
|
|
42
|
-
* hosted.</p>
|
|
43
|
-
* </li>
|
|
44
|
-
* </ul>
|
|
45
|
-
* <p>The following additional requirements apply when you import a CA certificate.</p>
|
|
46
|
-
* <ul>
|
|
47
|
-
* <li>
|
|
48
|
-
* <p>Only a self-signed certificate can be imported as a root CA.</p>
|
|
49
|
-
* </li>
|
|
50
|
-
* <li>
|
|
51
|
-
* <p>A self-signed certificate cannot be imported as a subordinate CA.</p>
|
|
52
|
-
* </li>
|
|
53
|
-
* <li>
|
|
54
|
-
* <p>Your certificate chain must not include the private CA certificate that you
|
|
55
|
-
* are importing.</p>
|
|
56
|
-
* </li>
|
|
57
|
-
* <li>
|
|
58
|
-
* <p>Your root CA must be the last certificate in your chain. The subordinate
|
|
59
|
-
* certificate, if any, that your root CA signed must be next to last. The
|
|
60
|
-
* subordinate certificate signed by the preceding subordinate CA must come next,
|
|
61
|
-
* and so on until your chain is built. </p>
|
|
62
|
-
* </li>
|
|
63
|
-
* <li>
|
|
64
|
-
* <p>The chain must be PEM-encoded.</p>
|
|
65
|
-
* </li>
|
|
66
|
-
* <li>
|
|
67
|
-
* <p>The maximum allowed size of a certificate is 32 KB.</p>
|
|
68
|
-
* </li>
|
|
69
|
-
* <li>
|
|
70
|
-
* <p>The maximum allowed size of a certificate chain is 2 MB.</p>
|
|
71
|
-
* </li>
|
|
72
|
-
* </ul>
|
|
73
|
-
* <p>
|
|
74
|
-
* <i>Enforcement of Critical Constraints</i>
|
|
75
|
-
* </p>
|
|
76
|
-
* <p>ACM Private CA allows the following extensions to be marked critical in the imported CA
|
|
77
|
-
* certificate or chain.</p>
|
|
78
|
-
* <ul>
|
|
79
|
-
* <li>
|
|
80
|
-
* <p>Basic constraints (<i>must</i> be marked critical)</p>
|
|
81
|
-
* </li>
|
|
82
|
-
* <li>
|
|
83
|
-
* <p>Subject alternative names</p>
|
|
84
|
-
* </li>
|
|
85
|
-
* <li>
|
|
86
|
-
* <p>Key usage</p>
|
|
87
|
-
* </li>
|
|
88
|
-
* <li>
|
|
89
|
-
* <p>Extended key usage</p>
|
|
90
|
-
* </li>
|
|
91
|
-
* <li>
|
|
92
|
-
* <p>Authority key identifier</p>
|
|
93
|
-
* </li>
|
|
94
|
-
* <li>
|
|
95
|
-
* <p>Subject key identifier</p>
|
|
96
|
-
* </li>
|
|
97
|
-
* <li>
|
|
98
|
-
* <p>Issuer alternative name</p>
|
|
99
|
-
* </li>
|
|
100
|
-
* <li>
|
|
101
|
-
* <p>Subject directory attributes</p>
|
|
102
|
-
* </li>
|
|
103
|
-
* <li>
|
|
104
|
-
* <p>Subject information access</p>
|
|
105
|
-
* </li>
|
|
106
|
-
* <li>
|
|
107
|
-
* <p>Certificate policies</p>
|
|
108
|
-
* </li>
|
|
109
|
-
* <li>
|
|
110
|
-
* <p>Policy mappings</p>
|
|
111
|
-
* </li>
|
|
112
|
-
* <li>
|
|
113
|
-
* <p>Inhibit anyPolicy</p>
|
|
114
|
-
* </li>
|
|
115
|
-
* </ul>
|
|
116
|
-
* <p>ACM Private CA rejects the following extensions when they are marked critical in an imported CA
|
|
117
|
-
* certificate or chain.</p>
|
|
118
|
-
* <ul>
|
|
119
|
-
* <li>
|
|
120
|
-
* <p>Name constraints</p>
|
|
121
|
-
* </li>
|
|
122
|
-
* <li>
|
|
123
|
-
* <p>Policy constraints</p>
|
|
124
|
-
* </li>
|
|
125
|
-
* <li>
|
|
126
|
-
* <p>CRL distribution points</p>
|
|
127
|
-
* </li>
|
|
128
|
-
* <li>
|
|
129
|
-
* <p>Authority information access</p>
|
|
130
|
-
* </li>
|
|
131
|
-
* <li>
|
|
132
|
-
* <p>Freshest CRL</p>
|
|
133
|
-
* </li>
|
|
134
|
-
* <li>
|
|
135
|
-
