@aws-sdk/client-acm-pca 3.933.0 → 3.935.0

package/dist-types/models/models_0.d.ts

@@ -1,5 +1,4 @@
-import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
-import { ACMPCAServiceException as __BaseException } from "./ACMPCAServiceException";
+import { AccessMethodType, ActionType, AuditReportResponseFormat, AuditReportStatus, CertificateAuthorityStatus, CertificateAuthorityType, CertificateAuthorityUsageMode, CrlType, ExtendedKeyUsageType, FailureReason, KeyAlgorithm, KeyStorageSecurityStandard, PolicyQualifierId, ResourceOwner, RevocationReason, S3ObjectAcl, SigningAlgorithm, ValidityPeriodType } from "./enums";
 /**
  * <p>Defines the X.500 relative distinguished name (RDN).</p>
  * @public
@@ -175,19 +174,6 @@ export interface GeneralName {
      */
     RegisteredId?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const AccessMethodType: {
-    readonly CA_REPOSITORY: "CA_REPOSITORY";
-    readonly RESOURCE_PKI_MANIFEST: "RESOURCE_PKI_MANIFEST";
-    readonly RESOURCE_PKI_NOTIFY: "RESOURCE_PKI_NOTIFY";
-};
-/**
- * @public
- */
-export type AccessMethodType = (typeof AccessMethodType)[keyof typeof AccessMethodType];
 /**
  * <p>Describes the type and format of extension access. Only one of <code>CustomObjectIdentifier</code> or <code>AccessMethodType</code> may be provided. Providing both results in <code>InvalidArgsException</code>.</p>
  * @public
@@ -287,46 +273,6 @@ export interface CsrExtensions {
      */
     SubjectInformationAccess?: AccessDescription[] | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const KeyAlgorithm: {
-    readonly EC_prime256v1: "EC_prime256v1";
-    readonly EC_secp384r1: "EC_secp384r1";
-    readonly EC_secp521r1: "EC_secp521r1";
-    readonly ML_DSA_44: "ML_DSA_44";
-    readonly ML_DSA_65: "ML_DSA_65";
-    readonly ML_DSA_87: "ML_DSA_87";
-    readonly RSA_2048: "RSA_2048";
-    readonly RSA_3072: "RSA_3072";
-    readonly RSA_4096: "RSA_4096";
-    readonly SM2: "SM2";
-};
-/**
- * @public
- */
-export type KeyAlgorithm = (typeof KeyAlgorithm)[keyof typeof KeyAlgorithm];
-/**
- * @public
- * @enum
- */
-export declare const SigningAlgorithm: {
-    readonly ML_DSA_44: "ML_DSA_44";
-    readonly ML_DSA_65: "ML_DSA_65";
-    readonly ML_DSA_87: "ML_DSA_87";
-    readonly SHA256WITHECDSA: "SHA256WITHECDSA";
-    readonly SHA256WITHRSA: "SHA256WITHRSA";
-    readonly SHA384WITHECDSA: "SHA384WITHECDSA";
-    readonly SHA384WITHRSA: "SHA384WITHRSA";
-    readonly SHA512WITHECDSA: "SHA512WITHECDSA";
-    readonly SHA512WITHRSA: "SHA512WITHRSA";
-    readonly SM3WITHSM2: "SM3WITHSM2";
-};
-/**
- * @public
- */
-export type SigningAlgorithm = (typeof SigningAlgorithm)[keyof typeof SigningAlgorithm];
 /**
  * <p>Contains configuration information for your private certificate authority (CA). This includes information about the class of public key algorithm and the key pair that your private CA creates when it issues a certificate. It also includes the signature algorithm that it uses when issuing certificates, and its X.500 distinguished name. You must specify this information when you call the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html">CreateCertificateAuthority</a> action. </p>
  * @public
@@ -353,31 +299,6 @@ export interface CertificateAuthorityConfiguration {
      */
     CsrExtensions?: CsrExtensions | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const CertificateAuthorityType: {
-    readonly ROOT: "ROOT";
-    readonly SUBORDINATE: "SUBORDINATE";
-};
-/**
- * @public
- */
-export type CertificateAuthorityType = (typeof CertificateAuthorityType)[keyof typeof CertificateAuthorityType];
-/**
- * @public
- * @enum
- */
-export declare const KeyStorageSecurityStandard: {
-    readonly CCPC_LEVEL_1_OR_HIGHER: "CCPC_LEVEL_1_OR_HIGHER";
-    readonly FIPS_140_2_LEVEL_2_OR_HIGHER: "FIPS_140_2_LEVEL_2_OR_HIGHER";
-    readonly FIPS_140_2_LEVEL_3_OR_HIGHER: "FIPS_140_2_LEVEL_3_OR_HIGHER";
-};
-/**
- * @public
- */
