@aws-sdk/client-acm 3.533.0 → 3.540.0

package/dist-types/models/models_0.d.ts

@@ -1,8 +1,8 @@
 import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
 import { ACMServiceException as __BaseException } from "./ACMServiceException";
 /**
- * @public
  * <p>You do not have access required to perform this action.</p>
+ * @public
  */
 export declare class AccessDeniedException extends __BaseException {
     readonly name: "AccessDeniedException";
@@ -14,18 +14,18 @@ export declare class AccessDeniedException extends __BaseException {
     constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
 }
 /**
- * @public
  * <p>A key-value pair that identifies or specifies metadata about an ACM resource.</p>
+ * @public
  */
 export interface Tag {
     /**
-     * @public
      * <p>The key of the tag.</p>
+     * @public
      */
     Key: string | undefined;
     /**
-     * @public
      * <p>The value of the tag.</p>
+     * @public
      */
     Value?: string;
 }
@@ -34,24 +34,24 @@ export interface Tag {
  */
 export interface AddTagsToCertificateRequest {
     /**
-     * @public
      * <p>String that contains the ARN of the ACM certificate to which the tag is to be applied.
      *       This must be of the form:</p>
      *          <p>
      *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
      */
     CertificateArn: string | undefined;
     /**
-     * @public
      * <p>The key-value pair that defines the tag. The tag value is optional.</p>
+     * @public
      */
     Tags: Tag[] | undefined;
 }
 /**
- * @public
  * <p>The requested Amazon Resource Name (ARN) does not refer to an existing resource.</p>
+ * @public
  */
 export declare class InvalidArnException extends __BaseException {
     readonly name: "InvalidArnException";
@@ -62,8 +62,8 @@ export declare class InvalidArnException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InvalidArnException, __BaseException>);
 }
 /**
- * @public
  * <p>An input parameter was invalid.</p>
+ * @public
  */
 export declare class InvalidParameterException extends __BaseException {
     readonly name: "InvalidParameterException";
@@ -74,9 +74,9 @@ export declare class InvalidParameterException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InvalidParameterException, __BaseException>);
 }
 /**
- * @public
  * <p>One or both of the values that make up the key-value pair is not valid. For example, you
  *       cannot specify a tag value that begins with <code>aws:</code>.</p>
+ * @public
  */
 export declare class InvalidTagException extends __BaseException {
     readonly name: "InvalidTagException";
@@ -87,9 +87,9 @@ export declare class InvalidTagException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InvalidTagException, __BaseException>);
 }
 /**
- * @public
  * <p>The specified certificate cannot be found in the caller's account or the caller's account
  *       cannot be found.</p>
+ * @public
  */
 export declare class ResourceNotFoundException extends __BaseException {
     readonly name: "ResourceNotFoundException";
@@ -100,8 +100,8 @@ export declare class ResourceNotFoundException extends __BaseException {
     constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
 }
 /**
- * @public
  * <p>A specified tag did not comply with an existing tag policy and was rejected.</p>
+ * @public
  */
 export declare class TagPolicyException extends __BaseException {
     readonly name: "TagPolicyException";
@@ -112,8 +112,8 @@ export declare class TagPolicyException extends __BaseException {
     constructor(opts: __ExceptionOptionType<TagPolicyException, __BaseException>);
 }
 /**
- * @public
  * <p>The request was denied because it exceeded a quota.</p>
+ * @public
  */
 export declare class ThrottlingException extends __BaseException {
     readonly name: "ThrottlingException";
@@ -124,8 +124,8 @@ export declare class ThrottlingException extends __BaseException {
     constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
 }
 /**
- * @public
  * <p>The request contains too many tags. Try the request again with fewer tags.</p>
+ * @public
  */
 export declare class TooManyTagsException extends __BaseException {
     readonly name: "TooManyTagsException";
@@ -147,25 +147,25 @@ export declare const RecordType: {
  */
 export type RecordType = (typeof RecordType)[keyof typeof RecordType];
 /**
- * @public
  * <p>Contains a DNS record value that you can use to validate ownership or control of a domain.
