@aws-sdk/client-acm 3.1075.0 → 3.1077.0

package/dist-types/models/models_0.d.ts

@@ -1,4 +1,4 @@
-import type { CertificateExport, CertificateManagedBy, CertificateStatus, CertificateTransparencyLoggingPreference, CertificateType, ComparisonOperator, DomainStatus, ExtendedKeyUsageName, FailureReason, KeyAlgorithm, KeyUsageName, RecordType, RenewalEligibility, RenewalStatus, RevocationReason, SearchCertificatesSortBy, SearchCertificatesSortOrder, SortBy, SortOrder, ValidationMethod } from "./enums";
+import type { AcmeAccountStatus, AcmeAuthorizationBehavior, AcmeContact, AcmeDomainValidationFailureReason, AcmeDomainValidationStatus, AcmeEndpointStatus, CertificateExport, CertificateKeyPairOrigin, CertificateManagedBy, CertificateStatus, CertificateTransparencyLoggingPreference, CertificateType, ComparisonOperator, DomainScopeOption, DomainStatus, ExtendedKeyUsageName, FailureReason, KeyAlgorithm, KeyUsageName, PrevalidationType, PublicKeyAlgorithm, RecordType, RenewalEligibility, RenewalStatus, RevocationReason, SearchCertificatesSortBy, SearchCertificatesSortOrder, SortBy, SortOrder, TimeType, ValidationMethod } from "./enums";
 /**
  * <p>Contains ACM-specific metadata about a certificate.</p>
  * @public
@@ -69,12 +69,27 @@ export interface AcmCertificateMetadata {
      * @public
      */
     ValidationMethod?: ValidationMethod | undefined;
+    /**
+     * <p>The origin of the certificate's key pair.</p>
+     * @public
+     */
+    CertificateKeyPairOrigin?: CertificateKeyPairOrigin | undefined;
+    /**
+     * <p>The ARN of the ACME endpoint used to issue the certificate.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+    /**
+     * <p>The ACME account identifier associated with the certificate.</p>
+     * @public
+     */
+    AcmeAccountId?: string | undefined;
 }
 /**
  * <p>Filters certificates by ACM metadata.</p>
  * @public
  */
-export type AcmCertificateMetadataFilter = AcmCertificateMetadataFilter.ExportOptionMember | AcmCertificateMetadataFilter.ExportedMember | AcmCertificateMetadataFilter.InUseMember | AcmCertificateMetadataFilter.ManagedByMember | AcmCertificateMetadataFilter.RenewalStatusMember | AcmCertificateMetadataFilter.StatusMember | AcmCertificateMetadataFilter.TypeMember | AcmCertificateMetadataFilter.ValidationMethodMember | AcmCertificateMetadataFilter.$UnknownMember;
+export type AcmCertificateMetadataFilter = AcmCertificateMetadataFilter.AcmeAccountIdMember | AcmCertificateMetadataFilter.AcmeEndpointArnMember | AcmCertificateMetadataFilter.CertificateKeyPairOriginMember | AcmCertificateMetadataFilter.ExportOptionMember | AcmCertificateMetadataFilter.ExportedMember | AcmCertificateMetadataFilter.InUseMember | AcmCertificateMetadataFilter.ManagedByMember | AcmCertificateMetadataFilter.RenewalStatusMember | AcmCertificateMetadataFilter.StatusMember | AcmCertificateMetadataFilter.TypeMember | AcmCertificateMetadataFilter.ValidationMethodMember | AcmCertificateMetadataFilter.$UnknownMember;
 /**
  * @public
  */
@@ -92,6 +107,9 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption?: never;
         ManagedBy?: never;
         ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
         $unknown?: never;
     }
     /**
@@ -107,6 +125,9 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption?: never;
         ManagedBy?: never;
         ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
         $unknown?: never;
     }
     /**
@@ -122,6 +143,9 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption?: never;
         ManagedBy?: never;
         ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
         $unknown?: never;
     }
     /**
@@ -137,6 +161,9 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption?: never;
         ManagedBy?: never;
         ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
         $unknown?: never;
     }
     /**
@@ -152,6 +179,9 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption?: never;
         ManagedBy?: never;
         ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
         $unknown?: never;
     }
     /**
@@ -167,6 +197,9 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption: CertificateExport;
         ManagedBy?: never;
         ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
         $unknown?: never;
     }
     /**
@@ -182,6 +215,9 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption?: never;
         ManagedBy: CertificateManagedBy;
         ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
         $unknown?: never;
     }
     /**
@@ -197,6 +233,63 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption?: never;
         ManagedBy?: never;
         ValidationMethod: ValidationMethod;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Filter by certificate key pair origin.</p>
+     * @public
+     */
+    interface CertificateKeyPairOriginMember {
+        Status?: never;
+        RenewalStatus?: never;
+        Type?: never;
+        InUse?: never;
+        Exported?: never;
+        ExportOption?: never;
+        ManagedBy?: never;