-export type KeyStorageSecurityStandard = (typeof KeyStorageSecurityStandard)[keyof typeof KeyStorageSecurityStandard];
 /**
  * <p>Contains configuration information for the default behavior of the CRL Distribution Point (CDP) extension in certificates issued by your CA. This extension contains a link to download the CRL, so you can check whether a certificate has been revoked. To choose whether you want this extension omitted or not in certificates issued by your CA, you can set the <b>OmitExtension</b> parameter.</p>
  * @public
@@ -389,30 +310,6 @@ export interface CrlDistributionPointExtensionConfiguration {
      */
     OmitExtension: boolean | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const CrlType: {
-    readonly COMPLETE: "COMPLETE";
-    readonly PARTITIONED: "PARTITIONED";
-};
-/**
- * @public
- */
-export type CrlType = (typeof CrlType)[keyof typeof CrlType];
-/**
- * @public
- * @enum
- */
-export declare const S3ObjectAcl: {
-    readonly BUCKET_OWNER_FULL_CONTROL: "BUCKET_OWNER_FULL_CONTROL";
-    readonly PUBLIC_READ: "PUBLIC_READ";
-};
-/**
- * @public
- */
-export type S3ObjectAcl = (typeof S3ObjectAcl)[keyof typeof S3ObjectAcl];
 /**
  * <p>Contains configuration information for a certificate revocation list (CRL). Your private certificate authority (CA) creates base CRLs. Delta CRLs are not supported. You can enable CRLs for your new or an existing private CA by setting the <b>Enabled</b> parameter to <code>true</code>. Your private CA writes CRLs to an S3 bucket that you specify in the <b>S3BucketName</b> parameter. You can hide the name of your bucket by specifying a value for the <b>CustomCname</b> parameter. Your private CA by default copies the CNAME or the S3 bucket name to the <b>CRL Distribution Points</b> extension of each certificate it issues. If you want to configure this default behavior to be something different, you can set the <b>CrlDistributionPointExtensionConfiguration</b> parameter. Your S3 bucket policy must give write permission to Amazon Web Services Private CA. </p> <p>Amazon Web Services Private CA assets that are stored in Amazon S3 can be protected with encryption. For more information, see <a href="https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html#crl-encryption">Encrypting Your CRLs</a>.</p> <p>Your private CA uses the value in the <b>ExpirationInDays</b> parameter to calculate the <b>nextUpdate</b> field in the CRL. The CRL is refreshed prior to a certificate's expiration date or when a certificate is revoked. When a certificate is revoked, it appears in the CRL until the certificate expires, and then in one additional CRL after expiration, and it always appears in the audit report.</p> <p>A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, Amazon Web Services Private CA makes further attempts every 15 minutes.</p> <p>CRLs contain the following fields:</p> <ul> <li> <p> <b>Version</b>: The current version number defined in RFC 5280 is V2. The integer value is 0x1. </p> </li> <li> <p> <b>Signature Algorithm</b>: The name of the algorithm used to sign the CRL.</p> </li> <li> <p> <b>Issuer</b>: The X.500 distinguished name of your private CA that issued the CRL.</p> </li> <li> <p> <b>Last Update</b>: The issue date and time of this CRL.</p> </li> <li> <p> <b>Next Update</b>: The day and time by which the next CRL will be issued.</p> </li> <li> <p> <b>Revoked Certificates</b>: List of revoked certificates. Each list item contains the following information.</p> <ul> <li> <p> <b>Serial Number</b>: The serial number, in hexadecimal format, of the revoked certificate.</p> </li> <li> <p> <b>Revocation Date</b>: Date and time the certificate was revoked.</p> </li> <li> <p> <b>CRL Entry Extensions</b>: Optional extensions for the CRL entry.</p> <ul> <li> <p> <b>X509v3 CRL Reason Code</b>: Reason the certificate was revoked.</p> </li> </ul> </li> </ul> </li> <li> <p> <b>CRL Extensions</b>: Optional extensions for the CRL.</p> <ul> <li> <p> <b>X509v3 Authority Key Identifier</b>: Identifies the public key associated with the private key used to sign the certificate.