  *       This is used by the <a>DescribeCertificate</a> action. </p>
+ * @public
  */
 export interface ResourceRecord {
     /**
-     * @public
      * <p>The name of the DNS record to create in your domain. This is supplied by ACM.</p>
+     * @public
      */
     Name: string | undefined;
     /**
-     * @public
      * <p>The type of DNS record. Currently this can be <code>CNAME</code>.</p>
+     * @public
      */
     Type: RecordType | undefined;
     /**
-     * @public
      * <p>The value of the CNAME record to add to your DNS database. This is supplied by
      *       ACM.</p>
+     * @public
      */
     Value: string | undefined;
 }
@@ -195,28 +195,27 @@ export declare const DomainStatus: {
  */
 export type DomainStatus = (typeof DomainStatus)[keyof typeof DomainStatus];
 /**
- * @public
  * <p>Contains information about the validation of each domain name in the certificate.</p>
+ * @public
  */
 export interface DomainValidation {
     /**
-     * @public
      * <p>A fully qualified domain name (FQDN) in the certificate. For example,
      *         <code>www.example.com</code> or <code>example.com</code>. </p>
+     * @public
      */
     DomainName: string | undefined;
     /**
-     * @public
      * <p>A list of email addresses that ACM used to send domain validation emails.</p>
+     * @public
      */
     ValidationEmails?: string[];
     /**
-     * @public
      * <p>The domain name that ACM used to send domain validation emails.</p>
+     * @public
      */
     ValidationDomain?: string;
     /**
-     * @public
      * <p>The validation status of the domain name. This can be one of the following values:</p>
      *          <ul>
      *             <li>
@@ -233,10 +232,10 @@ export interface DomainValidation {
      *                   <code></code>FAILED</p>
      *             </li>
      *          </ul>
+     * @public
      */
     ValidationStatus?: DomainStatus;
     /**
-     * @public
      * <p>Contains the CNAME record that you add to your DNS database for domain validation. For
      *       more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html">Use DNS to Validate Domain Ownership</a>.</p>
      *          <p>Note: The CNAME information that you need does not include the name of your domain. If you
@@ -245,11 +244,12 @@ export interface DomainValidation {
    For example, if
      *       the name is "_a79865eb4cd1a6ab990a45779b4e0b96.yourdomain.com", only
      *       "_a79865eb4cd1a6ab990a45779b4e0b96" must be used.</p>
+     * @public
      */
     ResourceRecord?: ResourceRecord;
     /**
-     * @public
      * <p>Specifies the domain validation method.</p>
+     * @public
      */
     ValidationMethod?: ValidationMethod;
 }
@@ -276,19 +276,18 @@ export declare const ExtendedKeyUsageName: {
  */
 export type ExtendedKeyUsageName = (typeof ExtendedKeyUsageName)[keyof typeof ExtendedKeyUsageName];
 /**
- * @public
  * <p>The Extended Key Usage X.509 v3 extension defines one or more purposes for which the
  *       public key can be used. This is in addition to or in place of the basic purposes specified by
  *       the Key Usage extension. </p>
+ * @public
  */
 export interface ExtendedKeyUsage {
     /**
-     * @public
      * <p>The name of an Extended Key Usage value.</p>
+     * @public
      */
     Name?: ExtendedKeyUsageName;
     /**
-     * @public
      * <p>An object identifier (OID) for the extension value. OIDs are strings of numbers separated
      *       by periods. The following OIDs are defined in RFC 3280 and RFC 5280. </p>
      *          <ul>
@@ -338,6 +337,7 @@ export interface ExtendedKeyUsage {
      *                </p>
      *             </li>
      *          </ul>
+     * @public
      */
     OID?: string;
 }
@@ -407,14 +407,14 @@ export declare const KeyUsageName: {
  */
 export type KeyUsageName = (typeof KeyUsageName)[keyof typeof KeyUsageName];
 /**
- * @public
  * <p>The Key Usage X.509 v3 extension defines the purpose of the public key contained in the
  *       certificate.</p>
+ * @public
  */
 export interface KeyUsage {
     /**
-     * @public
      * <p>A string value that contains a Key Usage extension name.</p>
+     * @public
      */
     Name?: KeyUsageName;
 }
@@ -431,7 +431,6 @@ export declare const CertificateTransparencyLoggingPreference: {
  */
 export type CertificateTransparencyLoggingPreference = (typeof CertificateTransparencyLoggingPreference)[keyof typeof CertificateTransparencyLoggingPreference];
 /**
- * @public
  * <p>Structure that contains options for your certificate. Currently, you can use this only to
  *       specify whether to opt in to or out of certificate transparency logging. Some browsers require
  *       that public certificates issued for your domain be recorded in a log. Certificates that are
@@ -439,12 +438,13 @@ export type CertificateTransparencyLoggingPreference = (typeof CertificateTransp
  *       detect SSL/TLS certificates that have been mistakenly or maliciously issued for your domain.
  *       For general information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency">Certificate Transparency
  *         Logging</a>. </p>
+ * @public
  */
 export interface CertificateOptions {
     /**
-     * @public
      * <p>You can opt out of certificate transparency logging by specifying the
      *         <code>DISABLED</code> option. Opt in by specifying <code>ENABLED</code>. </p>
+     * @public
      */
     CertificateTransparencyLoggingPreference?: CertificateTransparencyLoggingPreference;
 }
@@ -475,33 +475,33 @@ export declare const RenewalStatus: {
  */
 export type RenewalStatus = (typeof RenewalStatus)[keyof typeof RenewalStatus];
 /**
- * @public
  * <p>Contains information about the status of ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for the certificate. This
  *       structure exists only when the certificate type is <code>AMAZON_ISSUED</code>.</p>
+ * @public
  */
 export interface RenewalSummary {
     /**
-     * @public
      * <p>The status of ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> of the certificate.</p>
+     * @public
      */
     RenewalStatus: RenewalStatus | undefined;
     /**
-     * @public
      * <p>Contains information about the validation of each domain name in the certificate, as it
      *       pertains to ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed
      *         renewal</a>. This is different from the initial validation that occurs as a result of
      *       the <a>RequestCertificate</a> request. This field exists only when the certificate
      *       type is <code>AMAZON_ISSUED</code>.</p>
+     * @public
      */
     DomainValidationOptions: DomainValidation[] | undefined;
     /**
-     * @public
      * <p>The reason that a renewal request was unsuccessful.</p>
+     * @public
      */
     RenewalStatusReason?: FailureReason;
     /**
-     * @public
      * <p>The time at which the renewal summary was last updated.</p>
+     * @public
