@aws-sdk/client-cloudfront 3.936.0 → 3.939.0

package/dist-types/models/models_0.d.ts

@@ -1,4 +1,4 @@
-import { CachePolicyCookieBehavior, CachePolicyHeaderBehavior, CachePolicyQueryStringBehavior, CachePolicyType, CertificateSource, CertificateTransparencyLoggingPreference, ConnectionMode, ContinuousDeploymentPolicyType, CustomizationActionType, DomainStatus, EventType, Format, FrameOptionsList, FunctionRuntime, FunctionStage, GeoRestrictionType, HttpVersion, ICPRecordalStatus, ImportSourceType, IpAddressType, ItemSelection, ManagedCertificateStatus, Method, MinimumProtocolVersion, OriginAccessControlOriginTypes, OriginAccessControlSigningBehaviors, OriginAccessControlSigningProtocols, OriginGroupSelectionCriteria, OriginProtocolPolicy, OriginRequestPolicyCookieBehavior, OriginRequestPolicyHeaderBehavior, OriginRequestPolicyQueryStringBehavior, PriceClass, RealtimeMetricsSubscriptionStatus, ReferrerPolicyList, ResponseHeadersPolicyAccessControlAllowMethodsValues, SslProtocol, SSLSupportMethod, ValidationTokenHost, ViewerProtocolPolicy } from "./enums";
+import { CachePolicyCookieBehavior, CachePolicyHeaderBehavior, CachePolicyQueryStringBehavior, CachePolicyType, CertificateSource, CertificateTransparencyLoggingPreference, ConnectionMode, ContinuousDeploymentPolicyType, CustomizationActionType, DomainStatus, EventType, Format, FrameOptionsList, FunctionRuntime, FunctionStage, GeoRestrictionType, HttpVersion, ICPRecordalStatus, ImportSourceType, IpAddressType, IpamCidrStatus, ItemSelection, Method, MinimumProtocolVersion, OriginAccessControlOriginTypes, OriginAccessControlSigningBehaviors, OriginAccessControlSigningProtocols, OriginGroupSelectionCriteria, OriginProtocolPolicy, OriginRequestPolicyCookieBehavior, OriginRequestPolicyHeaderBehavior, OriginRequestPolicyQueryStringBehavior, PriceClass, RealtimeMetricsSubscriptionStatus, ReferrerPolicyList, ResponseHeadersPolicyAccessControlAllowMethodsValues, SslProtocol, SSLSupportMethod, TrustStoreStatus, ValidationTokenHost, ViewerMtlsMode, ViewerProtocolPolicy } from "./enums";
 /**
  * <p>A list of CloudFront key pair identifiers.</p>
  * @public
@@ -158,6 +158,48 @@ export interface AllowedMethods {
      */
     CachedMethods?: CachedMethods | undefined;
 }
+/**
+ * <p>Configuration for an IPAM CIDR that defines a specific IP address range, IPAM pool, and associated Anycast IP address.</p>
+ * @public
+ */
+export interface IpamCidrConfig {
+    /**
+     * <p>The CIDR that specifies the IP address range for this IPAM configuration.</p>
+     * @public
+     */
+    Cidr: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the IPAM pool that the CIDR block is assigned to.</p>
+     * @public
+     */
+    IpamPoolArn: string | undefined;
+    /**
+     * <p>The specified Anycast IP address allocated from the IPAM pool for this CIDR configuration.</p>
+     * @public
+     */
+    AnycastIp?: string | undefined;
+    /**
+     * <p>The current status of the IPAM CIDR configuration.</p>
+     * @public
+     */
+    Status?: IpamCidrStatus | undefined;
+}
+/**
+ * <p>The configuration IPAM settings that includes the quantity of CIDR configurations and the list of IPAM CIDR configurations.</p>
+ * @public
+ */
+export interface IpamConfig {
+    /**
+     * <p>The number of IPAM CIDR configurations in the <code>IpamCidrConfigs</code> list.</p>
+     * @public
+     */
+    Quantity: number | undefined;
+    /**
+     * <p>A list of IPAM CIDR configurations that define the IP address ranges, IPAM pools, and associated Anycast IP addresses.</p>
+     * @public
+     */
+    IpamCidrConfigs: IpamCidrConfig[] | undefined;
+}
 /**
  * <p>An Anycast static IP list. For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.html">Request Anycast static IPs to use for allowlisting</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>
  * @public
@@ -188,6 +230,11 @@ export interface AnycastIpList {
      * @public
      */
     IpAddressType?: IpAddressType | undefined;
+    /**
+     * <p>The IPAM configuration for the Anycast static IP list, that contains the quantity and list of IPAM CIDR configurations.</p>
+     * @public
+     */
+    IpamConfig?: IpamConfig | undefined;
     /**
      * <p>The static IP addresses that are allocated to the Anycast static IP list.</p>
      * @public
@@ -249,6 +296,11 @@ export interface AnycastIpListSummary {