</p> </li> <li> <p> <b>X509v3 CRL Number:</b>: Decimal sequence number for the CRL.</p> </li> </ul> </li> <li> <p> <b>Signature Algorithm</b>: Algorithm used by your private CA to sign the CRL.</p> </li> <li> <p> <b>Signature Value</b>: Signature computed over the CRL.</p> </li> </ul> <p>Certificate revocation lists created by Amazon Web Services Private CA are DER-encoded. You can use the following OpenSSL command to list a CRL.</p> <p> <code>openssl crl -inform DER -text -in <i>crl_path</i> -noout</code> </p> <p>For more information, see <a href="https://docs.aws.amazon.com/privateca/latest/userguide/crl-planning.html">Planning a certificate revocation list (CRL)</a> in the <i>Amazon Web Services Private Certificate Authority User Guide</i> </p>
  * @public
@@ -507,18 +404,6 @@ export interface Tag {
      */
     Value?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const CertificateAuthorityUsageMode: {
-    readonly GENERAL_PURPOSE: "GENERAL_PURPOSE";
-    readonly SHORT_LIVED_CERTIFICATE: "SHORT_LIVED_CERTIFICATE";
-};
-/**
- * @public
- */
-export type CertificateAuthorityUsageMode = (typeof CertificateAuthorityUsageMode)[keyof typeof CertificateAuthorityUsageMode];
 /**
  * @public
  */
@@ -569,66 +454,6 @@ export interface CreateCertificateAuthorityResponse {
      */
     CertificateAuthorityArn?: string | undefined;
 }
-/**
- * <p>One or more of the specified arguments was not valid.</p>
- * @public
- */
-export declare class InvalidArgsException extends __BaseException {
-    readonly name: "InvalidArgsException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidArgsException, __BaseException>);
-}
-/**
- * <p>The resource policy is invalid or is missing a required statement. For general information about IAM policy and statement structure, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#access_policies-json">Overview of JSON Policies</a>.</p>
- * @public
- */
-export declare class InvalidPolicyException extends __BaseException {
-    readonly name: "InvalidPolicyException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidPolicyException, __BaseException>);
-}
-/**
- * <p>The tag associated with the CA is not valid. The invalid argument is contained in the message field.</p>
- * @public
- */
-export declare class InvalidTagException extends __BaseException {
-    readonly name: "InvalidTagException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidTagException, __BaseException>);
-}
-/**
- * <p>An Amazon Web Services Private CA quota has been exceeded. See the exception message returned to determine the quota that was exceeded.</p>
- * @public
- */
-export declare class LimitExceededException extends __BaseException {
-    readonly name: "LimitExceededException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
-}
-/**
- * @public
- * @enum
- */
-export declare const AuditReportResponseFormat: {
-    readonly CSV: "CSV";
-    readonly JSON: "JSON";
-};
-/**
- * @public
- */
-export type AuditReportResponseFormat = (typeof AuditReportResponseFormat)[keyof typeof AuditReportResponseFormat];
 /**
  * @public
  */
@@ -664,79 +489,6 @@ export interface CreateCertificateAuthorityAuditReportResponse {
      */
     S3Key?: string | undefined;
 }
-/**
- * <p>The requested Amazon Resource Name (ARN) does not refer to an existing resource.</p>
- * @public
- */
-export declare class InvalidArnException extends __BaseException {
-    readonly name: "InvalidArnException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidArnException, __BaseException>);
-}
-/**
- * <p>The state of the private CA does not allow this action to occur.</p>
- * @public
- */
-export declare class InvalidStateException extends __BaseException {
-    readonly name: "InvalidStateException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidStateException, __BaseException>);
-}
-/**
- * <p>The request has failed for an unspecified reason.</p>
- * @public
- */