      */
     UpdatedAt: Date | undefined;
 }
@@ -556,187 +556,187 @@ export declare const CertificateType: {
  */
 export type CertificateType = (typeof CertificateType)[keyof typeof CertificateType];
 /**
- * @public
  * <p>Contains metadata about an ACM certificate. This structure is returned in the response
  *       to a <a>DescribeCertificate</a> request. </p>
+ * @public
  */
 export interface CertificateDetail {
     /**
-     * @public
      * <p>The Amazon Resource Name (ARN) of the certificate. For more information about ARNs, see
      *         <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in
      *       the <i>Amazon Web Services General Reference</i>.</p>
+     * @public
      */
     CertificateArn?: string;
     /**
-     * @public
      * <p>The fully qualified domain name for the certificate, such as www.example.com or
      *       example.com.</p>
+     * @public
      */
     DomainName?: string;
     /**
-     * @public
      * <p>One or more domain names (subject alternative names)
      *       included in the certificate. This
      *       list contains the domain names that are bound to the public key that is contained in the
      *       certificate. The subject alternative names include the canonical domain name (CN) of the
      *       certificate and additional domain names that can be used to connect to the website. </p>
+     * @public
      */
     SubjectAlternativeNames?: string[];
     /**
-     * @public
      * <p>Contains information about the initial validation of each domain name that occurs as a
      *       result of the <a>RequestCertificate</a> request. This field exists only when the
      *       certificate type is <code>AMAZON_ISSUED</code>. </p>
+     * @public
      */
     DomainValidationOptions?: DomainValidation[];
     /**
-     * @public
      * <p>The serial number of the certificate.</p>
+     * @public
      */
     Serial?: string;
     /**
-     * @public
      * <p>The name of the entity that is associated with the public key contained in the
      *       certificate.</p>
+     * @public
      */
     Subject?: string;
     /**
-     * @public
      * <p>The name of the certificate authority that issued and signed the certificate.</p>
+     * @public
      */
     Issuer?: string;
     /**
-     * @public
      * <p>The time at which the certificate was requested.</p>
+     * @public
      */
     CreatedAt?: Date;
     /**
-     * @public
      * <p>The time at which the certificate was issued. This value exists only when the certificate
      *       type is <code>AMAZON_ISSUED</code>. </p>
+     * @public
      */
     IssuedAt?: Date;
     /**
-     * @public
      * <p>The date and time when the certificate was imported. This value exists only when the
      *       certificate type is <code>IMPORTED</code>. </p>
+     * @public
      */
     ImportedAt?: Date;
     /**
-     * @public
      * <p>The status of the certificate.</p>
      *          <p>A certificate enters status PENDING_VALIDATION upon being requested, unless it fails for
      *       any of the reasons given in the troubleshooting topic <a href="https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html">Certificate request fails</a>. ACM makes
      *       repeated attempts to validate a certificate for 72 hours and then times out. If a certificate
      *       shows status FAILED or VALIDATION_TIMED_OUT, delete the request, correct the issue with <a href="https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html">DNS validation</a> or <a href="https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html">Email validation</a>, and
      *       try again. If validation succeeds, the certificate enters status ISSUED. </p>
+     * @public
      */
     Status?: CertificateStatus;
     /**
-     * @public
      * <p>The time at which the certificate was revoked. This value exists only when the certificate
      *       status is <code>REVOKED</code>. </p>
+     * @public
      */
     RevokedAt?: Date;
     /**
-     * @public
      * <p>The reason the certificate was revoked. This value exists only when the certificate status
      *       is <code>REVOKED</code>. </p>
+     * @public
      */
     RevocationReason?: RevocationReason;
     /**
-     * @public
      * <p>The time before which the certificate is not valid.</p>
+     * @public
      */
     NotBefore?: Date;
     /**
-     * @public
      * <p>The time after which the certificate is not valid.</p>
+     * @public
      */
     NotAfter?: Date;
     /**
-     * @public
      * <p>The algorithm that was used to generate the public-private key pair.</p>
+     * @public
      */
     KeyAlgorithm?: KeyAlgorithm;
     /**
-     * @public
      * <p>The algorithm that was used to sign the certificate.</p>
+     * @public
      */
     SignatureAlgorithm?: string;
     /**
-     * @public
      * <p>A list of ARNs for the Amazon Web Services resources that are using the certificate. A certificate can
      *       be used by multiple Amazon Web Services resources. </p>
+     * @public
      */
     InUseBy?: string[];
     /**
-     * @public
      * <p>The reason the certificate request failed. This value exists only when the certificate
      *       status is <code>FAILED</code>. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed">Certificate Request
      *         Failed</a> in the <i>Certificate Manager User Guide</i>. </p>
+     * @public
      */
     FailureReason?: FailureReason;
     /**
-     * @public
      * <p>The source of the certificate. For certificates provided by ACM, this value is
      *         <code>AMAZON_ISSUED</code>. For certificates that you imported with <a>ImportCertificate</a>, this value is <code>IMPORTED</code>. ACM does not provide
      *         <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for
      *       imported certificates. For more information about the differences between certificates that
      *       you import and those that ACM provides, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html">Importing Certificates</a> in the
      *         <i>Certificate Manager User Guide</i>. </p>
+     * @public
      */
     Type?: CertificateType;
     /**
-     * @public
      * <p>Contains information about the status of ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for the certificate. This field
      *       exists only when the certificate type is <code>AMAZON_ISSUED</code>.</p>
+     * @public
      */
     RenewalSummary?: RenewalSummary;
     /**
-     * @public
      * <p>A list of Key Usage X.509 v3 extension objects. Each object is a string value that
      *       identifies the purpose of the public key contained in the certificate. Possible extension
      *       values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.</p>
+     * @public
      */
     KeyUsages?: KeyUsage[];
     /**
-     * @public
      * <p>Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a
