@aws-sdk/client-acm 3.830.0 → 3.835.0

package/dist-types/commands/PutAccountConfigurationCommand.d.ts

@@ -27,12 +27,7 @@ declare const PutAccountConfigurationCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Adds or modifies account-level configurations in ACM. </p>
- *          <p>The supported configuration option is <code>DaysBeforeExpiry</code>. This option specifies
- *       the number of days prior to certificate expiration when ACM starts generating
- *         <code>EventBridge</code> events. ACM sends one event per day per certificate until the
- *       certificate expires. By default, accounts receive events starting 45 days before certificate
- *       expiration.</p>
+ * <p>Adds or modifies account-level configurations in ACM. </p> <p>The supported configuration option is <code>DaysBeforeExpiry</code>. This option specifies the number of days prior to certificate expiration when ACM starts generating <code>EventBridge</code> events. ACM sends one event per day per certificate until the certificate expires. By default, accounts receive events starting 45 days before certificate expiration.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -61,8 +56,7 @@ declare const PutAccountConfigurationCommand_base: {
  *  <p>You do not have access required to perform this action.</p>
  *
  * @throws {@link ConflictException} (client fault)
- *  <p>You are trying to update a resource or configuration that is already being created or
- *       updated. Wait for the previous operation to finish and try again.</p>
+ *  <p>You are trying to update a resource or configuration that is already being created or updated. Wait for the previous operation to finish and try again.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied because it exceeded a quota.</p>

package/dist-types/commands/RemoveTagsFromCertificateCommand.d.ts

@@ -27,12 +27,7 @@ declare const RemoveTagsFromCertificateCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Remove one or more tags from an ACM certificate. A tag consists of a key-value pair. If
- *       you do not specify the value portion of the tag when calling this function, the tag will be
- *       removed regardless of value. If you specify a value, the tag is removed only if it is
- *       associated with the specified value. </p>
- *          <p>To add tags to a certificate, use the <a>AddTagsToCertificate</a> action. To
- *       view all of the tags that have been applied to a specific ACM certificate, use the <a>ListTagsForCertificate</a> action. </p>
+ * <p>Remove one or more tags from an ACM certificate. A tag consists of a key-value pair. If you do not specify the value portion of the tag when calling this function, the tag will be removed regardless of value. If you specify a value, the tag is removed only if it is associated with the specified value. </p> <p>To add tags to a certificate, use the <a>AddTagsToCertificate</a> action. To view all of the tags that have been applied to a specific ACM certificate, use the <a>ListTagsForCertificate</a> action. </p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -67,12 +62,10 @@ declare const RemoveTagsFromCertificateCommand_base: {
  *  <p>An input parameter was invalid.</p>
  *
  * @throws {@link InvalidTagException} (client fault)
- *  <p>One or both of the values that make up the key-value pair is not valid. For example, you
- *       cannot specify a tag value that begins with <code>aws:</code>.</p>
+ *  <p>One or both of the values that make up the key-value pair is not valid. For example, you cannot specify a tag value that begins with <code>aws:</code>.</p>
  *
  * @throws {@link ResourceNotFoundException} (client fault)
- *  <p>The specified certificate cannot be found in the caller's account or the caller's account
- *       cannot be found.</p>
+ *  <p>The specified certificate cannot be found in the caller's account or the caller's account cannot be found.</p>
  *
  * @throws {@link TagPolicyException} (client fault)
  *  <p>A specified tag did not comply with an existing tag policy and was rejected.</p>

package/dist-types/commands/RenewCertificateCommand.d.ts

@@ -27,11 +27,7 @@ declare const RenewCertificateCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Renews an eligible ACM certificate. At this time, only exported private certificates can
- *       be renewed with this operation. In order to renew your Amazon Web Services Private CA certificates with ACM, you
- *       must first <a href="https://docs.aws.amazon.com/privateca/latest/userguide/PcaPermissions.html">grant the ACM
- *         service principal permission to do so</a>. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/manual-renewal.html">Testing Managed Renewal</a>
- *       in the ACM User Guide.</p>
+ * <p>Renews an <a href="https://docs.aws.amazon.com/acm/latest/userguide/managed-renewal.html">eligible ACM certificate</a>. In order to renew your Amazon Web Services Private CA certificates with ACM, you must first <a href="https://docs.aws.amazon.com/privateca/latest/userguide/PcaPermissions.html">grant the ACM service principal permission to do so</a>. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/manual-renewal.html">Testing Managed Renewal</a> in the ACM User Guide.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -57,12 +53,10 @@ declare const RenewCertificateCommand_base: {
  *  <p>The requested Amazon Resource Name (ARN) does not refer to an existing resource.</p>
  *
  * @throws {@link RequestInProgressException} (client fault)
- *  <p>The certificate request is in process and the certificate in your account has not yet been
- *       issued.</p>
+ *  <p>The certificate request is in process and the certificate in your account has not yet been issued.</p>
  *
  * @throws {@link ResourceNotFoundException} (client fault)
- *  <p>The specified certificate cannot be found in the caller's account or the caller's account
- *       cannot be found.</p>
+ *  <p>The specified certificate cannot be found in the caller's account or the caller's account cannot be found.</p>
  *
  * @throws {@link ACMServiceException}
  * <p>Base exception class for all service exceptions from ACM service.</p>