-export declare class RequestFailedException extends __BaseException {
-    readonly name: "RequestFailedException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<RequestFailedException, __BaseException>);
-}
-/**
- * <p>Your request is already in progress.</p>
- * @public
- */
-export declare class RequestInProgressException extends __BaseException {
-    readonly name: "RequestInProgressException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<RequestInProgressException, __BaseException>);
-}
-/**
- * <p>A resource such as a private CA, S3 bucket, certificate, audit report, or policy cannot be found.</p>
- * @public
- */
-export declare class ResourceNotFoundException extends __BaseException {
-    readonly name: "ResourceNotFoundException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
-}
-/**
- * @public
- * @enum
- */
-export declare const ActionType: {
-    readonly GetCertificate: "GetCertificate";
-    readonly IssueCertificate: "IssueCertificate";
-    readonly ListPermissions: "ListPermissions";
-};
-/**
- * @public
- */
-export type ActionType = (typeof ActionType)[keyof typeof ActionType];
 /**
  * @public
  */
@@ -762,30 +514,6 @@ export interface CreatePermissionRequest {
      */
     Actions: ActionType[] | undefined;
 }
-/**
- * <p>The designated permission has already been given to the user.</p>
- * @public
- */
-export declare class PermissionAlreadyExistsException extends __BaseException {
-    readonly name: "PermissionAlreadyExistsException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<PermissionAlreadyExistsException, __BaseException>);
-}
-/**
- * <p>A previous update to your private CA is still ongoing.</p>
- * @public
- */
-export declare class ConcurrentModificationException extends __BaseException {
-    readonly name: "ConcurrentModificationException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ConcurrentModificationException, __BaseException>);
-}
 /**
  * @public
  */
@@ -831,18 +559,6 @@ export interface DeletePolicyRequest {
      */
     ResourceArn: string | undefined;
 }
-/**
- * <p>The current action was prevented because it would lock the caller out from performing subsequent actions. Verify that the specified parameters would not result in the caller being denied access to the resource. </p>
- * @public
- */
-export declare class LockoutPreventedException extends __BaseException {
-    readonly name: "LockoutPreventedException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<LockoutPreventedException, __BaseException>);
-}
 /**
  * @public
  */
@@ -853,36 +569,6 @@ export interface DescribeCertificateAuthorityRequest {
      */
     CertificateAuthorityArn: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const FailureReason: {
-    readonly OTHER: "OTHER";
-    readonly REQUEST_TIMED_OUT: "REQUEST_TIMED_OUT";
-    readonly UNSUPPORTED_ALGORITHM: "UNSUPPORTED_ALGORITHM";
-};
-/**
- * @public
- */
-export type FailureReason = (typeof FailureReason)[keyof typeof FailureReason];
-/**
- * @public
- * @enum
- */
-export declare const CertificateAuthorityStatus: {
-    readonly ACTIVE: "ACTIVE";
-    readonly CREATING: "CREATING";
-    readonly DELETED: "DELETED";
-    readonly DISABLED: "DISABLED";
-    readonly EXPIRED: "EXPIRED";
-    readonly FAILED: "FAILED";
-    readonly PENDING_CERTIFICATE: "PENDING_CERTIFICATE";
-};
-/**
- * @public
- */
-export type CertificateAuthorityStatus = (typeof CertificateAuthorityStatus)[keyof typeof CertificateAuthorityStatus];
 /**
  * <p>Contains information about your private certificate authority (CA). Your private CA can issue and revoke X.509 digital certificates. Digital certificates verify that the entity named in the certificate <b>Subject</b> field owns or controls the public key contained in the <b>Subject Public Key Info</b> field. Call the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html">CreateCertificateAuthority</a> action to create your private CA. You must then call the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_GetCertificateAuthorityCertificate.html">GetCertificateAuthorityCertificate</a> action to retrieve a private CA certificate signing request (CSR). Sign the CSR with your Amazon Web Services Private CA-hosted or on-premises root or subordinate CA certificate. Call the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_ImportCertificateAuthorityCertificate.html">ImportCertificateAuthorityCertificate</a> action to import the signed certificate into Certificate Manager (ACM). </p>
