@aws-sdk/client-acm 3.1109.0 → 3.1111.0

package/dist-types/ACMClient.d.ts

@@ -28,6 +28,7 @@ import type { ListAcmeAccountsCommandInput, ListAcmeAccountsCommandOutput } from
 import type { ListAcmeDomainValidationsCommandInput, ListAcmeDomainValidationsCommandOutput } from "./commands/ListAcmeDomainValidationsCommand";
 import type { ListAcmeEndpointsCommandInput, ListAcmeEndpointsCommandOutput } from "./commands/ListAcmeEndpointsCommand";
 import type { ListAcmeExternalAccountBindingsCommandInput, ListAcmeExternalAccountBindingsCommandOutput } from "./commands/ListAcmeExternalAccountBindingsCommand";
+import type { ListCertificateDomainValidationsCommandInput, ListCertificateDomainValidationsCommandOutput } from "./commands/ListCertificateDomainValidationsCommand";
 import type { ListCertificatesCommandInput, ListCertificatesCommandOutput } from "./commands/ListCertificatesCommand";
 import type { ListTagsForCertificateCommandInput, ListTagsForCertificateCommandOutput } from "./commands/ListTagsForCertificateCommand";
 import type { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
@@ -51,11 +52,11 @@ export { __Client };
 /**
  * @public
  */
-export type ServiceInputTypes = AddTagsToCertificateCommandInput | CreateAcmeDomainValidationCommandInput | CreateAcmeEndpointCommandInput | CreateAcmeExternalAccountBindingCommandInput | DeleteAcmeDomainValidationCommandInput | DeleteAcmeEndpointCommandInput | DeleteAcmeExternalAccountBindingCommandInput | DeleteCertificateCommandInput | DescribeAcmeAccountCommandInput | DescribeAcmeDomainValidationCommandInput | DescribeAcmeEndpointCommandInput | DescribeAcmeExternalAccountBindingCommandInput | DescribeCertificateCommandInput | ExportCertificateCommandInput | GetAccountConfigurationCommandInput | GetAcmeExternalAccountBindingCredentialsCommandInput | GetCertificateCommandInput | ImportCertificateCommandInput | ListAcmeAccountsCommandInput | ListAcmeDomainValidationsCommandInput | ListAcmeEndpointsCommandInput | ListAcmeExternalAccountBindingsCommandInput | ListCertificatesCommandInput | ListTagsForCertificateCommandInput | ListTagsForResourceCommandInput | PutAccountConfigurationCommandInput | RemoveTagsFromCertificateCommandInput | RenewCertificateCommandInput | RequestCertificateCommandInput | ResendValidationEmailCommandInput | RevokeAcmeAccountCommandInput | RevokeAcmeExternalAccountBindingCommandInput | RevokeCertificateCommandInput | SearchCertificatesCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateAcmeDomainValidationCommandInput | UpdateAcmeEndpointCommandInput | UpdateCertificateOptionsCommandInput;
+export type ServiceInputTypes = AddTagsToCertificateCommandInput | CreateAcmeDomainValidationCommandInput | CreateAcmeEndpointCommandInput | CreateAcmeExternalAccountBindingCommandInput | DeleteAcmeDomainValidationCommandInput | DeleteAcmeEndpointCommandInput | DeleteAcmeExternalAccountBindingCommandInput | DeleteCertificateCommandInput | DescribeAcmeAccountCommandInput | DescribeAcmeDomainValidationCommandInput | DescribeAcmeEndpointCommandInput | DescribeAcmeExternalAccountBindingCommandInput | DescribeCertificateCommandInput | ExportCertificateCommandInput | GetAccountConfigurationCommandInput | GetAcmeExternalAccountBindingCredentialsCommandInput | GetCertificateCommandInput | ImportCertificateCommandInput | ListAcmeAccountsCommandInput | ListAcmeDomainValidationsCommandInput | ListAcmeEndpointsCommandInput | ListAcmeExternalAccountBindingsCommandInput | ListCertificateDomainValidationsCommandInput | ListCertificatesCommandInput | ListTagsForCertificateCommandInput | ListTagsForResourceCommandInput | PutAccountConfigurationCommandInput | RemoveTagsFromCertificateCommandInput | RenewCertificateCommandInput | RequestCertificateCommandInput | ResendValidationEmailCommandInput | RevokeAcmeAccountCommandInput | RevokeAcmeExternalAccountBindingCommandInput | RevokeCertificateCommandInput | SearchCertificatesCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateAcmeDomainValidationCommandInput | UpdateAcmeEndpointCommandInput | UpdateCertificateOptionsCommandInput;
 /**
  * @public
  */
-export type ServiceOutputTypes = AddTagsToCertificateCommandOutput | CreateAcmeDomainValidationCommandOutput | CreateAcmeEndpointCommandOutput | CreateAcmeExternalAccountBindingCommandOutput | DeleteAcmeDomainValidationCommandOutput | DeleteAcmeEndpointCommandOutput | DeleteAcmeExternalAccountBindingCommandOutput | DeleteCertificateCommandOutput | DescribeAcmeAccountCommandOutput | DescribeAcmeDomainValidationCommandOutput | DescribeAcmeEndpointCommandOutput | DescribeAcmeExternalAccountBindingCommandOutput | DescribeCertificateCommandOutput | ExportCertificateCommandOutput | GetAccountConfigurationCommandOutput | GetAcmeExternalAccountBindingCredentialsCommandOutput | GetCertificateCommandOutput | ImportCertificateCommandOutput | ListAcmeAccountsCommandOutput | ListAcmeDomainValidationsCommandOutput | ListAcmeEndpointsCommandOutput | ListAcmeExternalAccountBindingsCommandOutput | ListCertificatesCommandOutput | ListTagsForCertificateCommandOutput | ListTagsForResourceCommandOutput | PutAccountConfigurationCommandOutput | RemoveTagsFromCertificateCommandOutput | RenewCertificateCommandOutput | RequestCertificateCommandOutput | ResendValidationEmailCommandOutput | RevokeAcmeAccountCommandOutput | RevokeAcmeExternalAccountBindingCommandOutput | RevokeCertificateCommandOutput | SearchCertificatesCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateAcmeDomainValidationCommandOutput | UpdateAcmeEndpointCommandOutput | UpdateCertificateOptionsCommandOutput;
+export type ServiceOutputTypes = AddTagsToCertificateCommandOutput | CreateAcmeDomainValidationCommandOutput | CreateAcmeEndpointCommandOutput | CreateAcmeExternalAccountBindingCommandOutput | DeleteAcmeDomainValidationCommandOutput | DeleteAcmeEndpointCommandOutput | DeleteAcmeExternalAccountBindingCommandOutput | DeleteCertificateCommandOutput | DescribeAcmeAccountCommandOutput | DescribeAcmeDomainValidationCommandOutput | DescribeAcmeEndpointCommandOutput | DescribeAcmeExternalAccountBindingCommandOutput | DescribeCertificateCommandOutput | ExportCertificateCommandOutput | GetAccountConfigurationCommandOutput | GetAcmeExternalAccountBindingCredentialsCommandOutput | GetCertificateCommandOutput | ImportCertificateCommandOutput | ListAcmeAccountsCommandOutput | ListAcmeDomainValidationsCommandOutput | ListAcmeEndpointsCommandOutput | ListAcmeExternalAccountBindingsCommandOutput | ListCertificateDomainValidationsCommandOutput | ListCertificatesCommandOutput | ListTagsForCertificateCommandOutput | ListTagsForResourceCommandOutput | PutAccountConfigurationCommandOutput | RemoveTagsFromCertificateCommandOutput | RenewCertificateCommandOutput | RequestCertificateCommandOutput | ResendValidationEmailCommandOutput | RevokeAcmeAccountCommandOutput | RevokeAcmeExternalAccountBindingCommandOutput | RevokeCertificateCommandOutput | SearchCertificatesCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateAcmeDomainValidationCommandOutput | UpdateAcmeEndpointCommandOutput | UpdateCertificateOptionsCommandOutput;
 /**
  * @public
  */