package/dist-types/commands/RequestCertificateCommand.d.ts

@@ -27,22 +27,7 @@ declare const RequestCertificateCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Requests an ACM certificate for use with other Amazon Web Services services. To request an ACM
- *       certificate, you must specify a fully qualified domain name (FQDN) in the
- *         <code>DomainName</code> parameter. You can also specify additional FQDNs in the
- *         <code>SubjectAlternativeNames</code> parameter. </p>
- *          <p>If you are requesting a private certificate, domain validation is not required. If you are
- *       requesting a public certificate, each domain name that you specify must be validated to verify
- *       that you own or control the domain. You can use <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html">DNS validation</a> or <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html">email validation</a>.
- *       We recommend that you use DNS validation. ACM issues public certificates after receiving
- *       approval from the domain owner. </p>
- *          <note>
- *             <p>ACM behavior differs from the <a href="https://datatracker.ietf.org/doc/html/rfc6125#appendix-B.2">RFC 6125</a>
- *         specification of the certificate validation process. ACM first checks for a Subject
- *         Alternative Name, and, if it finds one, ignores the common name (CN).</p>
- *          </note>
- *          <p>After successful completion of the <code>RequestCertificate</code> action, there is a
- *       delay of several seconds before you can retrieve information about the new certificate.</p>
+ * <p>Requests an ACM certificate for use with other Amazon Web Services services. To request an ACM certificate, you must specify a fully qualified domain name (FQDN) in the <code>DomainName</code> parameter. You can also specify additional FQDNs in the <code>SubjectAlternativeNames</code> parameter. </p> <p>If you are requesting a private certificate, domain validation is not required. If you are requesting a public certificate, each domain name that you specify must be validated to verify that you own or control the domain. You can use <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html">DNS validation</a> or <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html">email validation</a>. We recommend that you use DNS validation.</p> <note> <p>ACM behavior differs from the <a href="https://datatracker.ietf.org/doc/html/rfc6125#appendix-B.2">RFC 6125</a> specification of the certificate validation process. ACM first checks for a Subject Alternative Name, and, if it finds one, ignores the common name (CN).</p> </note> <p>After successful completion of the <code>RequestCertificate</code> action, there is a delay of several seconds before you can retrieve information about the new certificate.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -64,6 +49,7 @@ declare const RequestCertificateCommand_base: {
  *   ],
  *   Options: { // CertificateOptions
  *     CertificateTransparencyLoggingPreference: "ENABLED" || "DISABLED",
+ *     Export: "ENABLED" || "DISABLED",
  *   },
  *   CertificateAuthorityArn: "STRING_VALUE",
  *   Tags: [ // TagList
@@ -93,15 +79,13 @@ declare const RequestCertificateCommand_base: {
  *  <p>The requested Amazon Resource Name (ARN) does not refer to an existing resource.</p>
  *
  * @throws {@link InvalidDomainValidationOptionsException} (client fault)
- *  <p>One or more values in the <a>DomainValidationOption</a> structure is
- *       incorrect.</p>
+ *  <p>One or more values in the <a>DomainValidationOption</a> structure is incorrect.</p>
  *
  * @throws {@link InvalidParameterException} (client fault)
  *  <p>An input parameter was invalid.</p>
  *
  * @throws {@link InvalidTagException} (client fault)
- *  <p>One or both of the values that make up the key-value pair is not valid. For example, you
- *       cannot specify a tag value that begins with <code>aws:</code>.</p>
+ *  <p>One or both of the values that make up the key-value pair is not valid. For example, you cannot specify a tag value that begins with <code>aws:</code>.</p>
  *
  * @throws {@link LimitExceededException} (client fault)
  *  <p>An ACM quota has been exceeded.</p>