+        ValidationMethod?: never;
+        CertificateKeyPairOrigin: CertificateKeyPairOrigin;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Filter by ACME endpoint ARN.</p>
+     * @public
+     */
+    interface AcmeEndpointArnMember {
+        Status?: never;
+        RenewalStatus?: never;
+        Type?: never;
+        InUse?: never;
+        Exported?: never;
+        ExportOption?: never;
+        ManagedBy?: never;
+        ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn: string;
+        AcmeAccountId?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Filter by ACME account identifier.</p>
+     * @public
+     */
+    interface AcmeAccountIdMember {
+        Status?: never;
+        RenewalStatus?: never;
+        Type?: never;
+        InUse?: never;
+        Exported?: never;
+        ExportOption?: never;
+        ManagedBy?: never;
+        ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId: string;
         $unknown?: never;
     }
     /**
@@ -211,6 +304,9 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption?: never;
         ManagedBy?: never;
         ValidationMethod?: never;
+        CertificateKeyPairOrigin?: never;
+        AcmeEndpointArn?: never;
+        AcmeAccountId?: never;
         $unknown: [string, any];
     }
     /**
@@ -226,6 +322,339 @@ export declare namespace AcmCertificateMetadataFilter {
         ExportOption: (value: CertificateExport) => T;
         ManagedBy: (value: CertificateManagedBy) => T;
         ValidationMethod: (value: ValidationMethod) => T;
+        CertificateKeyPairOrigin: (value: CertificateKeyPairOrigin) => T;
+        AcmeEndpointArn: (value: string) => T;
+        AcmeAccountId: (value: string) => T;
+        _: (name: string, value: any) => T;
+    }
+}
+/**
+ * <p>Contains detailed information about an ACME account.</p>
+ * @public
+ */
+export interface AcmeAccount {
+    /**
+     * <p>The URL of the ACME account.</p>
+     * @public
+     */
+    AccountUrl?: string | undefined;
+    /**
+     * <p>The thumbprint of the public key associated with the ACME account.</p>
+     * @public
+     */
+    PublicKeyThumbprint?: string | undefined;
+    /**
+     * <p>The status of the ACME account.</p>
+     * @public
+     */
+    Status?: AcmeAccountStatus | undefined;
+    /**
+     * <p>The time at which the ACME account was created.</p>
+     * @public
+     */
+    CreatedAt?: Date | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the external account binding associated with this ACME account.</p>
+     * @public
+     */
+    AcmeExternalAccountBindingArn?: string | undefined;
+    /**
+     * <p>The contact information for the ACME account.</p>
+     * @public
+     */
+    Contacts?: string[] | undefined;
+}
+/**
+ * <p>Contains summary information about an ACME account.</p>
+ * @public
+ */
+export interface AcmeAccountSummary {
+    /**
+     * <p>The URL of the ACME account.</p>
+     * @public
+     */
+    AccountUrl?: string | undefined;
+    /**
+     * <p>The thumbprint of the public key associated with the ACME account.</p>
+     * @public
+     */
+    PublicKeyThumbprint?: string | undefined;
+    /**
+     * <p>The status of the ACME account.</p>
+     * @public
+     */
+    Status?: AcmeAccountStatus | undefined;
+    /**
+     * <p>The time at which the ACME account was created.</p>
+     * @public
+     */
+    CreatedAt?: Date | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the external account binding associated with this ACME account.</p>
+     * @public
+     */
+    AcmeExternalAccountBindingArn?: string | undefined;
+    /**
+     * <p>The contact information for the ACME account.</p>
+     * @public
+     */
+    Contacts?: string[] | undefined;
+}
+/**
+ * <p>Contains details about a failure.</p>
+ * @public
+ */
+export interface FailureDetails {
+    /**
+     * <p>The reason for the failure.</p>
+     * @public
+     */
+    Reason?: AcmeDomainValidationFailureReason | undefined;
+    /**
+     * <p>A message describing the failure.</p>
+     * @public
+     */
+    Message?: string | undefined;
+}
+/**
+ * <p>Specifies the scope of domain validation.</p>
+ * @public
+ */
+export interface DomainScope {
+    /**
+     * <p>Whether validation applies to the exact domain.</p>
+     * @public
+     */
+    ExactDomain?: DomainScopeOption | undefined;
+    /**
+     * <p>Whether validation applies to subdomains.</p>
+     * @public
+     */
+    Subdomains?: DomainScopeOption | undefined;
+    /**
+     * <p>Whether validation applies to wildcard domains.</p>
+     * @public
+     */
+    Wildcards?: DomainScopeOption | undefined;
+}
+/**
+ * <p>Contains a DNS record value that you can use to validate ownership or control of a domain. This is used by the <a>DescribeCertificate</a> action. </p>
+ * @public
+ */
+export interface ResourceRecord {
+    /**
+     * <p>The name of the DNS record to create in your domain. This is supplied by ACM.</p>
+     * @public
+     */
+    Name: string | undefined;
+    /**
+     * <p>The type of DNS record. Currently this can be <code>CNAME</code>.</p>