      *       purpose for which the certificate public key can be used and consists of a name and an object
      *       identifier (OID). </p>
+     * @public
      */
     ExtendedKeyUsages?: ExtendedKeyUsage[];
     /**
-     * @public
      * <p>The Amazon Resource Name (ARN) of the private certificate authority (CA) that issued the
      *       certificate. This has the following format: </p>
      *          <p>
      *             <code>arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012</code>
      *          </p>
+     * @public
      */
     CertificateAuthorityArn?: string;
     /**
-     * @public
      * <p>Specifies whether the certificate is eligible for renewal. At this time, only exported
      *       private certificates can be renewed with the <a>RenewCertificate</a>
      *       command.</p>
+     * @public
      */
     RenewalEligibility?: RenewalEligibility;
     /**
-     * @public
      * <p>Value that specifies whether to add the certificate to a transparency log. Certificate
      *       transparency makes it possible to detect SSL certificates that have been mistakenly or
      *       maliciously issued. A browser might respond to certificate that has not been logged by showing
      *       an error message. The logs are cryptographically secure. </p>
+     * @public
      */
     Options?: CertificateOptions;
 }
 /**
- * @public
  * <p>You are trying to update a resource or configuration that is already being created or
  *       updated. Wait for the previous operation to finish and try again.</p>
+ * @public
  */
 export declare class ConflictException extends __BaseException {
     readonly name: "ConflictException";
@@ -751,20 +751,20 @@ export declare class ConflictException extends __BaseException {
  */
 export interface DeleteCertificateRequest {
     /**
-     * @public
      * <p>String that contains the ARN of the ACM certificate to be deleted. This must be of the
      *       form:</p>
      *          <p>
      *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
      */
     CertificateArn: string | undefined;
 }
 /**
- * @public
  * <p>The certificate is in use by another Amazon Web Services service in the caller's account. Remove the
  *       association and try again.</p>
+ * @public
  */
 export declare class ResourceInUseException extends __BaseException {
     readonly name: "ResourceInUseException";
@@ -779,13 +779,13 @@ export declare class ResourceInUseException extends __BaseException {
  */
 export interface DescribeCertificateRequest {
     /**
-     * @public
      * <p>The Amazon Resource Name (ARN) of the ACM certificate. The ARN must have the following
      *       form:</p>
      *          <p>
      *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
      */
     CertificateArn: string | undefined;
 }
@@ -794,8 +794,8 @@ export interface DescribeCertificateRequest {
  */
 export interface DescribeCertificateResponse {
     /**
-     * @public
      * <p>Metadata about an ACM certificate.</p>
+     * @public
      */
     Certificate?: CertificateDetail;
 }
@@ -804,15 +804,14 @@ export interface DescribeCertificateResponse {
  */
 export interface ExportCertificateRequest {
     /**
-     * @public
      * <p>An Amazon Resource Name (ARN) of the issued certificate. This must be of the form:</p>
      *          <p>
      *             <code>arn:aws:acm:region:account:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
+     * @public
      */
     CertificateArn: string | undefined;
     /**
-     * @public
      * <p>Passphrase to associate with the encrypted exported private key. </p>
      *          <note>
      *             <p>When creating your passphrase, you can use any ASCII character except #, $, or %.</p>
@@ -823,6 +822,7 @@ export interface ExportCertificateRequest {
      *          <p>
      *             <code>openssl rsa -in encrypted_key.pem -out decrypted_key.pem</code>
      *          </p>
+     * @public
      */
     Passphrase: Uint8Array | undefined;
 }
@@ -831,27 +831,27 @@ export interface ExportCertificateRequest {
  */
 export interface ExportCertificateResponse {
     /**
-     * @public
      * <p>The base64 PEM-encoded certificate.</p>
+     * @public
      */
     Certificate?: string;
     /**
-     * @public
      * <p>The base64 PEM-encoded certificate chain. This does not include the certificate that you
      *       are exporting.</p>
+     * @public
      */
     CertificateChain?: string;
     /**
-     * @public
      * <p>The encrypted private key associated with the public key in the certificate. The key is
      *       output in PKCS #8 format and is base64 PEM-encoded. </p>
+     * @public
      */
     PrivateKey?: string;
 }
 /**
- * @public
  * <p>The certificate request is in process and the certificate in your account has not yet been
  *       issued.</p>
+ * @public
  */
 export declare class RequestInProgressException extends __BaseException {
     readonly name: "RequestInProgressException";
@@ -862,16 +862,16 @@ export declare class RequestInProgressException extends __BaseException {
     constructor(opts: __ExceptionOptionType<RequestInProgressException, __BaseException>);
 }
 /**
- * @public
  * <p>Object containing expiration events options associated with an Amazon Web Services account.</p>
+ * @public
  */
 export interface ExpiryEventsConfiguration {
     /**
-     * @public
      * <p>Specifies the number of days prior to certificate expiration when ACM starts generating
      *         <code>EventBridge</code> events. ACM sends one event per day per certificate until the
      *       certificate expires. By default, accounts receive events starting 45 days before certificate
      *       expiration.</p>
+     * @public
      */
     DaysBeforeExpiry?: number;
 }
@@ -880,8 +880,8 @@ export interface ExpiryEventsConfiguration {
  */
 export interface GetAccountConfigurationResponse {
     /**
-     * @public
      * <p>Expiration events configuration options associated with the Amazon Web Services account.</p>
+     * @public
      */
     ExpiryEvents?: ExpiryEventsConfiguration;
 }
@@ -890,12 +890,12 @@ export interface GetAccountConfigurationResponse {
  */
 export interface GetCertificateRequest {
     /**
-     * @public
      * <p>String that contains a certificate ARN in the following format:</p>
      *          <p>
      *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
      */
     CertificateArn: string | undefined;
 }
@@ -904,15 +904,15 @@ export interface GetCertificateRequest {
  */
 export interface GetCertificateResponse {
     /**
-     * @public
      * <p>The ACM-issued certificate corresponding to the ARN specified as input.</p>
+     * @public
      */
     Certificate?: string;
     /**
-     * @public
      * <p>Certificates forming the requested certificate's chain of trust. The chain consists of the
      *       certificate of the issuing CA and the intermediate certificates of any other subordinate CAs.