package/dist-types/commands/DescribeCertificateCommand.d.ts

@@ -125,6 +125,17 @@ declare const DescribeCertificateCommand_base: {
  * //     Options: { // CertificateOptions
  * //       CertificateTransparencyLoggingPreference: "ENABLED" || "DISABLED",
  * //       Export: "ENABLED" || "DISABLED",
+ * //       ValidationMethod: "EMAIL" || "DNS" || "HTTP",
+ * //     },
+ * //     UpdateSummary: { // UpdateSummary
+ * //       Status: "PENDING_DOMAIN_VALIDATION" || "SUCCESS" || "FAILED",
+ * //       Type: "DOMAIN_VALIDATION_METHOD",
+ * //       DomainValidationMethodUpdateSummary: { // DomainValidationMethodUpdateSummary
+ * //         From: "EMAIL" || "DNS" || "HTTP",
+ * //         To: "EMAIL" || "DNS" || "HTTP",
+ * //       },
+ * //       RequestedAt: new Date("TIMESTAMP"),
+ * //       UpdatedAt: new Date("TIMESTAMP"),
  * //     },
  * //     CertificateKeyPairOrigin: "AWS_MANAGED" || "ACME" || "CUSTOMER_PROVIDED",
  * //     AcmeEndpointArn: "STRING_VALUE",