+     * @public
+     */
+    Type: RecordType | undefined;
+    /**
+     * <p>The value of the CNAME record to add to your DNS database. This is supplied by ACM.</p>
+     * @public
+     */
+    Value: string | undefined;
+}
+/**
+ * <p>DNS prevalidation details including the resource record for validation.</p>
+ * @public
+ */
+export interface DnsPrevalidationDetails {
+    /**
+     * <p>The scope of domains covered by this prevalidation.</p>
+     * @public
+     */
+    DomainScope?: DomainScope | undefined;
+    /**
+     * <p>The Route 53 hosted zone ID for DNS validation.</p>
+     * @public
+     */
+    HostedZoneId?: string | undefined;
+    /**
+     * <p>The DNS resource record to create for domain validation.</p>
+     * @public
+     */
+    ResourceRecord?: ResourceRecord | undefined;
+}
+/**
+ * <p>Contains details about the prevalidation configuration.</p>
+ * @public
+ */
+export type PrevalidationDetails = PrevalidationDetails.DnsPrevalidationMember | PrevalidationDetails.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace PrevalidationDetails {
+    /**
+     * <p>DNS-based prevalidation details.</p>
+     * @public
+     */
+    interface DnsPrevalidationMember {
+        DnsPrevalidation: DnsPrevalidationDetails;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        DnsPrevalidation?: never;
+        $unknown: [string, any];
+    }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
+    interface Visitor<T> {
+        DnsPrevalidation: (value: DnsPrevalidationDetails) => T;
+        _: (name: string, value: any) => T;
+    }
+}
+/**
+ * <p>Contains detailed information about an ACME domain validation.</p>
+ * @public
+ */
+export interface AcmeDomainValidation {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME domain validation.</p>
+     * @public
+     */
+    AcmeDomainValidationArn?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+    /**
+     * <p>The domain name being validated.</p>
+     * @public
+     */
+    DomainName?: string | undefined;
+    /**
+     * <p>The type of prevalidation used.</p>
+     * @public
+     */
+    PrevalidationType?: PrevalidationType | undefined;
+    /**
+     * <p>Details about the prevalidation configuration.</p>
+     * @public
+     */
+    PrevalidationDetails?: PrevalidationDetails | undefined;
+    /**
+     * <p>The status of the domain validation.</p>
+     * @public
+     */
+    Status?: AcmeDomainValidationStatus | undefined;
+    /**
+     * <p>Details about the failure, if the validation failed.</p>
+     * @public
+     */
+    FailureDetails?: FailureDetails | undefined;
+    /**
+     * <p>The time at which the domain validation was created.</p>
+     * @public
+     */
+    CreatedAt?: Date | undefined;
+    /**
+     * <p>The time at which the domain validation was last updated.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+}
+/**
+ * <p>Contains summary information about an ACME domain validation.</p>
+ * @public
+ */
+export interface AcmeDomainValidationSummary {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME domain validation.</p>
+     * @public
+     */
+    AcmeDomainValidationArn?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+    /**
+     * <p>The domain name being validated.</p>
+     * @public
+     */
+    DomainName?: string | undefined;
+    /**
+     * <p>The type of prevalidation used.</p>
+     * @public
+     */
+    PrevalidationType?: PrevalidationType | undefined;
+    /**
+     * <p>Details about the prevalidation configuration.</p>
+     * @public
+     */
+    PrevalidationDetails?: PrevalidationDetails | undefined;
+    /**
+     * <p>The status of the domain validation.</p>
+     * @public
+     */
+    Status?: AcmeDomainValidationStatus | undefined;
+    /**
+     * <p>Details about the failure, if the validation failed.</p>
+     * @public
+     */
+    FailureDetails?: FailureDetails | undefined;
+    /**
+     * <p>The time at which the domain validation was created.</p>
+     * @public
+     */
+    CreatedAt?: Date | undefined;
+    /**
+     * <p>The time at which the domain validation was last updated.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+}
+/**
+ * <p>Configuration for a public certificate authority.</p>
+ * @public
+ */
+export interface PublicCertificateAuthority {
+    /**
+     * <p>The key algorithms allowed for certificates issued by this certificate authority.</p>
+     * @public
+     */
+    AllowedKeyAlgorithms?: PublicKeyAlgorithm[] | undefined;
+}
+/**
+ * <p>Defines the certificate authority to use for an ACME endpoint.</p>
+ * @public
+ */
+export type CertificateAuthority = CertificateAuthority.PublicCertificateAuthorityMember | CertificateAuthority.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace CertificateAuthority {
+    /**
+     * <p>Configuration for using a public certificate authority.</p>
+     * @public
+     */
+    interface PublicCertificateAuthorityMember {
+        PublicCertificateAuthority: PublicCertificateAuthority;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        PublicCertificateAuthority?: never;