      *     </p>
+     * @public
      */
     CertificateChain?: string;
 }
@@ -921,31 +921,31 @@ export interface GetCertificateResponse {
  */
 export interface ImportCertificateRequest {
     /**
-     * @public
      * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name
      *         (ARN)</a> of an imported certificate to replace. To import a new certificate, omit this
      *       field. </p>
+     * @public
      */
     CertificateArn?: string;
     /**
-     * @public
      * <p>The certificate to import.</p>
+     * @public
      */
     Certificate: Uint8Array | undefined;
     /**
-     * @public
      * <p>The private key that matches the public key in the certificate.</p>
+     * @public
      */
     PrivateKey: Uint8Array | undefined;
     /**
-     * @public
      * <p>The PEM encoded certificate chain.</p>
+     * @public
      */
     CertificateChain?: Uint8Array;
     /**
-     * @public
      * <p>One or more resource tags to associate with the imported certificate. </p>
      *          <p>Note: You cannot apply tags when reimporting a certificate.</p>
+     * @public
      */
     Tags?: Tag[];
 }
@@ -954,15 +954,15 @@ export interface ImportCertificateRequest {
  */
 export interface ImportCertificateResponse {
     /**
-     * @public
      * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name
      *         (ARN)</a> of the imported certificate.</p>
+     * @public
      */
     CertificateArn?: string;
 }
 /**
- * @public
  * <p>An ACM quota has been exceeded.</p>
+ * @public
  */
 export declare class LimitExceededException extends __BaseException {
     readonly name: "LimitExceededException";
@@ -973,8 +973,8 @@ export declare class LimitExceededException extends __BaseException {
     constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
 }
 /**
- * @public
  * <p>One or more of of request parameters specified is not valid.</p>
+ * @public
  */
 export declare class InvalidArgsException extends __BaseException {
     readonly name: "InvalidArgsException";
@@ -985,29 +985,29 @@ export declare class InvalidArgsException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InvalidArgsException, __BaseException>);
 }
 /**
- * @public
  * <p>This structure can be used in the <a>ListCertificates</a> action to filter the
  *       output of the certificate list. </p>
+ * @public
  */
 export interface Filters {
     /**
-     * @public
      * <p>Specify one or more <a>ExtendedKeyUsage</a> extension values.</p>
+     * @public
      */
     extendedKeyUsage?: ExtendedKeyUsageName[];
     /**
-     * @public
      * <p>Specify one or more <a>KeyUsage</a> extension values.</p>
+     * @public
      */
     keyUsage?: KeyUsageName[];
     /**
-     * @public
      * <p>Specify one or more algorithms that can be used to generate key pairs.</p>
      *          <p>Default filtering returns only <code>RSA_1024</code> and <code>RSA_2048</code>
      *       certificates that have at least one domain. To return other certificate types, provide the
      *       desired type signatures in a comma-separated list. For example, <code>"keyTypes":
      *         ["RSA_2048","RSA_4096"]</code> returns both <code>RSA_2048</code> and <code>RSA_4096</code>
      *       certificates.</p>
+     * @public
      */
     keyTypes?: KeyAlgorithm[];
 }
@@ -1039,67 +1039,66 @@ export type SortOrder = (typeof SortOrder)[keyof typeof SortOrder];
  */
 export interface ListCertificatesRequest {
     /**
-     * @public
      * <p>Filter the certificate list by status value.</p>
+     * @public
      */
     CertificateStatuses?: CertificateStatus[];
     /**
-     * @public
      * <p>Filter the certificate list. For more information, see the <a>Filters</a>
      *       structure.</p>
+     * @public
      */
     Includes?: Filters;
     /**
-     * @public
      * <p>Use this parameter only when paginating results and only in a subsequent request after you
      *       receive a response with truncated results. Set it to the value of <code>NextToken</code> from
      *       the response you just received.</p>
+     * @public
      */
     NextToken?: string;
     /**
-     * @public
      * <p>Use this parameter when paginating results to specify the maximum number of items to
      *       return in the response. If additional items exist beyond the number you specify, the
      *         <code>NextToken</code> element is sent in the response. Use this <code>NextToken</code>
      *       value in a subsequent request to retrieve additional items.</p>
+     * @public
      */
     MaxItems?: number;
     /**
-     * @public
      * <p>Specifies the field to sort results by. If you specify <code>SortBy</code>, you must also
      *       specify <code>SortOrder</code>.</p>
+     * @public
      */
     SortBy?: SortBy;
     /**
-     * @public
      * <p>Specifies the order of sorted results. If you specify <code>SortOrder</code>, you must
      *       also specify <code>SortBy</code>.</p>
+     * @public
      */
     SortOrder?: SortOrder;
 }
 /**
- * @public
  * <p>This structure is returned in the response object of <a>ListCertificates</a>
  *       action. </p>
+ * @public
  */
 export interface CertificateSummary {
     /**
-     * @public
      * <p>Amazon Resource Name (ARN) of the certificate. This is of the form:</p>
      *          <p>
      *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
      */
     CertificateArn?: string;
     /**
-     * @public
      * <p>Fully qualified domain name (FQDN), such as www.example.com or example.com, for the
      *       certificate.</p>
+     * @public
      */
     DomainName?: string;
     /**
-     * @public
      * <p>One or more domain names (subject alternative names)
      *       included in the certificate. This
      *       list contains the domain names that are bound to the public key that is contained in the
@@ -1108,105 +1107,106 @@ export interface CertificateSummary {
      *          <p>When called by <a href="https://docs.aws.amazon.com/acm/latestAPIReference/API_ListCertificates.html">ListCertificates</a>, this parameter will only return the first 100 subject alternative
      *       names included in the certificate. To display the full list of subject alternative names, use