      * @public
      */
     ETag?: string | undefined;
+    /**
+     * <p>The IPAM configuration for the Anycast static IP list, that contains the quantity and list of IPAM CIDR configurations.</p>
+     * @public
+     */
+    IpamConfig?: IpamConfig | undefined;
 }
 /**
  * <p>The Anycast static IP list collection.</p>
@@ -381,6 +433,65 @@ export interface AssociateDistributionWebACLResult {
      */
     ETag?: string | undefined;
 }
+/**
+ * <p>The CA certificates bundle location in Amazon S3.</p>
+ * @public
+ */
+export interface CaCertificatesBundleS3Location {
+    /**
+     * <p>The S3 bucket.</p>
+     * @public
+     */
+    Bucket: string | undefined;
+    /**
+     * <p>The location's key.</p>
+     * @public
+     */
+    Key: string | undefined;
+    /**
+     * <p>The location's Region.</p>
+     * @public
+     */
+    Region: string | undefined;
+    /**
+     * <p>The location's version.</p>
+     * @public
+     */
+    Version?: string | undefined;
+}
+/**
+ * <p>A CA certificates bundle source.</p>
+ * @public
+ */
+export type CaCertificatesBundleSource = CaCertificatesBundleSource.CaCertificatesBundleS3LocationMember | CaCertificatesBundleSource.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace CaCertificatesBundleSource {
+    /**
+     * <p>The CA certificates bundle location in Amazon S3.</p>
+     * @public
+     */
+    interface CaCertificatesBundleS3LocationMember {
+        CaCertificatesBundleS3Location: CaCertificatesBundleS3Location;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        CaCertificatesBundleS3Location?: never;
+        $unknown: [string, any];
+    }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
+    interface Visitor<T> {
+        CaCertificatesBundleS3Location: (value: CaCertificatesBundleS3Location) => T;
+        _: (name: string, value: any) => T;
+    }
+}
 /**
  * <p>Contains a list of cookie names.</p>
  * @public
@@ -958,6 +1069,17 @@ export interface CopyDistributionRequest {
      */
     Enabled?: boolean | undefined;
 }
+/**
+ * <p>A connection function association.</p>
+ * @public
+ */
+export interface ConnectionFunctionAssociation {
+    /**
+     * <p>The association's ID.</p>
+     * @public
+     */
+    Id: string | undefined;
+}
 /**
  * <p>A complex type that controls:</p> <ul> <li> <p>Whether CloudFront replaces HTTP status codes in the 4xx and 5xx range with custom error messages before returning the response to the viewer.</p> </li> <li> <p>How long CloudFront caches HTTP status codes in the 4xx and 5xx range.</p> </li> </ul> <p>For more information about custom error pages, see <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/custom-error-pages.html">Customizing Error Responses</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>
  * @public
@@ -1596,6 +1718,43 @@ export interface ViewerCertificate {
      */
     CertificateSource?: CertificateSource | undefined;
 }
+/**
+ * <p>A trust store configuration.</p>
+ * @public
+ */
+export interface TrustStoreConfig {
+    /**
+     * <p>The trust store ID.</p>
+     * @public
+     */
+    TrustStoreId: string | undefined;
+    /**
+     * <p>The configuration to use to advertise trust store CA names.</p>
+     * @public
+     */
+    AdvertiseTrustStoreCaNames?: boolean | undefined;
+    /**
+     * <p>The configuration to use to ignore certificate expiration.</p>
+     * @public
+     */
+    IgnoreCertificateExpiry?: boolean | undefined;
+}
+/**
+ * <p>A viewer mTLS configuration.</p>
+ * @public
+ */
+export interface ViewerMtlsConfig {
+    /**
+     * <p>The viewer mTLS mode.</p>
+     * @public
+     */
+    Mode?: ViewerMtlsMode | undefined;
+    /**
+     * <p>The trust store configuration associated with the viewer mTLS configuration.</p>
+     * @public
+     */
+    TrustStoreConfig?: TrustStoreConfig | undefined;
+}
 /**
  * <p>A distribution configuration.</p>
  * @public
@@ -1711,6 +1870,16 @@ export interface DistributionConfig {
      * @public
      */
     ConnectionMode?: ConnectionMode | undefined;
+    /**
+     * <p>The distribution's viewer mTLS configuration.</p>
+     * @public
+     */
+    ViewerMtlsConfig?: ViewerMtlsConfig | undefined;
+    /**
+     * <p>The distribution's connection function association.</p>
+     * @public
+     */
+    ConnectionFunctionAssociation?: ConnectionFunctionAssociation | undefined;