package/dist-types/commands/ListCertificateDomainValidationsCommand.d.ts

@@ -0,0 +1,128 @@
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { ListCertificateDomainValidationsRequest, ListCertificateDomainValidationsResponse } from "../models/models_0";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+/**
+ * @public
+ *
+ * The input for {@link ListCertificateDomainValidationsCommand}.
+ */
+export interface ListCertificateDomainValidationsCommandInput extends ListCertificateDomainValidationsRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link ListCertificateDomainValidationsCommand}.
+ */
+export interface ListCertificateDomainValidationsCommandOutput extends ListCertificateDomainValidationsResponse, __MetadataBearer {
+}
+declare const ListCertificateDomainValidationsCommand_base: {
+    new (input: ListCertificateDomainValidationsCommandInput): import("@smithy/core/client").CommandImpl<ListCertificateDomainValidationsCommandInput, ListCertificateDomainValidationsCommandOutput, import("..").ACMClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    new (input: ListCertificateDomainValidationsCommandInput): import("@smithy/core/client").CommandImpl<ListCertificateDomainValidationsCommandInput, ListCertificateDomainValidationsCommandOutput, import("..").ACMClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
+};
+/**
+ * <p>Returns per-domain validation summaries for an ACM certificate. Each summary includes the domain name, the active validation configuration, and the requested validation configuration when a validation method migration is in progress. You can use the results to monitor the progress of an email-to-DNS validation migration and to retrieve the CNAME records required for DNS validation.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ACMClient, ListCertificateDomainValidationsCommand } from "@aws-sdk/client-acm"; // ES Modules import
+ * // const { ACMClient, ListCertificateDomainValidationsCommand } = require("@aws-sdk/client-acm"); // CommonJS import
+ * // import type { ACMClientConfig } from "@aws-sdk/client-acm";
+ * const config = {}; // type is ACMClientConfig
+ * const client = new ACMClient(config);
+ * const input = { // ListCertificateDomainValidationsRequest
+ *   CertificateArn: "STRING_VALUE", // required
+ *   NextToken: "STRING_VALUE",
+ *   MaxItems: Number("int"),
+ * };
+ * const command = new ListCertificateDomainValidationsCommand(input);
+ * const response = await client.send(command);
+ * // { // ListCertificateDomainValidationsResponse
+ * //   DomainValidationSummaryList: [ // DomainValidationSummaryList
+ * //     { // DomainValidationSummary
+ * //       DomainName: "STRING_VALUE", // required
+ * //       ActiveValidationConfiguration: { // ValidationConfiguration
+ * //         ValidationMethod: "EMAIL" || "DNS" || "HTTP",
+ * //         ValidationChallenge: { // ValidationChallenge Union: only one key present
+ * //           EmailValidationChallenge: { // EmailValidationChallenge
+ * //             ValidationEmails: [ // ValidationEmailList
+ * //               "STRING_VALUE",
+ * //             ],
+ * //             ValidationDomain: "STRING_VALUE",
+ * //           },
+ * //           DnsValidationChallenge: { // DnsValidationChallenge
+ * //             ResourceRecord: { // ResourceRecord
+ * //               Name: "STRING_VALUE", // required
+ * //               Type: "CNAME", // required
+ * //               Value: "STRING_VALUE", // required
+ * //             },
+ * //           },
+ * //         },
+ * //         ValidationStatus: "PENDING_VALIDATION" || "SUCCESS" || "FAILED",
+ * //       },
+ * //       RequestedValidationConfiguration: {
+ * //         ValidationMethod: "EMAIL" || "DNS" || "HTTP",
+ * //         ValidationChallenge: {//  Union: only one key present
+ * //           EmailValidationChallenge: {
+ * //             ValidationEmails: [
+ * //               "STRING_VALUE",
+ * //             ],
+ * //             ValidationDomain: "STRING_VALUE",
+ * //           },
+ * //           DnsValidationChallenge: {
+ * //             ResourceRecord: {
+ * //               Name: "STRING_VALUE", // required
+ * //               Type: "CNAME", // required
+ * //               Value: "STRING_VALUE", // required
+ * //             },
+ * //           },
+ * //         },
+ * //         ValidationStatus: "PENDING_VALIDATION" || "SUCCESS" || "FAILED",
+ * //       },
+ * //     },
+ * //   ],
+ * //   NextToken: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param ListCertificateDomainValidationsCommandInput - {@link ListCertificateDomainValidationsCommandInput}
+ * @returns {@link ListCertificateDomainValidationsCommandOutput}
+ * @see {@link ListCertificateDomainValidationsCommandInput} for command's `input` shape.
+ * @see {@link ListCertificateDomainValidationsCommandOutput} for command's `response` shape.
+ * @see {@link ACMClientResolvedConfig | config} for ACMClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have access required to perform this action.</p>
+ *
+ * @throws {@link InvalidArgsException} (client fault)
+ *  <p>One or more of request parameters specified is not valid.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The specified certificate cannot be found in the caller's account or the caller's account cannot be found.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied because it exceeded a quota.</p>
+ *
+ * @throws {@link ACMServiceException}
+ * <p>Base exception class for all service exceptions from ACM service.</p>
+ *
+ *
+ * @public
+ */
+export declare class ListCertificateDomainValidationsCommand extends ListCertificateDomainValidationsCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: ListCertificateDomainValidationsRequest;
+            output: ListCertificateDomainValidationsResponse;
+        };
+        sdk: {
+            input: ListCertificateDomainValidationsCommandInput;
+            output: ListCertificateDomainValidationsCommandOutput;
+        };
+    };
+}