package/dist-types/commands/ResendValidationEmailCommand.d.ts

@@ -27,15 +27,7 @@ declare const ResendValidationEmailCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Resends the email that requests domain ownership validation. The domain owner or an
- *       authorized representative must approve the ACM certificate before it can be issued. The
- *       certificate can be approved by clicking a link in the mail to navigate to the Amazon
- *       certificate approval website and then clicking <b>I Approve</b>.
- *       However, the validation email can be blocked by spam filters. Therefore, if you do not receive
- *       the original mail, you can request that the mail be resent within 72 hours of requesting the
- *       ACM certificate. If more than 72 hours have elapsed since your original request or since
- *       your last attempt to resend validation mail, you must request a new certificate. For more
- *       information about setting up your contact email addresses, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/setup-email.html">Configure Email for your Domain</a>. </p>
+ * <p>Resends the email that requests domain ownership validation. The domain owner or an authorized representative must approve the ACM certificate before it can be issued. The certificate can be approved by clicking a link in the mail to navigate to the Amazon certificate approval website and then clicking <b>I Approve</b>. However, the validation email can be blocked by spam filters. Therefore, if you do not receive the original mail, you can request that the mail be resent within 72 hours of requesting the ACM certificate. If more than 72 hours have elapsed since your original request or since your last attempt to resend validation mail, you must request a new certificate. For more information about setting up your contact email addresses, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/setup-email.html">Configure Email for your Domain</a>. </p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -63,15 +55,13 @@ declare const ResendValidationEmailCommand_base: {
  *  <p>The requested Amazon Resource Name (ARN) does not refer to an existing resource.</p>
  *
  * @throws {@link InvalidDomainValidationOptionsException} (client fault)
- *  <p>One or more values in the <a>DomainValidationOption</a> structure is
- *       incorrect.</p>
+ *  <p>One or more values in the <a>DomainValidationOption</a> structure is incorrect.</p>
  *
  * @throws {@link InvalidStateException} (client fault)
  *  <p>Processing has reached an invalid state.</p>
  *
  * @throws {@link ResourceNotFoundException} (client fault)
- *  <p>The specified certificate cannot be found in the caller's account or the caller's account
- *       cannot be found.</p>
+ *  <p>The specified certificate cannot be found in the caller's account or the caller's account cannot be found.</p>
  *
  * @throws {@link ACMServiceException}
  * <p>Base exception class for all service exceptions from ACM service.</p>

package/dist-types/commands/RevokeCertificateCommand.d.ts

@@ -0,0 +1,91 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import { ACMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ACMClient";
+import { RevokeCertificateRequest, RevokeCertificateResponse } from "../models/models_0";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link RevokeCertificateCommand}.
+ */
+export interface RevokeCertificateCommandInput extends RevokeCertificateRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link RevokeCertificateCommand}.
+ */
+export interface RevokeCertificateCommandOutput extends RevokeCertificateResponse, __MetadataBearer {
+}
+declare const RevokeCertificateCommand_base: {
+    new (input: RevokeCertificateCommandInput): import("@smithy/smithy-client").CommandImpl<RevokeCertificateCommandInput, RevokeCertificateCommandOutput, ACMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: RevokeCertificateCommandInput): import("@smithy/smithy-client").CommandImpl<RevokeCertificateCommandInput, RevokeCertificateCommandOutput, ACMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>Revokes a public ACM certificate. You can only revoke certificates that have been previously exported.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ACMClient, RevokeCertificateCommand } from "@aws-sdk/client-acm"; // ES Modules import
+ * // const { ACMClient, RevokeCertificateCommand } = require("@aws-sdk/client-acm"); // CommonJS import
+ * const client = new ACMClient(config);
+ * const input = { // RevokeCertificateRequest
+ *   CertificateArn: "STRING_VALUE", // required
+ *   RevocationReason: "UNSPECIFIED" || "KEY_COMPROMISE" || "CA_COMPROMISE" || "AFFILIATION_CHANGED" || "SUPERCEDED" || "SUPERSEDED" || "CESSATION_OF_OPERATION" || "CERTIFICATE_HOLD" || "REMOVE_FROM_CRL" || "PRIVILEGE_WITHDRAWN" || "A_A_COMPROMISE", // required
+ * };
+ * const command = new RevokeCertificateCommand(input);
+ * const response = await client.send(command);
+ * // { // RevokeCertificateResponse
+ * //   CertificateArn: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param RevokeCertificateCommandInput - {@link RevokeCertificateCommandInput}
+ * @returns {@link RevokeCertificateCommandOutput}
+ * @see {@link RevokeCertificateCommandInput} for command's `input` shape.
+ * @see {@link RevokeCertificateCommandOutput} for command's `response` shape.
+ * @see {@link ACMClientResolvedConfig | config} for ACMClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have access required to perform this action.</p>
+ *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>You are trying to update a resource or configuration that is already being created or updated. Wait for the previous operation to finish and try again.</p>
+ *
+ * @throws {@link InvalidArnException} (client fault)
+ *  <p>The requested Amazon Resource Name (ARN) does not refer to an existing resource.</p>
+ *
+ * @throws {@link ResourceInUseException} (client fault)
+ *  <p>The certificate is in use by another Amazon Web Services service in the caller's account. Remove the association and try again.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The specified certificate cannot be found in the caller's account or the caller's account cannot be found.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied because it exceeded a quota.</p>
+ *
+ * @throws {@link ACMServiceException}
+ * <p>Base exception class for all service exceptions from ACM service.</p>
+ *
+ *
+ * @public
+ */
+export declare class RevokeCertificateCommand extends RevokeCertificateCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: RevokeCertificateRequest;
+            output: RevokeCertificateResponse;
+        };
+        sdk: {
+            input: RevokeCertificateCommandInput;
+            output: RevokeCertificateCommandOutput;
+        };
+    };
+}