  * @public
@@ -989,19 +675,6 @@ export interface DescribeCertificateAuthorityAuditReportRequest {
      */
     AuditReportId: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const AuditReportStatus: {
-    readonly CREATING: "CREATING";
-    readonly FAILED: "FAILED";
-    readonly SUCCESS: "SUCCESS";
-};
-/**
- * @public
- */
-export type AuditReportStatus = (typeof AuditReportStatus)[keyof typeof AuditReportStatus];
 /**
  * @public
  */
@@ -1122,18 +795,6 @@ export interface GetPolicyResponse {
      */
     Policy?: string | undefined;
 }
-/**
- * <p>The certificate authority certificate you are importing does not comply with conditions specified in the certificate that signed it.</p>
- * @public
- */
-export declare class CertificateMismatchException extends __BaseException {
-    readonly name: "CertificateMismatchException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<CertificateMismatchException, __BaseException>);
-}
 /**
  * @public
  */
@@ -1154,41 +815,6 @@ export interface ImportCertificateAuthorityCertificateRequest {
      */
     CertificateChain?: Uint8Array | undefined;
 }
-/**
- * <p>The request action cannot be performed or is prohibited.</p>
- * @public
- */
-export declare class InvalidRequestException extends __BaseException {
-    readonly name: "InvalidRequestException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
-}
-/**
- * <p>One or more fields in the certificate are invalid.</p>
- * @public
- */
-export declare class MalformedCertificateException extends __BaseException {
-    readonly name: "MalformedCertificateException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MalformedCertificateException, __BaseException>);
-}
-/**
- * @public
- * @enum
- */
-export declare const PolicyQualifierId: {
-    readonly CPS: "CPS";
-};
-/**
- * @public
- */
-export type PolicyQualifierId = (typeof PolicyQualifierId)[keyof typeof PolicyQualifierId];
 /**
  * <p>Defines a <code>PolicyInformation</code> qualifier. Amazon Web Services Private CA supports the <a href="https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.4">certification practice statement (CPS) qualifier</a> defined in RFC 5280. </p>
  * @public
@@ -1253,25 +879,6 @@ export interface CustomExtension {
      */
     Critical?: boolean | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const ExtendedKeyUsageType: {
-    readonly CERTIFICATE_TRANSPARENCY: "CERTIFICATE_TRANSPARENCY";
-    readonly CLIENT_AUTH: "CLIENT_AUTH";
-    readonly CODE_SIGNING: "CODE_SIGNING";
-    readonly DOCUMENT_SIGNING: "DOCUMENT_SIGNING";
-    readonly EMAIL_PROTECTION: "EMAIL_PROTECTION";
-    readonly OCSP_SIGNING: "OCSP_SIGNING";
-    readonly SERVER_AUTH: "SERVER_AUTH";
-    readonly SMART_CARD_LOGIN: "SMART_CARD_LOGIN";
-    readonly TIME_STAMPING: "TIME_STAMPING";
-};
-/**
- * @public
- */
-export type ExtendedKeyUsageType = (typeof ExtendedKeyUsageType)[keyof typeof ExtendedKeyUsageType];
 /**
  * <p>Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in the <code>KeyUsage</code> extension.</p>
  * @public
@@ -1335,21 +942,6 @@ export interface ApiPassthrough {
      */
     Subject?: ASN1Subject | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const ValidityPeriodType: {
-    readonly ABSOLUTE: "ABSOLUTE";
-    readonly DAYS: "DAYS";
-    readonly END_DATE: "END_DATE";
-    readonly MONTHS: "MONTHS";
-    readonly YEARS: "YEARS";
-};
-/**
- * @public
- */
-export type ValidityPeriodType = (typeof ValidityPeriodType)[keyof typeof ValidityPeriodType];
 /**