package/dist-types/commands/RequestCertificateCommand.d.ts

@@ -49,6 +49,7 @@ declare const RequestCertificateCommand_base: {
  *   Options: { // CertificateOptions
  *     CertificateTransparencyLoggingPreference: "ENABLED" || "DISABLED",
  *     Export: "ENABLED" || "DISABLED",
+ *     ValidationMethod: "EMAIL" || "DNS" || "HTTP",
  *   },
  *   CertificateAuthorityArn: "STRING_VALUE",
  *   Tags: [ // TagList

package/dist-types/commands/UpdateCertificateOptionsCommand.d.ts

@@ -24,7 +24,7 @@ declare const UpdateCertificateOptionsCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
 };
 /**
- * <p>Updates a certificate. You can use this function to specify whether to export your certificate. Certificate transparency logging opt-out is no longer available. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency">Certificate Transparency Logging</a> and <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html">Certificate Manager Exportable Managed Certificates</a>.</p>
+ * <p>Updates certificate options. You can use this operation to change the domain validation method or specify whether to export your certificate. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/email-to-dns-migration.html">Migrate from email to DNS validation</a> and <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html">Certificate Manager Exportable Managed Certificates</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -38,6 +38,7 @@ declare const UpdateCertificateOptionsCommand_base: {
  *   Options: { // CertificateOptions
  *     CertificateTransparencyLoggingPreference: "ENABLED" || "DISABLED",
  *     Export: "ENABLED" || "DISABLED",
+ *     ValidationMethod: "EMAIL" || "DNS" || "HTTP",
  *   },
  * };
  * const command = new UpdateCertificateOptionsCommand(input);
@@ -52,6 +53,9 @@ declare const UpdateCertificateOptionsCommand_base: {
  * @see {@link UpdateCertificateOptionsCommandOutput} for command's `response` shape.
  * @see {@link ACMClientResolvedConfig | config} for ACMClient's `config` shape.
  *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>You are trying to update a resource or configuration that is already being created or updated. Wait for the previous operation to finish and try again.</p>
+ *
  * @throws {@link InvalidArnException} (client fault)
  *  <p>The requested Amazon Resource Name (ARN) does not refer to an existing resource.</p>
  *

package/dist-types/commands/index.d.ts

@@ -20,6 +20,7 @@ export * from "./ListAcmeAccountsCommand";
 export * from "./ListAcmeDomainValidationsCommand";
 export * from "./ListAcmeEndpointsCommand";
 export * from "./ListAcmeExternalAccountBindingsCommand";
+export * from "./ListCertificateDomainValidationsCommand";
 export * from "./ListCertificatesCommand";
 export * from "./ListTagsForCertificateCommand";
 export * from "./ListTagsForResourceCommand";

package/dist-types/models/enums.d.ts

@@ -366,6 +366,30 @@ export declare const RevocationReason: {
  * @public
  */
 export type RevocationReason = (typeof RevocationReason)[keyof typeof RevocationReason];
+/**
+ * @public
+ * @enum
+ */
+export declare const UpdateStatus: {
+    readonly FAILED: "FAILED";
+    readonly PENDING_DOMAIN_VALIDATION: "PENDING_DOMAIN_VALIDATION";
+    readonly SUCCESS: "SUCCESS";
+};
+/**
+ * @public
+ */
+export type UpdateStatus = (typeof UpdateStatus)[keyof typeof UpdateStatus];
+/**
+ * @public
+ * @enum
+ */
+export declare const UpdateType: {
+    readonly DOMAIN_VALIDATION_METHOD: "DOMAIN_VALIDATION_METHOD";
+};
+/**
+ * @public
+ */
+export type UpdateType = (typeof UpdateType)[keyof typeof UpdateType];
 /**
  * @public
  * @enum