* <p>Any other extension</p>
|
|
136
|
-
* </li>
|
|
137
|
-
* </ul>
|
|
138
|
-
* @example
|
|
139
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
140
|
-
* ```javascript
|
|
141
|
-
* import { ACMPCAClient, ImportCertificateAuthorityCertificateCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
142
|
-
* // const { ACMPCAClient, ImportCertificateAuthorityCertificateCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
143
|
-
* const client = new ACMPCAClient(config);
|
|
144
|
-
* const command = new ImportCertificateAuthorityCertificateCommand(input);
|
|
145
|
-
* const response = await client.send(command);
|
|
146
|
-
* ```
|
|
147
|
-
*
|
|
148
|
-
* @see {@link ImportCertificateAuthorityCertificateCommandInput} for command's `input` shape.
|
|
149
|
-
* @see {@link ImportCertificateAuthorityCertificateCommandOutput} for command's `response` shape.
|
|
150
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
151
|
-
*
|
|
152
|
-
*/
|
|
9
|
+
|
|
153
10
|
export declare class ImportCertificateAuthorityCertificateCommand extends $Command<ImportCertificateAuthorityCertificateCommandInput, ImportCertificateAuthorityCertificateCommandOutput, ACMPCAClientResolvedConfig> {
|
|
154
11
|
readonly input: ImportCertificateAuthorityCertificateCommandInput;
|
|
155
12
|
constructor(input: ImportCertificateAuthorityCertificateCommandInput);
|
|
156
|
-
|
|
157
|
-
* @internal
|
|
158
|
-
*/
|
|
13
|
+
|
|
159
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<ImportCertificateAuthorityCertificateCommandInput, ImportCertificateAuthorityCertificateCommandOutput>;
|
|
160
15
|
private serialize;
|
|
161
16
|
private deserialize;
|
|
@@ -6,36 +6,11 @@ export interface IssueCertificateCommandInput extends IssueCertificateRequest {
|
|
|
6
6
|
}
|
|
7
7
|
export interface IssueCertificateCommandOutput extends IssueCertificateResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Uses your private certificate authority (CA), or one that has been shared with you, to
|
|
11
|
-
* issue a client certificate. This action returns the Amazon Resource Name (ARN) of the
|
|
12
|
-
* certificate. You can retrieve the certificate by calling the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetCertificate.html">GetCertificate</a> action and
|
|
13
|
-
* specifying the ARN. </p>
|
|
14
|
-
* <note>
|
|
15
|
-
* <p>You cannot use the ACM <b>ListCertificateAuthorities</b> action to retrieve the ARNs of the
|
|
16
|
-
* certificates that you issue by using ACM Private CA.</p>
|
|
17
|
-
* </note>
|
|
18
|
-
* @example
|
|
19
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
20
|
-
* ```javascript
|
|
21
|
-
* import { ACMPCAClient, IssueCertificateCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
22
|
-
* // const { ACMPCAClient, IssueCertificateCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
23
|
-
* const client = new ACMPCAClient(config);
|
|
24
|
-
* const command = new IssueCertificateCommand(input);
|
|
25
|
-
* const response = await client.send(command);
|
|
26
|
-
* ```
|
|
27
|
-
*
|
|
28
|
-
* @see {@link IssueCertificateCommandInput} for command's `input` shape.