 }
 /**
  * <p>A distribution tells CloudFront where you want content to be delivered from, and the details about how to track and manage content delivery.</p>
@@ -1835,10 +2004,15 @@ export interface CreateAnycastIpListRequest {
      */
     Tags?: Tags | undefined;
     /**
-     * <p>The IP address type for the Anycast static IP list. You can specify one of the following options:</p> <ul> <li> <p> <code>ipv4</code> - Allocate a list of only IPv4 addresses</p> </li> <li> <p> <code>ipv6</code> - Allocate a list of only IPv4 addresses</p> </li> <li> <p> <code>dualstack</code> - Allocate a list of both IPv4 and IPv6 addresses</p> </li> </ul>
+     * <p>The IP address type for the Anycast static IP list. You can specify one of the following options:</p> <ul> <li> <p> <code>ipv4</code> only</p> </li> <li> <p> <code>ipv6</code> only </p> </li> <li> <p> <code>dualstack</code> - Allocate a list of both IPv4 and IPv6 addresses</p> </li> </ul>
      * @public
      */
     IpAddressType?: IpAddressType | undefined;
+    /**
+     * <p> A list of IPAM CIDR configurations that specify the IP address ranges and IPAM pool settings for creating the Anycast static IP list. </p>
+     * @public
+     */
+    IpamCidrConfigs?: IpamCidrConfig[] | undefined;
 }
 /**
  * @public
@@ -1954,6 +2128,145 @@ export interface CreateCloudFrontOriginAccessIdentityResult {
      */
     ETag?: string | undefined;
 }
+/**
+ * <p>The key value store association.</p>
+ * @public
+ */
+export interface KeyValueStoreAssociation {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the key value store association.</p>
+     * @public
+     */
+    KeyValueStoreARN: string | undefined;
+}
+/**
+ * <p>The key value store associations.</p>
+ * @public
+ */
+export interface KeyValueStoreAssociations {
+    /**
+     * <p>The quantity of key value store associations.</p>
+     * @public
+     */
+    Quantity: number | undefined;
+    /**
+     * <p>The items of the key value store association.</p>
+     * @public
+     */
+    Items?: KeyValueStoreAssociation[] | undefined;
+}
+/**
+ * <p>Contains configuration information about a CloudFront function.</p>
+ * @public
+ */
+export interface FunctionConfig {
+    /**
+     * <p>A comment to describe the function.</p>
+     * @public
+     */
+    Comment: string | undefined;
+    /**
+     * <p>The function's runtime environment version.</p>
+     * @public
+     */
+    Runtime: FunctionRuntime | undefined;
+    /**
+     * <p>The configuration for the key value store associations.</p>
+     * @public
+     */
+    KeyValueStoreAssociations?: KeyValueStoreAssociations | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateConnectionFunctionRequest {
+    /**
+     * <p>A name for the connection function.</p>
+     * @public
+     */
+    Name: string | undefined;
+    /**
+     * <p>Contains configuration information about a CloudFront function.</p>
+     * @public
+     */
+    ConnectionFunctionConfig: FunctionConfig | undefined;
+    /**
+     * <p>The code for the connection function.</p>
+     * @public
+     */
+    ConnectionFunctionCode: Uint8Array | undefined;
+    /**
+     * <p>A complex type that contains zero or more <code>Tag</code> elements.</p>
+     * @public
+     */
+    Tags?: Tags | undefined;
+}
+/**
+ * <p>A connection function summary.</p>
+ * @public
+ */
+export interface ConnectionFunctionSummary {
+    /**
+     * <p>The connection function name.</p>
+     * @public
+     */
+    Name: string | undefined;
+    /**
+     * <p>The connection function ID.</p>
+     * @public
+     */
+    Id: string | undefined;
+    /**
+     * <p>Contains configuration information about a CloudFront function.</p>
+     * @public
+     */
+    ConnectionFunctionConfig: FunctionConfig | undefined;
+    /**
+     * <p>The connection function Amazon Resource Name (ARN).</p>
+     * @public
+     */
+    ConnectionFunctionArn: string | undefined;
+    /**
+     * <p>The connection function status.</p>
+     * @public
+     */
+    Status: string | undefined;
+    /**
+     * <p>The connection function stage.</p>
+     * @public
+     */
+    Stage: FunctionStage | undefined;
+    /**
+     * <p>The connection function created time.</p>
+     * @public
+     */
+    CreatedTime: Date | undefined;
+    /**