package/dist-types/models/models_0.d.ts

@@ -1,4 +1,4 @@
-import type { AcmeAccountStatus, AcmeAuthorizationBehavior, AcmeContact, AcmeDomainValidationFailureReason, AcmeDomainValidationStatus, AcmeEndpointStatus, CertificateExport, CertificateKeyPairOrigin, CertificateManagedBy, CertificateStatus, CertificateTransparencyLoggingPreference, CertificateType, ComparisonOperator, DomainScopeOption, DomainStatus, ExtendedKeyUsageName, FailureReason, KeyAlgorithm, KeyUsageName, PrevalidationType, PublicKeyAlgorithm, RecordType, RenewalEligibility, RenewalStatus, RevocationReason, SearchCertificatesSortBy, SearchCertificatesSortOrder, SortBy, SortOrder, TimeType, ValidationMethod } from "./enums";
+import type { AcmeAccountStatus, AcmeAuthorizationBehavior, AcmeContact, AcmeDomainValidationFailureReason, AcmeDomainValidationStatus, AcmeEndpointStatus, CertificateExport, CertificateKeyPairOrigin, CertificateManagedBy, CertificateStatus, CertificateTransparencyLoggingPreference, CertificateType, ComparisonOperator, DomainScopeOption, DomainStatus, ExtendedKeyUsageName, FailureReason, KeyAlgorithm, KeyUsageName, PrevalidationType, PublicKeyAlgorithm, RecordType, RenewalEligibility, RenewalStatus, RevocationReason, SearchCertificatesSortBy, SearchCertificatesSortOrder, SortBy, SortOrder, TimeType, UpdateStatus, UpdateType, ValidationMethod } from "./enums";
 /**
  * <p>Contains ACM-specific metadata about a certificate.</p>
  * @public
@@ -994,7 +994,7 @@ export interface KeyUsage {
     Name?: KeyUsageName | undefined;
 }
 /**
- * <p>Structure that contains options for your certificate. You can use this structure to specify whether to export your certificate.</p> <p>Certificate transparency logging opt-out is no longer available. All public certificates are recorded in a certificate transparency log. For general information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency">Certificate Transparency Logging</a>.</p> <p>You can export public ACM certificates to use with Amazon Web Services services as well as outside Amazon Web Services Cloud. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html">Certificate Manager exportable public certificate</a>.</p>
+ * <p>Structure that contains options for your certificate. You can use this structure to change the domain validation method or specify whether to export your certificate.</p> <p>All public certificates are recorded in a certificate transparency log. For general information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency">Certificate Transparency Logging</a>.</p> <p>You can export public ACM certificates to use with Amazon Web Services services as well as outside Amazon Web Services Cloud. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html">Certificate Manager exportable public certificate</a>.</p>
  * @public
  */
 export interface CertificateOptions {
@@ -1010,6 +1010,11 @@ export interface CertificateOptions {
      * @public
      */
     Export?: CertificateExport | undefined;
+    /**
+     * <p>The domain validation method for the certificate. To migrate from email to DNS validation, specify <code>DNS</code>.</p>
+     * @public
+     */
+    ValidationMethod?: ValidationMethod | undefined;
 }
 /**
  * <p>Contains information about the status of ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for the certificate. This structure exists only when the certificate type is <code>AMAZON_ISSUED</code>.</p>
@@ -1037,6 +1042,53 @@ export interface RenewalSummary {
      */
     UpdatedAt: Date | undefined;
 }
+/**
+ * <p>Contains information about a domain validation method migration, including the previous validation method and the target validation method.</p>
+ * @public
+ */
+export interface DomainValidationMethodUpdateSummary {
+    /**
+     * <p>The validation method that the certificate was using before the update.</p>
+     * @public
+     */
+    From?: ValidationMethod | undefined;
+    /**
+     * <p>The target validation method for the update.</p>
+     * @public
+     */
+    To?: ValidationMethod | undefined;
+}
+/**
+ * <p>Contains information about the most recent certificate update, such as a domain validation method migration. This structure is returned as part of the <a>CertificateDetail</a> response from <a>DescribeCertificate</a>.</p>
+ * @public
+ */
+export interface UpdateSummary {
+    /**
+     * <p>The status of the certificate update. The following are valid values:</p> <ul> <li> <p> <code>PENDING_DOMAIN_VALIDATION</code> – The certificate update is waiting for domain ownership validation to complete.</p> </li> <li> <p> <code>SUCCESS</code> – The certificate was updated successfully.</p> </li> <li> <p> <code>FAILED</code> – The certificate update failed.</p> </li> </ul>
+     * @public
+     */
+    Status?: UpdateStatus | undefined;
+    /**
+     * <p>The type of update that was requested for the certificate. The following are valid values:</p> <ul> <li> <p> <code>DOMAIN_VALIDATION_METHOD</code> – The update changes the domain validation method for the certificate.</p> </li> </ul>
+     * @public
+     */
+    Type?: UpdateType | undefined;
+    /**
+     * <p>Contains information about a domain validation method migration, including the previous and target validation methods.</p>
+     * @public
+     */
+    DomainValidationMethodUpdateSummary?: DomainValidationMethodUpdateSummary | undefined;
+    /**
+     * <p>The time at which the certificate update was requested.</p>
+     * @public
+     */
+    RequestedAt?: Date | undefined;
+    /**
+     * <p>The time at which the certificate update status was last changed.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+}
 /**
  * <p>Contains metadata about an ACM certificate. This structure is returned in the response to a <a>DescribeCertificate</a> request. </p>
  * @public
@@ -1177,6 +1229,11 @@ export interface CertificateDetail {
      * @public
      */
     Options?: CertificateOptions | undefined;
+    /**
+     * <p>Contains information about the most recent update to the certificate. This field exists only when the certificate type is <code>AMAZON_ISSUED</code> and a certificate update has been requested.</p>
+     * @public
+     */
+    UpdateSummary?: UpdateSummary | undefined;
     /**
      * <p>The origin of the certificate's key pair.</p>
      * @public
@@ -2141,6 +2198,155 @@ export interface ListAcmeExternalAccountBindingsResponse {
      */
     NextToken?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface ListCertificateDomainValidationsRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the certificate for which to list domain validation summaries.</p>
+     * @public
+     */
+    CertificateArn: string | undefined;
+    /**
+     * <p>A token returned by a previous call to <code>ListCertificateDomainValidations</code>. If the number of results exceeds <code>MaxItems</code>, use this token to retrieve the next page of results.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The maximum number of domain validation summaries to return. If you don't specify a value, the default is 1000.</p>