package/dist-types/commands/UpdateCertificateOptionsCommand.d.ts

@@ -27,10 +27,7 @@ declare const UpdateCertificateOptionsCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Updates a certificate. Currently, you can use this function to specify whether to opt in
- *       to or out of recording your certificate in a certificate transparency log. For more
- *       information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency"> Opting Out of
- *         Certificate Transparency Logging</a>. </p>
+ * <p>Updates a certificate. You can use this function to specify whether to opt in to or out of recording your certificate in a certificate transparency log and exporting. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency"> Opting Out of Certificate Transparency Logging</a> and <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html">Certificate Manager Exportable Managed Certificates</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -41,6 +38,7 @@ declare const UpdateCertificateOptionsCommand_base: {
  *   CertificateArn: "STRING_VALUE", // required
  *   Options: { // CertificateOptions
  *     CertificateTransparencyLoggingPreference: "ENABLED" || "DISABLED",
+ *     Export: "ENABLED" || "DISABLED",
  *   },
  * };
  * const command = new UpdateCertificateOptionsCommand(input);
@@ -65,8 +63,7 @@ declare const UpdateCertificateOptionsCommand_base: {
  *  <p>An ACM quota has been exceeded.</p>
  *
  * @throws {@link ResourceNotFoundException} (client fault)
- *  <p>The specified certificate cannot be found in the caller's account or the caller's account
- *       cannot be found.</p>
+ *  <p>The specified certificate cannot be found in the caller's account or the caller's account cannot be found.</p>
  *
  * @throws {@link ACMServiceException}
  * <p>Base exception class for all service exceptions from ACM service.</p>

package/dist-types/commands/index.d.ts

@@ -12,4 +12,5 @@ export * from "./RemoveTagsFromCertificateCommand";
 export * from "./RenewCertificateCommand";
 export * from "./RequestCertificateCommand";
 export * from "./ResendValidationEmailCommand";
+export * from "./RevokeCertificateCommand";
 export * from "./UpdateCertificateOptionsCommand";

package/dist-types/endpoint/EndpointParameters.d.ts

@@ -8,7 +8,7 @@ export interface ClientInputEndpointParameters {
     useFipsEndpoint?: boolean | undefined | Provider<boolean | undefined>;
     endpoint?: string | Provider<string> | Endpoint | Provider<Endpoint> | EndpointV2 | Provider<EndpointV2>;
 }
-export type ClientResolvedEndpointParameters = ClientInputEndpointParameters & {
+export type ClientResolvedEndpointParameters = Omit<ClientInputEndpointParameters, "endpoint"> & {
     defaultSigningName: string;
 };
 export declare const resolveClientEndpointParameters: <T>(options: T & ClientInputEndpointParameters) => T & ClientResolvedEndpointParameters;

package/dist-types/index.d.ts

@@ -1,7 +1,5 @@
 /**
- * <fullname>Certificate Manager</fullname>
- *          <p>You can use Certificate Manager (ACM) to manage SSL/TLS certificates for your Amazon Web Services-based websites
- *       and applications. For more information about using ACM, see the <a href="https://docs.aws.amazon.com/acm/latest/userguide/">Certificate Manager User Guide</a>.</p>
+ * <fullname>Certificate Manager</fullname> <p>You can use Certificate Manager (ACM) to manage SSL/TLS certificates for your Amazon Web Services-based websites and applications. For more information about using ACM, see the <a href="https://docs.aws.amazon.com/acm/latest/userguide/">Certificate Manager User Guide</a>.</p>
  *
  * @packageDocumentation
  */