+     * <p>The connection function last modified time.</p>
+     * @public
+     */
+    LastModifiedTime: Date | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateConnectionFunctionResult {
+    /**
+     * <p>The summary for the connection function.</p>
+     * @public
+     */
+    ConnectionFunctionSummary?: ConnectionFunctionSummary | undefined;
+    /**
+     * <p>The location of the connection function.</p>
+     * @public
+     */
+    Location?: string | undefined;
+    /**
+     * <p>The version identifier for the current version of the connection function.</p>
+     * @public
+     */
+    ETag?: string | undefined;
+}
 /**
  * @public
  */
@@ -2864,85 +3177,37 @@ export interface CreateFieldLevelEncryptionProfileResult {
     ETag?: string | undefined;
 }
 /**
- * <p>The key value store association.</p>
  * @public
  */
-export interface KeyValueStoreAssociation {
+export interface CreateFunctionRequest {
     /**
-     * <p>The Amazon Resource Name (ARN) of the key value store association.</p>
+     * <p>A name to identify the function.</p>
      * @public
      */
-    KeyValueStoreARN: string | undefined;
-}
-/**
- * <p>The key value store associations.</p>
- * @public
- */
-export interface KeyValueStoreAssociations {
+    Name: string | undefined;
     /**
-     * <p>The quantity of key value store associations.</p>
+     * <p>Configuration information about the function, including an optional comment and the function's runtime.</p>
      * @public
      */
-    Quantity: number | undefined;
+    FunctionConfig: FunctionConfig | undefined;
     /**
-     * <p>The items of the key value store association.</p>
+     * <p>The function code. For more information about writing a CloudFront function, see <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/writing-function-code.html">Writing function code for CloudFront Functions</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>
      * @public
      */
-    Items?: KeyValueStoreAssociation[] | undefined;
+    FunctionCode: Uint8Array | undefined;
 }
 /**
- * <p>Contains configuration information about a CloudFront function.</p>
+ * <p>Contains metadata about a CloudFront function.</p>
  * @public
  */
-export interface FunctionConfig {
+export interface FunctionMetadata {
     /**
-     * <p>A comment to describe the function.</p>
+     * <p>The Amazon Resource Name (ARN) of the function. The ARN uniquely identifies the function.</p>
      * @public
      */
-    Comment: string | undefined;
+    FunctionARN: string | undefined;
     /**
-     * <p>The function's runtime environment version.</p>
-     * @public
-     */
-    Runtime: FunctionRuntime | undefined;
-    /**
-     * <p>The configuration for the key value store associations.</p>
-     * @public
-     */
-    KeyValueStoreAssociations?: KeyValueStoreAssociations | undefined;
-}
-/**
- * @public
- */
-export interface CreateFunctionRequest {
-    /**
-     * <p>A name to identify the function.</p>
-     * @public
-     */
-    Name: string | undefined;
-    /**
-     * <p>Configuration information about the function, including an optional comment and the function's runtime.</p>
-     * @public
-     */
-    FunctionConfig: FunctionConfig | undefined;
-    /**
-     * <p>The function code. For more information about writing a CloudFront function, see <a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/writing-function-code.html">Writing function code for CloudFront Functions</a> in the <i>Amazon CloudFront Developer Guide</i>.</p>
-     * @public
-     */
-    FunctionCode: Uint8Array | undefined;
-}
-/**
- * <p>Contains metadata about a CloudFront function.</p>
- * @public
- */
-export interface FunctionMetadata {
-    /**
-     * <p>The Amazon Resource Name (ARN) of the function. The ARN uniquely identifies the function.</p>
-     * @public
-     */
-    FunctionARN: string | undefined;
-    /**
-     * <p>The stage that the function is in, either <code>DEVELOPMENT</code> or <code>LIVE</code>.</p> <p>When a function is in the <code>DEVELOPMENT</code> stage, you can test the function with <code>TestFunction</code>, and update it with <code>UpdateFunction</code>.</p> <p>When a function is in the <code>LIVE</code> stage, you can attach the function to a distribution's cache behavior, using the function's ARN.</p>