+     * @public
+     */
+    MaxItems?: number | undefined;
+}
+/**
+ * <p>Contains the CNAME record that you must add to your DNS configuration to validate domain ownership using DNS validation.</p>
+ * @public
+ */
+export interface DnsValidationChallenge {
+    /**
+     * <p>The CNAME record that ACM creates for DNS validation. Add this record to your DNS configuration to prove that you own or control the domain.</p>
+     * @public
+     */
+    ResourceRecord?: ResourceRecord | undefined;
+}
+/**
+ * <p>Contains the email addresses used for email-based domain validation.</p>
+ * @public
+ */
+export interface EmailValidationChallenge {
+    /**
+     * <p>A list of email addresses that ACM uses to send domain validation emails.</p>
+     * @public
+     */
+    ValidationEmails?: string[] | undefined;
+    /**
+     * <p>The domain name that ACM uses to send validation emails.</p>
+     * @public
+     */
+    ValidationDomain?: string | undefined;
+}
+/**
+ * <p>Contains the challenge details that you use to prove domain ownership. Only one member is set, depending on the validation method.</p>
+ * @public
+ */
+export type ValidationChallenge = ValidationChallenge.DnsValidationChallengeMember | ValidationChallenge.EmailValidationChallengeMember | ValidationChallenge.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace ValidationChallenge {
+    /**
+     * <p>Contains the email addresses used for email-based domain validation.</p>
+     * @public
+     */
+    interface EmailValidationChallengeMember {
+        EmailValidationChallenge: EmailValidationChallenge;
+        DnsValidationChallenge?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Contains the CNAME record that you must add to your DNS configuration to validate domain ownership using DNS validation.</p>
+     * @public
+     */
+    interface DnsValidationChallengeMember {
+        EmailValidationChallenge?: never;
+        DnsValidationChallenge: DnsValidationChallenge;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        EmailValidationChallenge?: never;
+        DnsValidationChallenge?: never;
+        $unknown: [string, any];
+    }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
+    interface Visitor<T> {
+        EmailValidationChallenge: (value: EmailValidationChallenge) => T;
+        DnsValidationChallenge: (value: DnsValidationChallenge) => T;
+        _: (name: string, value: any) => T;
+    }
+}
+/**
+ * <p>Contains the validation method, validation status, and validation challenge details for a domain. This structure appears in <a>DomainValidationSummary</a> as both the active and requested validation configuration.</p>
+ * @public
+ */
+export interface ValidationConfiguration {
+    /**
+     * <p>The validation method for this configuration. Valid values:</p> <ul> <li> <p> <code>DNS</code> – Validation using a CNAME record added to your DNS configuration.</p> </li> <li> <p> <code>EMAIL</code> – Validation using an approval email sent to domain contacts.</p> </li> <li> <p> <code>HTTP</code> – Validation using an HTTP resource placed on your web server.</p> </li> </ul>
+     * @public
+     */
+    ValidationMethod?: ValidationMethod | undefined;
+    /**
+     * <p>The validation challenge details for this configuration. The structure varies by validation method: for DNS validation, contains a <code>DnsValidationChallenge</code> with the CNAME record to add; for email validation, contains an <code>EmailValidationChallenge</code> with the validation email addresses.</p>
+     * @public
+     */
+    ValidationChallenge?: ValidationChallenge | undefined;
+    /**
+     * <p>The validation status for this domain. Valid values:</p> <ul> <li> <p> <code>PENDING_VALIDATION</code> – The domain is waiting for validation to complete.</p> </li> <li> <p> <code>SUCCESS</code> – Validation completed successfully.</p> </li> <li> <p> <code>FAILED</code> – Validation failed.</p> </li> </ul>
+     * @public
+     */
+    ValidationStatus?: DomainStatus | undefined;
+}
+/**
+ * <p>Contains per-domain validation information for a certificate. This structure is returned as a member of the <a>ListCertificateDomainValidations</a> response.</p>
+ * @public
+ */
+export interface DomainValidationSummary {
+    /**
+     * <p>The fully qualified domain name (FQDN) in the certificate for which this validation summary applies.</p>
+     * @public
+     */
+    DomainName: string | undefined;
+    /**
+     * <p>The validation configuration currently in effect for this domain. This reflects the validation method that ACM is currently using to validate domain ownership (for example, email or DNS).</p>
+     * @public
+     */
+    ActiveValidationConfiguration?: ValidationConfiguration | undefined;
+    /**
+     * <p>The validation configuration for a pending validation method migration. This field is present only when a migration is in progress (for example, from email to DNS validation). It contains the target validation method, the current validation status, and the validation challenge details (such as the CNAME record to add to your DNS configuration).</p>
+     * @public
+     */
+    RequestedValidationConfiguration?: ValidationConfiguration | undefined;
+}
+/**
+ * @public
+ */
+export interface ListCertificateDomainValidationsResponse {
+    /**
+     * <p>A list of <a>DomainValidationSummary</a> objects, one for each domain on the certificate. Each object contains the domain name and its active and requested validation configurations.</p>
+     * @public
+     */
+    DomainValidationSummaryList?: DomainValidationSummary[] | undefined;
+    /**
+     * <p>If the number of results exceeds <code>MaxItems</code>, this token is included in the response. Use this token in a subsequent <code>ListCertificateDomainValidations</code> request to retrieve the next page of results.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
 /**
  * <p>This structure can be used in the <a>ListCertificates</a> action to filter the output of the certificate list. </p>
  * @public
@@ -3022,7 +3228,7 @@ export interface UpdateCertificateOptionsRequest {
      */
     CertificateArn: string | undefined;
     /**
-     * <p>Use to update the options for your certificate. Currently, you can specify whether to export your certificate. Certificate transparency logging opt-out is no longer available. All public certificates are recorded in a certificate transparency log. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency">Certificate Transparency Logging</a>.</p>
+     * <p>Use to update the options for your certificate. Currently, you can change the domain validation method or specify whether to export your certificate. For more information about migrating from email to DNS validation, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/email-to-dns-migration.html">Migrate from email to DNS validation</a>.</p>
      * @public
      */
     Options: CertificateOptions | undefined;