+        $unknown: [string, any];
+    }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
+    interface Visitor<T> {
+        PublicCertificateAuthority: (value: PublicCertificateAuthority) => T;
         _: (name: string, value: any) => T;
     }
 }
@@ -245,6 +674,210 @@ export interface Tag {
      */
     Value?: string | undefined;
 }
+/**
+ * <p>Contains detailed information about an ACME endpoint.</p>
+ * @public
+ */
+export interface AcmeEndpoint {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+    /**
+     * <p>The URL of the ACME endpoint.</p>
+     * @public
+     */
+    EndpointUrl?: string | undefined;
+    /**
+     * <p>The status of the ACME endpoint.</p>
+     * @public
+     */
+    Status?: AcmeEndpointStatus | undefined;
+    /**
+     * <p>The reason the ACME endpoint failed, if applicable.</p>
+     * @public
+     */
+    FailureReason?: string | undefined;
+    /**
+     * <p>The authorization behavior of the ACME endpoint.</p>
+     * @public
+     */
+    AuthorizationBehavior?: AcmeAuthorizationBehavior | undefined;
+    /**
+     * <p>Whether ACME clients must provide contact information during account registration.</p>
+     * @public
+     */
+    Contact?: AcmeContact | undefined;
+    /**
+     * <p>The certificate authority configuration for the ACME endpoint.</p>
+     * @public
+     */
+    CertificateAuthority?: CertificateAuthority | undefined;
+    /**
+     * <p>Tags applied to certificates issued through this ACME endpoint.</p>
+     * @public
+     */
+    CertificateTags?: Tag[] | undefined;
+    /**
+     * <p>The time at which the ACME endpoint was created.</p>
+     * @public
+     */
+    CreatedAt?: Date | undefined;
+    /**
+     * <p>The time at which the ACME endpoint was last updated.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+}
+/**
+ * <p>Contains summary information about an ACME endpoint.</p>
+ * @public
+ */
+export interface AcmeEndpointSummary {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+    /**
+     * <p>The URL of the ACME endpoint.</p>
+     * @public
+     */
+    EndpointUrl?: string | undefined;
+    /**
+     * <p>The status of the ACME endpoint.</p>
+     * @public
+     */
+    Status?: AcmeEndpointStatus | undefined;
+    /**
+     * <p>The reason the ACME endpoint failed, if applicable.</p>
+     * @public
+     */
+    FailureReason?: string | undefined;
+    /**
+     * <p>The authorization behavior of the ACME endpoint.</p>
+     * @public
+     */
+    AuthorizationBehavior?: AcmeAuthorizationBehavior | undefined;
+    /**
+     * <p>Whether ACME clients must provide contact information during account registration.</p>
+     * @public
+     */
+    Contact?: AcmeContact | undefined;
+    /**
+     * <p>The certificate authority configuration for the ACME endpoint.</p>
+     * @public
+     */
+    CertificateAuthority?: CertificateAuthority | undefined;
+    /**
+     * <p>Tags applied to certificates issued through this ACME endpoint.</p>
+     * @public
+     */
+    CertificateTags?: Tag[] | undefined;
+    /**
+     * <p>The time at which the ACME endpoint was created.</p>
+     * @public
+     */
+    CreatedAt?: Date | undefined;
+    /**
+     * <p>The time at which the ACME endpoint was last updated.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+}
+/**
+ * <p>Contains detailed information about an ACME external account binding.</p>
+ * @public
+ */
+export interface AcmeExternalAccountBinding {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME external account binding.</p>
+     * @public
+     */
+    AcmeExternalAccountBindingArn?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the IAM role associated with the external account binding.</p>
+     * @public
+     */
+    RoleArn?: string | undefined;
+    /**
+     * <p>The time at which the external account binding expires.</p>
+     * @public
+     */
+    ExpiresAt?: Date | undefined;
+    /**
+     * <p>The time at which the external account binding was revoked.</p>
+     * @public
+     */
+    RevokedAt?: Date | undefined;
+    /**
+     * <p>The time at which the external account binding was last used.</p>
+     * @public
+     */
+    LastUsedAt?: Date | undefined;
+    /**
+     * <p>The time at which the external account binding was created.</p>
+     * @public
+     */
+    CreatedAt?: Date | undefined;
+    /**
+     * <p>The time at which the external account binding was last updated.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+}
+/**
+ * <p>Contains summary information about an ACME external account binding.</p>
+ * @public
+ */
+export interface AcmeExternalAccountBindingSummary {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME external account binding.</p>
+     * @public
+     */
+    AcmeExternalAccountBindingArn?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the IAM role associated with the external account binding.</p>
+     * @public
+     */
+    RoleArn?: string | undefined;
+    /**
+     * <p>The time at which the external account binding expires.</p>