+     * <p>The stage that the function is in, either <code>DEVELOPMENT</code> or <code>LIVE</code>.</p> <p>When a function is in the <code>DEVELOPMENT</code> stage, you can test the function with <code>TestFunction</code>, and update it with <code>UpdateFunction</code>.</p> <p>When a function is in the <code>LIVE</code> stage, you can attach the function to a distribution's cache behavior, using the function's ARN.</p>
      * @public
      */
     Stage?: FunctionStage | undefined;
@@ -4344,6 +4609,82 @@ export interface CreateStreamingDistributionWithTagsResult {
      */
     ETag?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface CreateTrustStoreRequest {
+    /**
+     * <p>A name for the trust store.</p>
+     * @public
+     */
+    Name: string | undefined;
+    /**
+     * <p>The CA certificates bundle source for the trust store.</p>
+     * @public
+     */
+    CaCertificatesBundleSource: CaCertificatesBundleSource | undefined;
+    /**
+     * <p>A complex type that contains zero or more <code>Tag</code> elements.</p>
+     * @public
+     */
+    Tags?: Tags | undefined;
+}
+/**
+ * <p>A trust store.</p>
+ * @public
+ */
+export interface TrustStore {
+    /**
+     * <p>The trust store's ID.</p>
+     * @public
+     */
+    Id?: string | undefined;
+    /**
+     * <p>The trust store's Amazon Resource Name (ARN).</p>
+     * @public
+     */
+    Arn?: string | undefined;
+    /**
+     * <p>The trust store's name.</p>
+     * @public
+     */
+    Name?: string | undefined;
+    /**
+     * <p>The trust store's status.</p>
+     * @public
+     */
+    Status?: TrustStoreStatus | undefined;
+    /**
+     * <p>The trust store's number of CA certificates.</p>
+     * @public
+     */
+    NumberOfCaCertificates?: number | undefined;
+    /**
+     * <p>The trust store's last modified time.</p>
+     * @public
+     */
+    LastModifiedTime?: Date | undefined;
+    /**
+     * <p>The trust store's reason.</p>
+     * @public
+     */
+    Reason?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateTrustStoreResult {
+    /**
+     * <p>The trust store.</p>
+     * @public
+     */
+    TrustStore?: TrustStore | undefined;
+    /**
+     * <p>The version identifier for the current version of the trust store.</p>
+     * @public
+     */
+    ETag?: string | undefined;
+}
 /**
  * <p>An Amazon CloudFront VPC origin endpoint configuration.</p>
  * @public
@@ -4502,6 +4843,21 @@ export interface DeleteCloudFrontOriginAccessIdentityRequest {
      */
     IfMatch?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface DeleteConnectionFunctionRequest {
+    /**
+     * <p>The connection function's ID.</p>
+     * @public
+     */
+    Id: string | undefined;
+    /**
+     * <p>The current version (<code>ETag</code> value) of the connection function you are deleting.</p>
+     * @public
+     */
+    IfMatch: string | undefined;
+}
 /**
  * @public
  */
@@ -4754,6 +5110,21 @@ export interface DeleteStreamingDistributionRequest {
      */
     IfMatch?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface DeleteTrustStoreRequest {
+    /**
+     * <p>The trust store's ID.</p>
+     * @public
+     */
+    Id: string | undefined;
+    /**
+     * <p>The current version (<code>ETag</code> value) of the trust store you are deleting.</p>
+     * @public
+     */
+    IfMatch: string | undefined;
+}
 /**
  * @public
  */
@@ -4784,6 +5155,36 @@ export interface DeleteVpcOriginResult {
      */
     ETag?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface DescribeConnectionFunctionRequest {
+    /**
+     * <p>The connection function's identifier.</p>
+     * @public
+     */
+    Identifier: string | undefined;
+    /**
+     * <p>The connection function's stage.</p>
+     * @public
+     */
+    Stage?: FunctionStage | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeConnectionFunctionResult {
+    /**
+     * <p>The connection function's summary.</p>
+     * @public
+     */
+    ConnectionFunctionSummary?: ConnectionFunctionSummary | undefined;
+    /**
+     * <p>The version identifier for the current version of the connection function.</p>
+     * @public
+     */
+    ETag?: string | undefined;
+}
 /**
  * @public
  */
@@ -5028,6 +5429,41 @@ export interface GetCloudFrontOriginAccessIdentityConfigResult {
      */
     ETag?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface GetConnectionFunctionRequest {