|
|
29
|
-
* @see {@link IssueCertificateCommandOutput} for command's `response` shape.
|
|
30
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
31
|
-
*
|
|
32
|
-
*/
|
|
9
|
+
|
|
33
10
|
export declare class IssueCertificateCommand extends $Command<IssueCertificateCommandInput, IssueCertificateCommandOutput, ACMPCAClientResolvedConfig> {
|
|
34
11
|
readonly input: IssueCertificateCommandInput;
|
|
35
12
|
constructor(input: IssueCertificateCommandInput);
|
|
36
|
-
|
|
37
|
-
* @internal
|
|
38
|
-
*/
|
|
13
|
+
|
|
39
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<IssueCertificateCommandInput, IssueCertificateCommandOutput>;
|
|
40
15
|
private serialize;
|
|
41
16
|
private deserialize;
|
|
@@ -6,29 +6,11 @@ export interface ListCertificateAuthoritiesCommandInput extends ListCertificateA
|
|
|
6
6
|
}
|
|
7
7
|
export interface ListCertificateAuthoritiesCommandOutput extends ListCertificateAuthoritiesResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Lists the private certificate authorities that you created by using the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html">CreateCertificateAuthority</a> action.</p>
|
|
11
|
-
* @example
|
|
12
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
13
|
-
* ```javascript
|
|
14
|
-
* import { ACMPCAClient, ListCertificateAuthoritiesCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
15
|
-
* // const { ACMPCAClient, ListCertificateAuthoritiesCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
16
|
-
* const client = new ACMPCAClient(config);
|
|
17
|
-
* const command = new ListCertificateAuthoritiesCommand(input);
|
|
18
|
-
* const response = await client.send(command);
|
|
19
|
-
* ```
|
|
20
|
-
*
|
|
21
|
-
* @see {@link ListCertificateAuthoritiesCommandInput} for command's `input` shape.
|
|
22
|
-
* @see {@link ListCertificateAuthoritiesCommandOutput} for command's `response` shape.
|
|
23
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
24
|
-
*
|
|
25
|
-
*/
|
|
9
|
+
|
|
26
10
|
export declare class ListCertificateAuthoritiesCommand extends $Command<ListCertificateAuthoritiesCommandInput, ListCertificateAuthoritiesCommandOutput, ACMPCAClientResolvedConfig> {
|
|
27
11
|
readonly input: ListCertificateAuthoritiesCommandInput;
|
|
28
12
|
constructor(input: ListCertificateAuthoritiesCommandInput);
|
|
29
|
-
|
|
30
|
-
* @internal
|
|
31
|
-
*/
|
|
13
|
+
|
|
32
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<ListCertificateAuthoritiesCommandInput, ListCertificateAuthoritiesCommandOutput>;
|
|
33
15
|
private serialize;
|
|
34
16
|
private deserialize;
|
|
@@ -6,56 +6,11 @@ export interface ListPermissionsCommandInput extends ListPermissionsRequest {
|
|
|
6
6
|
}
|
|
7
7
|
export interface ListPermissionsCommandOutput extends ListPermissionsResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>List all permissions on a private CA, if any, granted to the AWS Certificate Manager (ACM) service
|
|
11
|
-
* principal (acm.amazonaws.com). </p>
|
|
12
|
-
* <p>These permissions allow ACM to issue and renew ACM certificates that reside in the
|
|
13
|
-
* same AWS account as the CA. </p>
|
|
14
|
-
* <p>Permissions can be granted with the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreatePermission.html">CreatePermission</a> action and
|
|
15
|
-
* revoked with the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePermission.html">DeletePermission</a> action.</p>
|
|
16
|
-
* <p class="title">
|
|
17
|
-
* <b>About Permissions</b>
|
|
18
|
-
* </p>
|
|
19
|
-
* <ul>
|
|
20
|
-
* <li>
|
|
21
|
-
* <p>If the private CA and the certificates it issues reside in the same
|
|
22
|
-