+     * @public
+     */
+    ExpiresAt?: Date | undefined;
+    /**
+     * <p>The time at which the external account binding was revoked.</p>
+     * @public
+     */
+    RevokedAt?: Date | undefined;
+    /**
+     * <p>The time at which the external account binding was last used.</p>
+     * @public
+     */
+    LastUsedAt?: Date | undefined;
+    /**
+     * <p>The time at which the external account binding was created.</p>
+     * @public
+     */
+    CreatedAt?: Date | undefined;
+    /**
+     * <p>The time at which the external account binding was last updated.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+}
 /**
  * @public
  */
@@ -285,33 +918,12 @@ export interface HttpRedirect {
      * <p>The URL including the domain to be validated. The certificate authority sends <code>GET</code> requests here during validation.</p>
      * @public
      */
-    RedirectFrom?: string | undefined;
-    /**
-     * <p>The URL hosting the validation token. <code>RedirectFrom</code> must return this content or redirect here.</p>
-     * @public
-     */
-    RedirectTo?: string | undefined;
-}
-/**
- * <p>Contains a DNS record value that you can use to validate ownership or control of a domain. This is used by the <a>DescribeCertificate</a> action. </p>
- * @public
- */
-export interface ResourceRecord {
-    /**
-     * <p>The name of the DNS record to create in your domain. This is supplied by ACM.</p>
-     * @public
-     */
-    Name: string | undefined;
-    /**
-     * <p>The type of DNS record. Currently this can be <code>CNAME</code>.</p>
-     * @public
-     */
-    Type: RecordType | undefined;
+    RedirectFrom?: string | undefined;
     /**
-     * <p>The value of the CNAME record to add to your DNS database. This is supplied by ACM.</p>
+     * <p>The URL hosting the validation token. <code>RedirectFrom</code> must return this content or redirect here.</p>
      * @public
      */
-    Value: string | undefined;
+    RedirectTo?: string | undefined;
 }
 /**
  * <p>Contains information about the validation of each domain name in the certificate.</p>
@@ -565,6 +1177,21 @@ export interface CertificateDetail {
      * @public
      */
     Options?: CertificateOptions | undefined;
+    /**
+     * <p>The origin of the certificate's key pair.</p>
+     * @public
+     */
+    CertificateKeyPairOrigin?: CertificateKeyPairOrigin | undefined;
+    /**
+     * <p>The ARN of the ACME endpoint used to issue the certificate.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+    /**
+     * <p>The ACME account identifier associated with the certificate.</p>
+     * @public
+     */
+    AcmeAccountId?: string | undefined;
 }
 /**
  * <p>Specifies a time range for filtering certificates.</p>
@@ -849,64 +1476,369 @@ export type CertificateFilter = CertificateFilter.AcmCertificateMetadataFilterMe
  */
 export declare namespace CertificateFilter {
     /**
-     * <p>Filter by certificate ARN.</p>
+     * <p>Filter by certificate ARN.</p>
+     * @public
+     */
+    interface CertificateArnMember {
+        CertificateArn: string;
+        X509AttributeFilter?: never;
+        AcmCertificateMetadataFilter?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Filter by X.509 certificate attributes.</p>
+     * @public
+     */
+    interface X509AttributeFilterMember {
+        CertificateArn?: never;
+        X509AttributeFilter: X509AttributeFilter;
+        AcmCertificateMetadataFilter?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Filter by ACM certificate metadata.</p>
+     * @public
+     */
+    interface AcmCertificateMetadataFilterMember {
+        CertificateArn?: never;
+        X509AttributeFilter?: never;
+        AcmCertificateMetadataFilter: AcmCertificateMetadataFilter;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        CertificateArn?: never;
+        X509AttributeFilter?: never;
+        AcmCertificateMetadataFilter?: never;
+        $unknown: [string, any];
+    }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
+    interface Visitor<T> {
+        CertificateArn: (value: string) => T;
+        X509AttributeFilter: (value: X509AttributeFilter) => T;
+        AcmCertificateMetadataFilter: (value: AcmCertificateMetadataFilter) => T;
+        _: (name: string, value: any) => T;
+    }
+}
+/**
+ * <p>DNS prevalidation options for domain validation.</p>
+ * @public
+ */
+export interface DnsPrevalidationOptions {
+    /**
+     * <p>The scope of domains covered by this prevalidation.</p>
+     * @public
+     */
+    DomainScope?: DomainScope | undefined;
+    /**
+     * <p>The Route 53 hosted zone ID for DNS validation.</p>
+     * @public
+     */
+    HostedZoneId?: string | undefined;
+}
+/**
+ * <p>Specifies prevalidation options for domain validation.</p>
+ * @public
+ */
+export type PrevalidationOptions = PrevalidationOptions.DnsPrevalidationMember | PrevalidationOptions.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace PrevalidationOptions {
+    /**
+     * <p>DNS-based prevalidation options.</p>
+     * @public