package/dist-types/pagination/ListCertificateDomainValidationsPaginator.d.ts

@@ -0,0 +1,7 @@
+import type { Paginator } from "@smithy/types";
+import { ListCertificateDomainValidationsCommandInput, ListCertificateDomainValidationsCommandOutput } from "../commands/ListCertificateDomainValidationsCommand";
+import type { ACMPaginationConfiguration } from "./Interfaces";
+/**
+ * @public
+ */
+export declare const paginateListCertificateDomainValidations: (config: ACMPaginationConfiguration, input: ListCertificateDomainValidationsCommandInput, ...rest: any[]) => Paginator<ListCertificateDomainValidationsCommandOutput>;

package/dist-types/pagination/index.d.ts

@@ -3,5 +3,6 @@ export * from "./ListAcmeAccountsPaginator";
 export * from "./ListAcmeDomainValidationsPaginator";
 export * from "./ListAcmeEndpointsPaginator";
 export * from "./ListAcmeExternalAccountBindingsPaginator";
+export * from "./ListCertificateDomainValidationsPaginator";
 export * from "./ListCertificatesPaginator";
 export * from "./SearchCertificatesPaginator";

package/dist-types/runtimeConfig.browser.d.ts

@@ -4,49 +4,14 @@ import type { ACMClientConfig } from "./ACMClient";
  * @internal
  */
 export declare const getRuntimeConfig: (config: ACMClientConfig) => {
-    runtime: string;
-    defaultsMode: import("@smithy/types").Provider<import("@smithy/core/client").ResolvedDefaultsMode>;
-    bodyLengthChecker: import("@smithy/types").BodyLengthCalculator;
-    credentialDefaultProvider: ((input: any) => import("@smithy/types").AwsCredentialIdentityProvider) | ((_: unknown) => () => Promise<import("@smithy/types").AwsCredentialIdentity>);
-    defaultUserAgentProvider: (config?: import("@aws-sdk/core/client").PreviouslyResolved) => Promise<import("@smithy/types").UserAgent>;
-    maxAttempts: number | import("@smithy/types").Provider<number>;
-    region: string | import("@smithy/types").Provider<any>;
-    requestHandler: import("@smithy/core/protocols").HttpHandler<any> | RequestHandler;
-    retryMode: string | import("@smithy/types").Provider<string>;
-    streamCollector: (stream: import("stream").Readable | import("stream/web").ReadableStream | ReadableStream | Blob) => Promise<Uint8Array>;
-    useDualstackEndpoint: (boolean | import("@smithy/types").Provider<boolean>) & (boolean | import("@smithy/types").Provider<boolean | undefined>);
-    useFipsEndpoint: (boolean | import("@smithy/types").Provider<boolean>) & (boolean | import("@smithy/types").Provider<boolean | undefined>);
-    cacheMiddleware?: boolean | undefined;
-    protocol: import("@smithy/types").ClientProtocol<any, any> | import("@smithy/types").ClientProtocolCtor<any, any> | typeof import("@aws-sdk/core/protocols").AwsJson1_1Protocol;
-    protocolSettings: {
-        defaultNamespace?: string;
-        [setting: string]: unknown;
-    };
-    apiVersion: string;
-    sha256: import("@smithy/types").HashConstructor;
-    urlParser: import("@smithy/types").UrlParser;
-    base64Decoder: import("@smithy/types").Decoder;
-    base64Encoder: (_input: Uint8Array | string) => string;
-    utf8Decoder: import("@smithy/types").Decoder;
-    utf8Encoder: (input: Uint8Array | string) => string;
-    disableHostPrefix: boolean;
-    serviceId: string;
-    profile?: string;
-    logger: import("@smithy/types").Logger;
-    extensions: import("./runtimeExtensions").RuntimeExtension[];
+    cacheMiddleware?: boolean;
     customUserAgent?: string | import("@smithy/types").UserAgent;
     userAgentAppId?: string | undefined | import("@smithy/types").Provider<string | undefined>;
-    retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2;
-    endpoint?: ((string | import("@smithy/types").Endpoint | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>) & (string | import("@smithy/types").Provider<string> | import("@smithy/types").Endpoint | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>)) | undefined;
-    endpointProvider: (endpointParams: import("./endpoint/EndpointParameters").EndpointParameters, context?: {
-        logger?: import("@smithy/types").Logger;