* account, you can use <code>CreatePermission</code> to grant permissions for ACM to
|
|
23
|
-
* carry out automatic certificate renewals.</p>
|
|
24
|
-
* </li>
|
|
25
|
-
* <li>
|
|
26
|
-
* <p>For automatic certificate renewal to succeed, the ACM service principal
|
|
27
|
-
* needs permissions to create, retrieve, and list certificates.</p>
|
|
28
|
-
* </li>
|
|
29
|
-
* <li>
|
|
30
|
-
* <p>If the private CA and the ACM certificates reside in different accounts,
|
|
31
|
-
* then permissions cannot be used to enable automatic renewals. Instead,
|
|
32
|
-
* the ACM certificate owner must set up a resource-based policy to enable
|
|
33
|
-
* cross-account issuance and renewals. For more information, see
|
|
34
|
-
* <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/pca-rbp.html">Using a Resource
|
|
35
|
-
* Based Policy with ACM Private CA</a>.</p>
|
|
36
|
-
* </li>
|
|
37
|
-
* </ul>
|
|
38
|
-
* @example
|
|
39
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
40
|
-
* ```javascript
|
|
41
|
-
* import { ACMPCAClient, ListPermissionsCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
42
|
-
* // const { ACMPCAClient, ListPermissionsCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
43
|
-
* const client = new ACMPCAClient(config);
|
|
44
|
-
* const command = new ListPermissionsCommand(input);
|
|
45
|
-
* const response = await client.send(command);
|
|
46
|
-
* ```
|
|
47
|
-
*
|
|
48
|
-
* @see {@link ListPermissionsCommandInput} for command's `input` shape.
|
|
49
|
-
* @see {@link ListPermissionsCommandOutput} for command's `response` shape.
|
|
50
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
51
|
-
*
|
|
52
|
-
*/
|
|
9
|
+
|
|
53
10
|
export declare class ListPermissionsCommand extends $Command<ListPermissionsCommandInput, ListPermissionsCommandOutput, ACMPCAClientResolvedConfig> {
|
|
54
11
|
readonly input: ListPermissionsCommandInput;
|
|
55
12
|
constructor(input: ListPermissionsCommandInput);
|
|
56
|
-
|
|
57
|
-
* @internal
|
|
58
|
-
*/
|
|
13
|
+
|
|
59
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<ListPermissionsCommandInput, ListPermissionsCommandOutput>;
|
|
60
15
|
private serialize;
|
|
61
16
|
private deserialize;
|
|
@@ -6,32 +6,11 @@ export interface ListTagsCommandInput extends ListTagsRequest {
|
|
|
6
6
|
}
|
|
7
7
|
export interface ListTagsCommandOutput extends ListTagsResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Lists the tags, if any, that are associated with your private CA or one that has been
|
|
11
|
-
* shared with you. Tags are labels that you can use to identify and organize your CAs.
|
|
12
|
-
* Each tag consists of a key and an optional value. Call the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_TagCertificateAuthority.html">TagCertificateAuthority</a>
|
|
13
|
-
* action to add one or more tags to your CA. Call the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_UntagCertificateAuthority.html">UntagCertificateAuthority</a> action to remove tags. </p>
|
|
14
|
-
* @example
|
|
15
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
16
|
-
* ```javascript
|
|
17
|
-
* import { ACMPCAClient, ListTagsCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
18
|
-
* // const { ACMPCAClient, ListTagsCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
19
|
-
* const client = new ACMPCAClient(config);
|
|
20
|
-
* const command = new ListTagsCommand(input);
|
|
21
|
-
* const response = await client.send(command);
|
|
22
|
-
* ```
|
|
23
|
-
*
|
|
24
|
-
* @see {@link ListTagsCommandInput} for command's `input` shape.
|
|
25
|
-
* @see {@link ListTagsCommandOutput} for command's `response` shape.