+     */
+    interface DnsPrevalidationMember {
+        DnsPrevalidation: DnsPrevalidationOptions;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        DnsPrevalidation?: never;
+        $unknown: [string, any];
+    }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
+    interface Visitor<T> {
+        DnsPrevalidation: (value: DnsPrevalidationOptions) => T;
+        _: (name: string, value: any) => T;
+    }
+}
+/**
+ * @public
+ */
+export interface CreateAcmeDomainValidationRequest {
+    /**
+     * <p>A unique, case-sensitive identifier to ensure idempotency of the request.</p>
+     * @public
+     */
+    IdempotencyToken?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+    /**
+     * <p>The domain name to validate.</p>
+     * @public
+     */
+    DomainName: string | undefined;
+    /**
+     * <p>The prevalidation options for the domain.</p>
+     * @public
+     */
+    PrevalidationOptions: PrevalidationOptions | undefined;
+    /**
+     * <p>One or more tags to associate with the domain validation.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateAcmeDomainValidationResponse {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the created domain validation.</p>
+     * @public
+     */
+    AcmeDomainValidationArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateAcmeEndpointRequest {
+    /**
+     * <p>A unique, case-sensitive identifier to ensure idempotency of the request.</p>
+     * @public
+     */
+    IdempotencyToken?: string | undefined;
+    /**
+     * <p>The authorization behavior for the ACME endpoint.</p>
+     * @public
+     */
+    AuthorizationBehavior: AcmeAuthorizationBehavior | undefined;
+    /**
+     * <p>Specifies whether ACME clients must provide contact information during account registration.</p>
+     * @public
+     */
+    Contact?: AcmeContact | undefined;
+    /**
+     * <p>The type of certificate authority to use for issuing certificates through this ACME endpoint.</p>
+     * @public
+     */
+    CertificateAuthority: CertificateAuthority | undefined;
+    /**
+     * <p>One or more tags to associate with the ACME endpoint.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * <p>Tags to apply to certificates issued through this ACME endpoint.</p>
+     * @public
+     */
+    CertificateTags?: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateAcmeEndpointResponse {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the created ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn?: string | undefined;
+}
+/**
+ * <p>Specifies an expiration configuration.</p>
+ * @public
+ */
+export interface Expiration {
+    /**
+     * <p>The numeric value of the expiration.</p>
+     * @public
+     */
+    Value: number | undefined;
+    /**
+     * <p>The time unit for the expiration value.</p>
+     * @public
+     */
+    Type: TimeType | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateAcmeExternalAccountBindingRequest {
+    /**
+     * <p>A unique, case-sensitive identifier to ensure idempotency of the request.</p>
+     * @public
+     */
+    IdempotencyToken?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the IAM role to associate with the external account binding.</p>
+     * @public
+     */
+    RoleArn: string | undefined;
+    /**
+     * <p>The expiration configuration for the external account binding.</p>
+     * @public
+     */
+    Expiration?: Expiration | undefined;
+    /**
+     * <p>One or more tags to associate with the external account binding.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateAcmeExternalAccountBindingResponse {
+    /**
+     * <p>The created external account binding.</p>
+     * @public
+     */
+    ExternalAccountBinding?: AcmeExternalAccountBinding | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteAcmeDomainValidationRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME domain validation to delete.</p>
+     * @public
+     */
+    AcmeDomainValidationArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteAcmeEndpointRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint to delete.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteAcmeExternalAccountBindingRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME external account binding to delete.</p>
+     * @public
+     */
+    AcmeExternalAccountBindingArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteCertificateRequest {
+    /**
+     * <p>String that contains the ARN of the ACM certificate to be deleted. This must be of the form:</p> <p> <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code> </p> <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
+     */
+    CertificateArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeAcmeAccountRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+    /**
+     * <p>The URL of the ACME account.</p>
+     * @public
+     */
+    AccountUrl: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeAcmeAccountResponse {
+    /**
+     * <p>The ACME account details.</p>
+     * @public
+     */