      *         <a href="https://docs.aws.amazon.com/acm/latestAPIReference/API_DescribeCertificate.html">DescribeCertificate</a>.</p>
+     * @public
      */
     SubjectAlternativeNameSummaries?: string[];
     /**
-     * @public
      * <p>When called by <a href="https://docs.aws.amazon.com/acm/latestAPIReference/API_ListCertificates.html">ListCertificates</a>, indicates whether the full list of subject alternative names has
      *       been included in the response. If false, the response includes all of the subject alternative
      *       names included in the certificate. If true, the response only includes the first 100 subject
      *       alternative names included in the certificate. To display the full list of subject alternative
      *       names, use <a href="https://docs.aws.amazon.com/acm/latestAPIReference/API_DescribeCertificate.html">DescribeCertificate</a>.</p>
+     * @public
      */
     HasAdditionalSubjectAlternativeNames?: boolean;
     /**
-     * @public
      * <p>The status of the certificate.</p>
      *          <p>A certificate enters status PENDING_VALIDATION upon being requested, unless it fails for
      *       any of the reasons given in the troubleshooting topic <a href="https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html">Certificate request fails</a>. ACM makes
      *       repeated attempts to validate a certificate for 72 hours and then times out. If a certificate
      *       shows status FAILED or VALIDATION_TIMED_OUT, delete the request, correct the issue with <a href="https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html">DNS validation</a> or <a href="https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html">Email validation</a>, and
      *       try again. If validation succeeds, the certificate enters status ISSUED. </p>
+     * @public
      */
     Status?: CertificateStatus;
     /**
-     * @public
      * <p>The source of the certificate. For certificates provided by ACM, this value is
      *         <code>AMAZON_ISSUED</code>. For certificates that you imported with <a>ImportCertificate</a>, this value is <code>IMPORTED</code>. ACM does not provide
      *         <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for
      *       imported certificates. For more information about the differences between certificates that
      *       you import and those that ACM provides, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html">Importing Certificates</a> in the
      *         <i>Certificate Manager User Guide</i>. </p>
+     * @public
      */
     Type?: CertificateType;
     /**
-     * @public
      * <p>The algorithm that was used to generate the public-private key pair.</p>
+     * @public
      */
     KeyAlgorithm?: KeyAlgorithm;
     /**
-     * @public
      * <p>A list of Key Usage X.509 v3 extension objects. Each object is a string value that
      *       identifies the purpose of the public key contained in the certificate. Possible extension
      *       values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.</p>
+     * @public
      */
     KeyUsages?: KeyUsageName[];
     /**
-     * @public
      * <p>Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a
      *       purpose for which the certificate public key can be used and consists of a name and an object
      *       identifier (OID). </p>
+     * @public
      */
     ExtendedKeyUsages?: ExtendedKeyUsageName[];
     /**
-     * @public
      * <p>Indicates whether the certificate is currently in use by any Amazon Web Services resources.</p>
+     * @public
      */
     InUse?: boolean;
     /**
-     * @public
      * <p>Indicates whether the certificate has been exported. This value exists only when the
      *       certificate type is <code>PRIVATE</code>.</p>
+     * @public
      */
     Exported?: boolean;
     /**
-     * @public
      * <p>Specifies whether the certificate is eligible for renewal. At this time, only exported
      *       private certificates can be renewed with the <a>RenewCertificate</a>
      *       command.</p>
+     * @public
      */
     RenewalEligibility?: RenewalEligibility;
     /**
-     * @public
      * <p>The time before which the certificate is not valid.</p>
+     * @public
      */
     NotBefore?: Date;
     /**
-     * @public
      * <p>The time after which the certificate is not valid.</p>
+     * @public
      */
     NotAfter?: Date;
     /**
-     * @public
      * <p>The time at which the certificate was requested.</p>
+     * @public
      */
     CreatedAt?: Date;
     /**
-     * @public
      * <p>The time at which the certificate was issued. This value exists only when the certificate
      *       type is <code>AMAZON_ISSUED</code>. </p>
+     * @public
      */
     IssuedAt?: Date;
     /**
-     * @public
      * <p>The date and time when the certificate was imported. This value exists only when the
      *       certificate type is <code>IMPORTED</code>. </p>
+     * @public
      */
     ImportedAt?: Date;
     /**
-     * @public
      * <p>The time at which the certificate was revoked. This value exists only when the certificate
      *       status is <code>REVOKED</code>. </p>
+     * @public
      */
     RevokedAt?: Date;
 }
@@ -1215,20 +1215,20 @@ export interface CertificateSummary {
  */
 export interface ListCertificatesResponse {
     /**
-     * @public
      * <p>When the list is truncated, this value is present and contains the value to use for the
      *         <code>NextToken</code> parameter in a subsequent pagination request.</p>
+     * @public
      */
     NextToken?: string;
     /**
-     * @public
      * <p>A list of ACM certificates.</p>
+     * @public
      */
     CertificateSummaryList?: CertificateSummary[];
 }
 /**
- * @public
  * <p>The supplied input failed to satisfy constraints of an Amazon Web Services service.</p>
+ * @public
  */
 export declare class ValidationException extends __BaseException {
     readonly name: "ValidationException";
@@ -1243,13 +1243,13 @@ export declare class ValidationException extends __BaseException {
  */
 export interface ListTagsForCertificateRequest {
     /**
-     * @public
      * <p>String that contains the ARN of the ACM certificate for which you want to list the tags.