|
|
26
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
27
|
-
*
|
|
28
|
-
*/
|
|
9
|
+
|
|
29
10
|
export declare class ListTagsCommand extends $Command<ListTagsCommandInput, ListTagsCommandOutput, ACMPCAClientResolvedConfig> {
|
|
30
11
|
readonly input: ListTagsCommandInput;
|
|
31
12
|
constructor(input: ListTagsCommandInput);
|
|
32
|
-
|
|
33
|
-
* @internal
|
|
34
|
-
*/
|
|
13
|
+
|
|
35
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<ListTagsCommandInput, ListTagsCommandOutput>;
|
|
36
15
|
private serialize;
|
|
37
16
|
private deserialize;
|
|
@@ -6,60 +6,11 @@ export interface PutPolicyCommandInput extends PutPolicyRequest {
|
|
|
6
6
|
}
|
|
7
7
|
export interface PutPolicyCommandOutput extends __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Attaches a resource-based policy to a private CA. </p>
|
|
11
|
-
* <p>A policy can also be applied by sharing a private CA through AWS Resource Access
|
|
12
|
-
* Manager (RAM). For more information, see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/pca-ram.html">Attach a Policy for Cross-Account
|
|
13
|
-
* Access</a>.</p>
|
|
14
|
-
* <p>The policy can be displayed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetPolicy.html">GetPolicy</a> and removed with <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePolicy.html">DeletePolicy</a>.</p>
|
|
15
|
-
* <p class="title">
|
|
16
|
-
* <b>About Policies</b>
|
|
17
|
-
* </p>
|
|
18
|
-
* <ul>
|
|
19
|
-
* <li>
|
|
20
|
-
* <p>A policy grants access on a private CA to an AWS customer account, to AWS Organizations, or to
|
|
21
|
-
* an AWS Organizations unit. Policies are under the control of a CA administrator. For more information,
|
|
22
|
-
* see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/pca-rbp.html">Using a Resource Based Policy with ACM Private CA</a>.</p>
|
|
23
|
-
* </li>
|
|
24
|
-
* <li>
|
|
25
|
-
* <p>A policy permits a user of AWS Certificate Manager (ACM) to issue ACM certificates
|
|
26
|
-
* signed by a CA in another account.</p>
|
|
27
|
-
* </li>
|
|
28
|
-
* <li>
|
|
29
|
-
* <p>For ACM to manage automatic renewal of these certificates,
|
|
30
|
-
* the ACM user must configure a Service Linked Role (SLR). The SLR allows
|
|
31
|
-
* the ACM service to assume the identity of the user, subject to confirmation against the
|
|
32
|
-
* ACM Private CA policy. For more information, see
|
|
33
|
-
* <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-slr.html">Using a
|
|
34
|
-
* Service Linked Role with ACM</a>.</p>
|
|
35
|
-
* </li>
|
|
36
|
-
* <li>
|
|
37
|
-
* <p>Updates made in AWS Resource Manager (RAM) are reflected in policies. For more information,
|
|
38
|
-
* see <a href="https://docs.aws.amazon.com/acm-pca/latest/userguide/pca-ram.html">Attach a Policy for Cross-Account
|
|
39
|
-
* Access</a>.</p>
|
|
40
|
-
* </li>
|
|
41
|
-
* </ul>
|
|
42
|
-
* @example
|
|
43
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
44
|
-
* ```javascript
|
|
45
|
-
* import { ACMPCAClient, PutPolicyCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
46
|
-
* // const { ACMPCAClient, PutPolicyCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
47
|
-
* const client = new ACMPCAClient(config);
|
|
48
|
-
* const command = new PutPolicyCommand(input);
|
|
49
|
-
* const response = await client.send(command);
|
|
50
|
-
* ```
|
|
51
|
-
*
|
|
52
|
-
* @see {@link PutPolicyCommandInput} for command's `input` shape.
|
|
53
|
-
* @see {@link PutPolicyCommandOutput} for command's `response` shape.