-    }) => import("@smithy/types").EndpointV2;
+    endpoint?: ((string | import("@smithy/types").Endpoint | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>) & (string | import("@smithy/types").Endpoint | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<string> | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>)) | undefined;
     tls?: boolean;
     ignoreConfiguredEndpointUrls?: boolean;
     serviceConfiguredEndpoint?: never;
-    authSchemePreference?: string[] | import("@smithy/types").Provider<string[]>;
-    httpAuthSchemes: import("@smithy/types").HttpAuthScheme[];
-    httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").ACMHttpAuthSchemeProvider;
+    retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2;
     credentials?: import("@smithy/types").AwsCredentialIdentity | import("@smithy/types").AwsCredentialIdentityProvider;
     signer?: import("@smithy/types").RequestSigner | ((authScheme?: import("@smithy/types").AuthScheme) => Promise<import("@smithy/types").RequestSigner>);
     signingEscapePath?: boolean;
@@ -54,8 +19,43 @@ export declare const getRuntimeConfig: (config: ACMClientConfig) => {
     signingRegion?: string;
     signerConstructor?: new (options: import("@smithy/signature-v4").SignatureV4Init & import("@smithy/signature-v4").SignatureV4CryptoInit) => import("@smithy/types").RequestSigner;
     disableClockSkewCorrection?: boolean | import("@smithy/types").Provider<boolean>;
+    authSchemePreference?: string[] | import("@smithy/types").Provider<string[]>;
     clientContextParams?: {
         serviceType?: string | undefined | import("@smithy/types").Provider<string | undefined>;
     };
     serviceType?: string | undefined | import("@smithy/types").Provider<string | undefined>;
+    apiVersion: string;
+    base64Decoder: import("@smithy/types").Decoder;
+    base64Encoder: (_input: Uint8Array | string) => string;
+    disableHostPrefix: boolean;
+    endpointProvider: (params: import("./endpoint/EndpointParameters").EndpointParameters, context?: {
+        logger?: import("@smithy/types").Logger;
+    }) => import("@smithy/types").EndpointV2;
+    extensions: import("./runtimeExtensions").RuntimeExtension[];
+    httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").ACMHttpAuthSchemeProvider;
+    httpAuthSchemes: import("@smithy/types").HttpAuthScheme[];
+    logger: import("@smithy/types").Logger;
+    protocol: import("@smithy/types").$ClientProtocol<any, any> | import("@smithy/types").$ClientProtocolCtor<any, any> | typeof import("@aws-sdk/core/protocols").AwsJson1_1Protocol;
+    protocolSettings: {
+        [setting: string]: unknown;
+        defaultNamespace?: string;
+    };
+    serviceId: string;
+    sha256: import("@smithy/types").HashConstructor;
+    urlParser: import("@smithy/types").UrlParser;
+    utf8Decoder: import("@smithy/types").Decoder;
+    utf8Encoder: (input: Uint8Array | string) => string;
+    profile?: string;
+    runtime: string;
+    defaultsMode: import("@smithy/types").Provider<import("@smithy/core/client").ResolvedDefaultsMode>;
+    bodyLengthChecker: import("@smithy/types").BodyLengthCalculator;
+    credentialDefaultProvider: ((input: any) => import("@smithy/types").AwsCredentialIdentityProvider) | ((_: unknown) => () => Promise<import("@smithy/types").AwsCredentialIdentity>);
+    defaultUserAgentProvider: (config?: import("@aws-sdk/core/client").PreviouslyResolved) => Promise<import("@smithy/types").UserAgent>;
+    maxAttempts: number | import("@smithy/types").Provider<number>;
+    region: string | import("@smithy/types").Provider<any>;
+    requestHandler: RequestHandler | import("@smithy/core/protocols").HttpHandler<any>;
+    retryMode: string | import("@smithy/types").Provider<string>;
+    streamCollector: (stream: import("stream").Readable | import("stream/web").ReadableStream | ReadableStream | Blob) => Promise<Uint8Array>;
+    useDualstackEndpoint: boolean | (() => Promise<boolean>);
+    useFipsEndpoint: boolean | (() => Promise<boolean>);
 };