      *       This must have the following form:</p>
      *          <p>
      *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
      */
     CertificateArn: string | undefined;
 }
@@ -1258,8 +1258,8 @@ export interface ListTagsForCertificateRequest {
  */
 export interface ListTagsForCertificateResponse {
     /**
-     * @public
      * <p>The key-value pairs that define the applied tags.</p>
+     * @public
      */
     Tags?: Tag[];
 }
@@ -1268,17 +1268,17 @@ export interface ListTagsForCertificateResponse {
  */
 export interface PutAccountConfigurationRequest {
     /**
-     * @public
      * <p>Specifies expiration events associated with an account.</p>
+     * @public
      */
     ExpiryEvents?: ExpiryEventsConfiguration;
     /**
-     * @public
      * <p>Customer-chosen string used to distinguish between calls to
      *         <code>PutAccountConfiguration</code>. Idempotency tokens time out after one hour. If you
      *       call <code>PutAccountConfiguration</code> multiple times with the same unexpired idempotency
      *       token, ACM treats it as the same request and returns the original result. If you change the
      *       idempotency token for each call, ACM treats each call as a new request.</p>
+     * @public
      */
     IdempotencyToken: string | undefined;
 }
@@ -1287,18 +1287,18 @@ export interface PutAccountConfigurationRequest {
  */
 export interface RemoveTagsFromCertificateRequest {
     /**
-     * @public
      * <p>String that contains the ARN of the ACM Certificate with one or more tags that you want
      *       to remove. This must be of the form:</p>
      *          <p>
      *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
      */
     CertificateArn: string | undefined;
     /**
-     * @public
      * <p>The key-value pair that defines the tag to remove.</p>
+     * @public
      */
     Tags: Tag[] | undefined;
 }
@@ -1307,20 +1307,20 @@ export interface RemoveTagsFromCertificateRequest {
  */
 export interface RenewCertificateRequest {
     /**
-     * @public
      * <p>String that contains the ARN of the ACM certificate to be renewed. This must be of the
      *       form:</p>
      *          <p>
      *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     * @public
      */
     CertificateArn: string | undefined;
 }
 /**
- * @public
  * <p>One or more values in the <a>DomainValidationOption</a> structure is
  *       incorrect.</p>
+ * @public
  */
 export declare class InvalidDomainValidationOptionsException extends __BaseException {
     readonly name: "InvalidDomainValidationOptionsException";
@@ -1331,18 +1331,17 @@ export declare class InvalidDomainValidationOptionsException extends __BaseExcep
     constructor(opts: __ExceptionOptionType<InvalidDomainValidationOptionsException, __BaseException>);
 }
 /**
- * @public
  * <p>Contains information about the domain names that you want ACM to use to send you emails
  *       that enable you to validate domain ownership.</p>
+ * @public
  */
 export interface DomainValidationOption {
     /**
-     * @public
      * <p>A fully qualified domain name (FQDN) in the certificate request.</p>
+     * @public
      */
     DomainName: string | undefined;
     /**
-     * @public
      * <p>The domain name that you want ACM to use to send you validation emails. This domain name
      *       is the suffix of the email addresses that you want ACM to use. This must be the same as the
      *         <code>DomainName</code> value or a superdomain of the <code>DomainName</code> value. For
@@ -1366,6 +1365,7 @@ export interface DomainValidationOption {
      *                <p>webmaster@example.com</p>
      *             </li>
      *          </ul>
+     * @public
      */
     ValidationDomain: string | undefined;
 }
@@ -1374,7 +1374,6 @@ export interface DomainValidationOption {
  */
 export interface RequestCertificateRequest {
     /**
-     * @public
      * <p>Fully qualified domain name (FQDN), such as www.example.com, that you want to secure with
      *       an ACM certificate. Use an asterisk (*) to create a wildcard certificate that protects
      *       several sites in the same domain. For example, *.example.com protects www.example.com,
@@ -1383,17 +1382,17 @@ export interface RequestCertificateRequest {
      *         5280</a>, the length of the domain name (technically, the Common Name) that you provide
      *       cannot exceed 64 octets (characters), including periods. To add a longer domain name, specify it in the Subject Alternative
      *       Name field, which supports names up to 253 octets in length. </p>
+     * @public
      */
     DomainName: string | undefined;
     /**
-     * @public
      * <p>The method you want to use if you are requesting a public certificate to validate that you
      *       own or control domain. You can <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html">validate with DNS</a> or <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html">validate with
      *         email</a>. We recommend that you use DNS validation. </p>
+     * @public
      */
     ValidationMethod?: ValidationMethod;
     /**
-     * @public
      * <p>Additional FQDNs to be included in the Subject Alternative Name extension of the ACM
      *       certificate. For example, add the name www.example.net to a certificate for which the
      *         <code>DomainName</code> field is www.example.com if users can reach your site by using
@@ -1421,34 +1420,34 @@ export interface RequestCertificateRequest {
      *           total length of the DNS name (63+1+63+1+63+1+62) exceeds 253 octets.</p>
      *             </li>
      *          </ul>
+     * @public
      */
     SubjectAlternativeNames?: string[];
     /**
-     * @public