|
|
54
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
55
|
-
*
|
|
56
|
-
*/
|
|
9
|
+
|
|
57
10
|
export declare class PutPolicyCommand extends $Command<PutPolicyCommandInput, PutPolicyCommandOutput, ACMPCAClientResolvedConfig> {
|
|
58
11
|
readonly input: PutPolicyCommandInput;
|
|
59
12
|
constructor(input: PutPolicyCommandInput);
|
|
60
|
-
|
|
61
|
-
* @internal
|
|
62
|
-
*/
|
|
13
|
+
|
|
63
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<PutPolicyCommandInput, PutPolicyCommandOutput>;
|
|
64
15
|
private serialize;
|
|
65
16
|
private deserialize;
|
|
@@ -6,39 +6,11 @@ export interface RestoreCertificateAuthorityCommandInput extends RestoreCertific
|
|
|
6
6
|
}
|
|
7
7
|
export interface RestoreCertificateAuthorityCommandOutput extends __MetadataBearer {
|
|
8
8
|
}
|
|
9
|
-
|
|
10
|
-
* <p>Restores a certificate authority (CA) that is in the <code>DELETED</code> state. You
|
|
11
|
-
* can restore a CA during the period that you defined in the <b>PermanentDeletionTimeInDays</b> parameter of the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeleteCertificateAuthority.html">DeleteCertificateAuthority</a> action. Currently, you can specify 7 to 30 days.
|
|
12
|
-
* If you did not specify a <b>PermanentDeletionTimeInDays</b>
|
|
13
|
-
* value, by default you can restore the CA at any time in a 30 day period. You can check
|
|
14
|
-
* the time remaining in the restoration period of a private CA in the <code>DELETED</code>
|
|
15
|
-
* state by calling the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DescribeCertificateAuthority.html">DescribeCertificateAuthority</a> or <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListCertificateAuthorities.html">ListCertificateAuthorities</a> actions. The status of a restored CA is set to
|
|
16
|
-
* its pre-deletion status when the <b>RestoreCertificateAuthority</b> action returns. To change its status to
|
|
17
|
-
* <code>ACTIVE</code>, call the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_UpdateCertificateAuthority.html">UpdateCertificateAuthority</a> action. If the private CA was in the
|
|
18
|
-
* <code>PENDING_CERTIFICATE</code> state at deletion, you must use the <a href="https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ImportCertificateAuthorityCertificate.html">ImportCertificateAuthorityCertificate</a> action to import a certificate
|
|
19
|
-
* authority into the private CA before it can be activated. You cannot restore a CA after
|
|
20
|
-
* the restoration period has ended.</p>
|
|
21
|
-
* @example
|
|
22
|
-
* Use a bare-bones client and the command you need to make an API call.
|
|
23
|
-
* ```javascript
|
|
24
|
-
* import { ACMPCAClient, RestoreCertificateAuthorityCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
|
|
25
|
-
* // const { ACMPCAClient, RestoreCertificateAuthorityCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
|
|
26
|
-
* const client = new ACMPCAClient(config);
|
|
27
|
-
* const command = new RestoreCertificateAuthorityCommand(input);
|
|
28
|
-
* const response = await client.send(command);
|
|
29
|
-
* ```
|
|
30
|
-
*
|
|
31
|
-
* @see {@link RestoreCertificateAuthorityCommandInput} for command's `input` shape.
|
|
32
|
-
* @see {@link RestoreCertificateAuthorityCommandOutput} for command's `response` shape.
|
|
33
|
-
* @see {@link ACMPCAClientResolvedConfig | config} for command's `input` shape.
|
|
34
|
-
*
|
|
35
|
-
*/
|
|
9
|
+
|
|
36
10
|
export declare class RestoreCertificateAuthorityCommand extends $Command<RestoreCertificateAuthorityCommandInput, RestoreCertificateAuthorityCommandOutput, ACMPCAClientResolvedConfig> {
|
|
37
11
|
readonly input: RestoreCertificateAuthorityCommandInput;
|
|
38
12
|
constructor(input: RestoreCertificateAuthorityCommandInput);
|
|
39
|
-
|
|
40
|
-
* @internal
|
|
41
|
-
*/
|
|
13
|
+
|
|
42
14
|
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ACMPCAClientResolvedConfig, options?: __HttpHandlerOptions): Handler<RestoreCertificateAuthorityCommandInput, RestoreCertificateAuthorityCommandOutput>;
|
|
43
15
|
private serialize;
|
|
44
16
|
private deserialize;
|