  * <p>Validity specifies the period of time during which a certificate is valid. Validity can be expressed as an explicit date and time when the validity of a certificate starts or expires, or as a span of time after issuance, stated in days, months, or years. For more information, see <a href="https://tools.ietf.org/html/rfc5280#section-4.1.2.5">Validity</a> in RFC 5280.</p> <p>Amazon Web Services Private CA API consumes the <code>Validity</code> data type differently in two distinct parameters of the <code>IssueCertificate</code> action. The required parameter <code>IssueCertificate</code>:<code>Validity</code> specifies the end of a certificate's validity period. The optional parameter <code>IssueCertificate</code>:<code>ValidityNotBefore</code> specifies a customized starting time for the validity period.</p>
  * @public
@@ -1421,42 +1013,6 @@ export interface IssueCertificateResponse {
      */
     CertificateArn?: string | undefined;
 }
-/**
- * <p>The certificate signing request is invalid.</p>
- * @public
- */
-export declare class MalformedCSRException extends __BaseException {
-    readonly name: "MalformedCSRException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MalformedCSRException, __BaseException>);
-}
-/**
- * <p>The token specified in the <code>NextToken</code> argument is not valid. Use the token returned from your previous call to <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListCertificateAuthorities.html">ListCertificateAuthorities</a>.</p>
- * @public
- */
-export declare class InvalidNextTokenException extends __BaseException {
-    readonly name: "InvalidNextTokenException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>);
-}
-/**
- * @public
- * @enum
- */
-export declare const ResourceOwner: {
-    readonly OTHER_ACCOUNTS: "OTHER_ACCOUNTS";
-    readonly SELF: "SELF";
-};
-/**
- * @public
- */
-export type ResourceOwner = (typeof ResourceOwner)[keyof typeof ResourceOwner];
 /**
  * @public
  */
@@ -1623,36 +1179,6 @@ export interface RestoreCertificateAuthorityRequest {
      */
     CertificateAuthorityArn: string | undefined;
 }
-/**
- * <p>Your request has already been completed.</p>
- * @public
- */
-export declare class RequestAlreadyProcessedException extends __BaseException {
-    readonly name: "RequestAlreadyProcessedException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<RequestAlreadyProcessedException, __BaseException>);
-}
-/**
- * @public
- * @enum
- */
-export declare const RevocationReason: {
-    readonly AFFILIATION_CHANGED: "AFFILIATION_CHANGED";
-    readonly A_A_COMPROMISE: "A_A_COMPROMISE";
-    readonly CERTIFICATE_AUTHORITY_COMPROMISE: "CERTIFICATE_AUTHORITY_COMPROMISE";
-    readonly CESSATION_OF_OPERATION: "CESSATION_OF_OPERATION";
-    readonly KEY_COMPROMISE: "KEY_COMPROMISE";
-    readonly PRIVILEGE_WITHDRAWN: "PRIVILEGE_WITHDRAWN";
-    readonly SUPERSEDED: "SUPERSEDED";
-    readonly UNSPECIFIED: "UNSPECIFIED";
-};
-/**
- * @public
- */
-export type RevocationReason = (typeof RevocationReason)[keyof typeof RevocationReason];
 /**
  * @public
  */
@@ -1688,18 +1214,6 @@ export interface TagCertificateAuthorityRequest {
      */
     Tags: Tag[] | undefined;
 }
-/**
- * <p>You can associate up to 50 tags with a private CA. Exception information is contained in the exception message field.</p>
- * @public
- */
-export declare class TooManyTagsException extends __BaseException {
-    readonly name: "TooManyTagsException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<TooManyTagsException, __BaseException>);
-}
 /**
  * @public
  */

package/dist-types/ts3.4/index.d.ts

@@ -6,5 +6,7 @@ export { ACMPCAExtensionConfiguration } from "./extensionConfiguration";
 export * from "./commands";
 export * from "./pagination";
 export * from "./waiters";
-export * from "./models";
+export * from "./models/enums";
+export * from "./models/errors";
+export * from "./models/models_0";
 export { ACMPCAServiceException } from "./models/ACMPCAServiceException";