      * <p>Customer chosen string that can be used to distinguish between calls to
      *         <code>RequestCertificate</code>. Idempotency tokens time out after one hour. Therefore, if
      *       you call <code>RequestCertificate</code> multiple times with the same idempotency token within
      *       one hour, ACM recognizes that you are requesting only one certificate and will issue only
      *       one. If you change the idempotency token for each call, ACM recognizes that you are
      *       requesting multiple certificates.</p>
+     * @public
      */
     IdempotencyToken?: string;
     /**
-     * @public
      * <p>The domain name that you want ACM to use to send you emails so that you can validate
      *       domain ownership.</p>
+     * @public
      */
     DomainValidationOptions?: DomainValidationOption[];
     /**
-     * @public
      * <p>Currently, you can use this parameter to specify whether to add the certificate to a
      *       certificate transparency log. Certificate transparency makes it possible to detect SSL/TLS
      *       certificates that have been mistakenly or maliciously issued. Certificates that have not been
      *       logged typically produce an error message in a browser. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency">Opting Out of Certificate Transparency Logging</a>.</p>
+     * @public
      */
     Options?: CertificateOptions;
     /**
-     * @public
      * <p>The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used
      *       to issue the certificate. If you do not provide an ARN and you are trying to request a private
      *       certificate, ACM will attempt to issue a public certificate. For more information about
@@ -1456,15 +1455,15 @@ export interface RequestCertificateRequest {
      *          <p>
      *             <code>arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012</code>
      *          </p>
+     * @public
      */
     CertificateAuthorityArn?: string;
     /**
-     * @public
      * <p>One or more resource tags to associate with the certificate.</p>
+     * @public
      */
     Tags?: Tag[];
     /**
-     * @public
      * <p>Specifies the algorithm of the public and private key pair that your certificate uses to
      *       encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital
      *       Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but
@@ -1473,6 +1472,7 @@ export interface RequestCertificateRequest {
      *       others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken.
      *       Check the requirements for the AWS service where you plan to deploy your certificate.</p>
      *          <p>Default: RSA_2048</p>
+     * @public
      */
     KeyAlgorithm?: KeyAlgorithm;
 }
@@ -1481,17 +1481,17 @@ export interface RequestCertificateRequest {
  */
 export interface RequestCertificateResponse {
     /**
-     * @public
      * <p>String that contains the ARN of the issued certificate. This must be of the form:</p>
      *          <p>
      *             <code>arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
+     * @public
      */
     CertificateArn?: string;
 }
 /**
- * @public
  * <p>Processing has reached an invalid state.</p>
+ * @public
  */
 export declare class InvalidStateException extends __BaseException {
     readonly name: "InvalidStateException";
@@ -1506,7 +1506,6 @@ export declare class InvalidStateException extends __BaseException {
  */
 export interface ResendValidationEmailRequest {
     /**
-     * @public
      * <p>String that contains the ARN of the requested certificate. The certificate ARN is
      *       generated and returned by the <a>RequestCertificate</a> action as soon as the
      *       request is made. By default, using this parameter causes email to be sent to all top-level
@@ -1514,16 +1513,16 @@ export interface ResendValidationEmailRequest {
      *          <p>
      *             <code>arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
      *          </p>
+     * @public
      */
     CertificateArn: string | undefined;
     /**
-     * @public
      * <p>The fully qualified domain name (FQDN) of the certificate that needs to be
      *       validated.</p>
+     * @public
      */
     Domain: string | undefined;
     /**
-     * @public
      * <p>The base validation domain that will act as the suffix of the email addresses that are
      *       used to send the emails. This must be the same as the <code>Domain</code> value or a
      *       superdomain of the <code>Domain</code> value. For example, if you requested a certificate for
@@ -1547,6 +1546,7 @@ export interface ResendValidationEmailRequest {
      *                <p>webmaster@subdomain.example.com</p>
      *             </li>
      *          </ul>
+     * @public
      */
     ValidationDomain: string | undefined;
 }
@@ -1555,20 +1555,20 @@ export interface ResendValidationEmailRequest {
  */
 export interface UpdateCertificateOptionsRequest {
     /**
-     * @public
      * <p>ARN of the requested certificate to update. This must be of the form:</p>
      *          <p>
      *             <code>arn:aws:acm:us-east-1:<i>account</i>:certificate/<i>12345678-1234-1234-1234-123456789012</i>
      *             </code>
      *          </p>
+     * @public
      */
     CertificateArn: string | undefined;
     /**
-     * @public
      * <p>Use to update the options for your certificate. Currently, you can specify whether to add
      *       your certificate to a transparency log. Certificate transparency makes it possible to detect
      *       SSL/TLS certificates that have been mistakenly or maliciously issued. Certificates that have
      *       not been logged typically produce an error message in a browser. </p>
+     * @public
      */
     Options: CertificateOptions | undefined;
 }