+    /**
+     * <p>The connection function's identifier.</p>
+     * @public
+     */
+    Identifier: string | undefined;
+    /**
+     * <p>The connection function's stage.</p>
+     * @public
+     */
+    Stage?: FunctionStage | undefined;
+}
+/**
+ * @public
+ */
+export interface GetConnectionFunctionResult {
+    /**
+     * <p>The connection function's code.</p>
+     * @public
+     */
+    ConnectionFunctionCode?: Uint8Array | undefined;
+    /**
+     * <p>The version identifier for the current version of the connection function.</p>
+     * @public
+     */
+    ETag?: string | undefined;
+    /**
+     * <p>The connection function's content type.</p>
+     * @public
+     */
+    ContentType?: string | undefined;
+}
 /**
  * @public
  */
@@ -5479,255 +5915,3 @@ export interface GetManagedCertificateDetailsRequest {
      */
     Identifier: string | undefined;
 }
-/**
- * <p>Contains details about the validation token.</p>
- * @public
- */
-export interface ValidationTokenDetail {
-    /**
-     * <p>The domain name.</p>
-     * @public
-     */
-    Domain: string | undefined;
-    /**
-     * <p>The domain to redirect to.</p>
-     * @public
-     */
-    RedirectTo?: string | undefined;
-    /**
-     * <p>The domain to redirect from.</p>
-     * @public
-     */
-    RedirectFrom?: string | undefined;
-}
-/**
- * <p>Contains details about the CloudFront managed ACM certificate.</p>
- * @public
- */
-export interface ManagedCertificateDetails {
-    /**
-     * <p>The ARN of the CloudFront managed ACM certificate.</p>
-     * @public
-     */
-    CertificateArn?: string | undefined;
-    /**
-     * <p>The status of the CloudFront managed ACM certificate.</p> <note> <p>Your distribution tenant will be updated with the latest certificate status. When calling the <a href="https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateDistributionTenant.html">UpdateDistributionTenant</a> operation, use the latest value for the <code>ETag</code>.</p> </note>
-     * @public
-     */
-    CertificateStatus?: ManagedCertificateStatus | undefined;
-    /**
-     * <p>Contains details about the validation token host of the specified CloudFront managed ACM certificate.</p> <ul> <li> <p>For <code>cloudfront</code>, CloudFront will automatically serve the validation token. Choose this mode if you can point the domain's DNS to CloudFront immediately.</p> </li> <li> <p>For <code>self-hosted</code>, you serve the validation token from your existing infrastructure. Choose this mode when you need to maintain current traffic flow while your certificate is being issued. You can place the validation token at the well-known path on your existing web server, wait for ACM to validate and issue the certificate, and then update your DNS to point to CloudFront.</p> </li> </ul> <note> <p>This setting only affects the initial certificate request. Once the DNS points to CloudFront, all future certificate renewals are automatically handled through CloudFront.</p> </note>
-     * @public
-     */
-    ValidationTokenHost?: ValidationTokenHost | undefined;
-    /**
-     * <p>Contains details about the validation token of the specified CloudFront managed ACM certificate.</p>
-     * @public
-     */
-    ValidationTokenDetails?: ValidationTokenDetail[] | undefined;
-}
-/**
- * @public
- */
-export interface GetManagedCertificateDetailsResult {
-    /**
-     * <p>Contains details about the CloudFront managed ACM certificate.</p>
-     * @public
-     */
-    ManagedCertificateDetails?: ManagedCertificateDetails | undefined;
-}
-/**
- * @public
- */
-export interface GetMonitoringSubscriptionRequest {
-    /**
-     * <p>The ID of the distribution that you are getting metrics information for.</p>
-     * @public
-     */
-    DistributionId: string | undefined;
-}
-/**
- * @public
- */
-export interface GetMonitoringSubscriptionResult {
-    /**
-     * <p>A monitoring subscription. This structure contains information about whether additional CloudWatch metrics are enabled for a given CloudFront distribution.</p>
-     * @public
-     */
-    MonitoringSubscription?: MonitoringSubscription | undefined;
-}
-/**
- * @public
- */
-export interface GetOriginAccessControlRequest {
-    /**
-     * <p>The unique identifier of the origin access control.</p>
-     * @public
-     */