+    AcmeAccount?: AcmeAccount | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeAcmeDomainValidationRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME domain validation.</p>
+     * @public
+     */
+    AcmeDomainValidationArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeAcmeDomainValidationResponse {
+    /**
+     * <p>The ACME domain validation details.</p>
      * @public
      */
-    interface CertificateArnMember {
-        CertificateArn: string;
-        X509AttributeFilter?: never;
-        AcmCertificateMetadataFilter?: never;
-        $unknown?: never;
-    }
+    AcmeDomainValidation?: AcmeDomainValidation | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeAcmeEndpointRequest {
     /**
-     * <p>Filter by X.509 certificate attributes.</p>
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
      * @public
      */
-    interface X509AttributeFilterMember {
-        CertificateArn?: never;
-        X509AttributeFilter: X509AttributeFilter;
-        AcmCertificateMetadataFilter?: never;
-        $unknown?: never;
-    }
+    AcmeEndpointArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeAcmeEndpointResponse {
     /**
-     * <p>Filter by ACM certificate metadata.</p>
+     * <p>The ACME endpoint details.</p>
      * @public
      */
-    interface AcmCertificateMetadataFilterMember {
-        CertificateArn?: never;
-        X509AttributeFilter?: never;
-        AcmCertificateMetadataFilter: AcmCertificateMetadataFilter;
-        $unknown?: never;
-    }
+    AcmeEndpoint?: AcmeEndpoint | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeAcmeExternalAccountBindingRequest {
     /**
+     * <p>The Amazon Resource Name (ARN) of the ACME external account binding.</p>
      * @public
      */
-    interface $UnknownMember {
-        CertificateArn?: never;
-        X509AttributeFilter?: never;
-        AcmCertificateMetadataFilter?: never;
-        $unknown: [string, any];
-    }
-    /**
-     * @deprecated unused in schema-serde mode.
-     *
-     */
-    interface Visitor<T> {
-        CertificateArn: (value: string) => T;
-        X509AttributeFilter: (value: X509AttributeFilter) => T;
-        AcmCertificateMetadataFilter: (value: AcmCertificateMetadataFilter) => T;
-        _: (name: string, value: any) => T;
-    }
+    AcmeExternalAccountBindingArn: string | undefined;
 }
 /**
  * @public
  */
-export interface DeleteCertificateRequest {
+export interface DescribeAcmeExternalAccountBindingResponse {
     /**
-     * <p>String that contains the ARN of the ACM certificate to be deleted. This must be of the form:</p> <p> <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code> </p> <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * <p>The external account binding details.</p>
      * @public
      */
-    CertificateArn: string | undefined;
+    ExternalAccountBinding?: AcmeExternalAccountBinding | undefined;
 }
 /**
  * @public
@@ -984,6 +1916,31 @@ export interface GetAccountConfigurationResponse {
      */
     ExpiryEvents?: ExpiryEventsConfiguration | undefined;
 }
+/**
+ * @public
+ */
+export interface GetAcmeExternalAccountBindingCredentialsRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME external account binding.</p>
+     * @public
+     */
+    AcmeExternalAccountBindingArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetAcmeExternalAccountBindingCredentialsResponse {
+    /**
+     * <p>The key identifier for the external account binding credentials.</p>
+     * @public
+     */
+    KeyId?: string | undefined;
+    /**
+     * <p>The MAC key for the external account binding credentials.</p>
+     * @public
+     */
+    MacKey?: string | undefined;
+}
 /**
  * @public
  */
@@ -1049,6 +2006,141 @@ export interface ImportCertificateResponse {
      */
     CertificateArn?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface ListAcmeAccountsRequest {
+    /**
+     * <p>A token for pagination.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The maximum number of results to return.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListAcmeAccountsResponse {
+    /**
+     * <p>The list of ACME accounts.</p>
+     * @public
+     */
+    AcmeAccounts?: AcmeAccountSummary[] | undefined;
+    /**
+     * <p>A token for pagination.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListAcmeDomainValidationsRequest {
+    /**
+     * <p>A token for pagination.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The maximum number of results to return.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListAcmeDomainValidationsResponse {
+    /**
+     * <p>The list of domain validations.</p>
+     * @public
+     */
+    AcmeDomainValidations?: AcmeDomainValidationSummary[] | undefined;
+    /**
+     * <p>A token for pagination.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListAcmeEndpointsRequest {
+    /**
+     * <p>A token for pagination.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The maximum number of results to return.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+}
+/**
+ * @public
+ */
+export interface ListAcmeEndpointsResponse {
+    /**
+     * <p>The list of ACME endpoints.</p>
+     * @public
+     */
+    AcmeEndpoints?: AcmeEndpointSummary[] | undefined;
+    /**
+     * <p>A token for pagination.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListAcmeExternalAccountBindingsRequest {
+    /**
+     * <p>A token for pagination.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The maximum number of results to return.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListAcmeExternalAccountBindingsResponse {
+    /**
+     * <p>The list of external account bindings.</p>
+     * @public
+     */
+    ExternalAccountBindings?: AcmeExternalAccountBindingSummary[] | undefined;
+    /**
+     * <p>A token for pagination.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
 /**
  * <p>This structure can be used in the <a>ListCertificates</a> action to filter the output of the certificate list. </p>
  * @public
@@ -1089,6 +2181,11 @@ export interface ListCertificatesRequest {
      * @public
      */
     CertificateStatuses?: CertificateStatus[] | undefined;
+    /**
+     * <p>Filter the certificate list by certificate key pair origin. Specify one or more <code>CertificateKeyPairOrigin</code> values. Default filtering returns only certificates with key pair origin of <code>AWS_MANAGED</code> and <code>CUSTOMER_PROVIDED</code>.</p>
+     * @public
+     */
+    CertificateKeyPairOrigins?: CertificateKeyPairOrigin[] | undefined;
     /**
      * <p>Filter the certificate list. For more information, see the <a>Filters</a> structure.</p>
      * @public
@@ -1176,7 +2273,7 @@ export interface CertificateSummary {
      */
     InUse?: boolean | undefined;
     /**
-     * <p>Indicates whether the certificate has been exported. This value exists only when the certificate type is <code>PRIVATE</code>.</p>
+     * <p>Indicates whether the certificate has been exported.</p>
      * @public
      */
     Exported?: boolean | undefined;
@@ -1220,6 +2317,11 @@ export interface CertificateSummary {
      * @public
      */
     ManagedBy?: CertificateManagedBy | undefined;
+    /**
+     * <p>The origin of the certificate's key pair.</p>
+     * @public
+     */
+    CertificateKeyPairOrigin?: CertificateKeyPairOrigin | undefined;
 }
 /**
  * @public
@@ -1256,6 +2358,26 @@ export interface ListTagsForCertificateResponse {
      */
     Tags?: Tag[] | undefined;
 }
+/**
+ * @public
+ */
+export interface ListTagsForResourceRequest {
+    /**
+     * <p>The ARN of the ACM resource for which to list tags.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTagsForResourceResponse {
+    /**
+     * <p>The tags associated with the resource.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+}
 /**
  * @public
  */
@@ -1397,6 +2519,31 @@ export interface ResendValidationEmailRequest {
      */
     ValidationDomain: string | undefined;
 }
+/**
+ * @public
+ */
+export interface RevokeAcmeAccountRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+    /**
+     * <p>The URL of the ACME account to revoke.</p>
+     * @public
+     */
+    AccountUrl: string | undefined;
+}
+/**
+ * @public
+ */
+export interface RevokeAcmeExternalAccountBindingRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME external account binding to revoke.</p>
+     * @public
+     */
+    AcmeExternalAccountBindingArn: string | undefined;
+}
 /**
  * @public
  */
@@ -1795,6 +2942,76 @@ export interface SearchCertificatesResponse {
      */
     NextToken?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface TagResourceRequest {
+    /**
+     * <p>The ARN of the ACM resource to which the tag is to be applied.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The key-value pair that defines the tag to apply.</p>
+     * @public
+     */
+    Tags: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagResourceRequest {
+    /**
+     * <p>The ARN of the ACM resource from which the tag is to be removed.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The key of each tag to remove.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateAcmeDomainValidationRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME domain validation to update.</p>
+     * @public
+     */
+    AcmeDomainValidationArn: string | undefined;
+    /**
+     * <p>The updated prevalidation options.</p>
+     * @public
+     */
+    PrevalidationOptions?: PrevalidationOptions | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateAcmeEndpointRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the ACME endpoint to update.</p>
+     * @public
+     */
+    AcmeEndpointArn: string | undefined;
+    /**
+     * <p>The updated authorization behavior.</p>
+     * @public
+     */
+    AuthorizationBehavior?: AcmeAuthorizationBehavior | undefined;
+    /**
+     * <p>The updated contact requirement.</p>
+     * @public
+     */
+    Contact?: AcmeContact | undefined;
+    /**
+     * <p>The updated certificate authority configuration.</p>
+     * @public
+     */
+    CertificateAuthority?: CertificateAuthority | undefined;
+}
 /**
  * @public
  */