-    Id: string | undefined;
-}
-/**
- * @public
- */
-export interface GetOriginAccessControlResult {
-    /**
-     * <p>Contains an origin access control, including its unique identifier.</p>
-     * @public
-     */
-    OriginAccessControl?: OriginAccessControl | undefined;
-    /**
-     * <p>The version identifier for the current version of the origin access control.</p>
-     * @public
-     */
-    ETag?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetOriginAccessControlConfigRequest {
-    /**
-     * <p>The unique identifier of the origin access control.</p>
-     * @public
-     */
-    Id: string | undefined;
-}
-/**
- * @public
- */
-export interface GetOriginAccessControlConfigResult {
-    /**
-     * <p>Contains an origin access control configuration.</p>
-     * @public
-     */
-    OriginAccessControlConfig?: OriginAccessControlConfig | undefined;
-    /**
-     * <p>The version identifier for the current version of the origin access control.</p>
-     * @public
-     */
-    ETag?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetOriginRequestPolicyRequest {
-    /**
-     * <p>The unique identifier for the origin request policy. If the origin request policy is attached to a distribution's cache behavior, you can get the policy's identifier using <code>ListDistributions</code> or <code>GetDistribution</code>. If the origin request policy is not attached to a cache behavior, you can get the identifier using <code>ListOriginRequestPolicies</code>.</p>
-     * @public
-     */
-    Id: string | undefined;
-}
-/**
- * @public
- */
-export interface GetOriginRequestPolicyResult {
-    /**
-     * <p>The origin request policy.</p>
-     * @public
-     */
-    OriginRequestPolicy?: OriginRequestPolicy | undefined;
-    /**
-     * <p>The current version of the origin request policy.</p>
-     * @public
-     */
-    ETag?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetOriginRequestPolicyConfigRequest {
-    /**
-     * <p>The unique identifier for the origin request policy. If the origin request policy is attached to a distribution's cache behavior, you can get the policy's identifier using <code>ListDistributions</code> or <code>GetDistribution</code>. If the origin request policy is not attached to a cache behavior, you can get the identifier using <code>ListOriginRequestPolicies</code>.</p>
-     * @public
-     */
-    Id: string | undefined;
-}
-/**
- * @public
- */
-export interface GetOriginRequestPolicyConfigResult {
-    /**
-     * <p>The origin request policy configuration.</p>
-     * @public
-     */
-    OriginRequestPolicyConfig?: OriginRequestPolicyConfig | undefined;
-    /**
-     * <p>The current version of the origin request policy.</p>
-     * @public
-     */
-    ETag?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetPublicKeyRequest {
-    /**
-     * <p>The identifier of the public key you are getting.</p>
-     * @public
-     */
-    Id: string | undefined;
-}
-/**
- * @public
- */
-export interface GetPublicKeyResult {
-    /**
-     * <p>The public key.</p>
-     * @public
-     */
-    PublicKey?: PublicKey | undefined;
-    /**
-     * <p>The identifier for this version of the public key.</p>
-     * @public
-     */
-    ETag?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetPublicKeyConfigRequest {
-    /**
-     * <p>The identifier of the public key whose configuration you are getting.</p>
-     * @public
-     */
-    Id: string | undefined;
-}
-/**
- * @public
- */
-export interface GetPublicKeyConfigResult {
-    /**
-     * <p>A public key configuration.</p>
-     * @public
-     */
-    PublicKeyConfig?: PublicKeyConfig | undefined;
-    /**
-     * <p>The identifier for this version of the public key configuration.</p>
-     * @public
-     */
-    ETag?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetRealtimeLogConfigRequest {
-    /**
-     * <p>The name of the real-time log configuration to get.</p>
-     * @public
-     */
-    Name?: string | undefined;
-    /**
-     * <p>The Amazon Resource Name (ARN) of the real-time log configuration to get.</p>
-     * @public
-     */
-    ARN?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetRealtimeLogConfigResult {
-    /**
-     * <p>A real-time log configuration.</p>
-     * @public
-     */
-    RealtimeLogConfig?: RealtimeLogConfig | undefined;
-}