@servicevic-oss/cdk-cleanup-certificate-validation-records 0.0.2

package/node_modules/@aws-sdk/client-acm/dist-types/models/models_0.d.ts

@@ -0,0 +1,1586 @@
+import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
+import { ACMServiceException as __BaseException } from "./ACMServiceException";
+/**
+ * @public
+ * <p>You do not have access required to perform this action.</p>
+ */
+export declare class AccessDeniedException extends __BaseException {
+    readonly name: "AccessDeniedException";
+    readonly $fault: "client";
+    Message?: string;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
+}
+/**
+ * @public
+ * <p>A key-value pair that identifies or specifies metadata about an ACM resource.</p>
+ */
+export interface Tag {
+    /**
+     * @public
+     * <p>The key of the tag.</p>
+     */
+    Key: string | undefined;
+    /**
+     * @public
+     * <p>The value of the tag.</p>
+     */
+    Value?: string;
+}
+/**
+ * @public
+ */
+export interface AddTagsToCertificateRequest {
+    /**
+     * @public
+     * <p>String that contains the ARN of the ACM certificate to which the tag is to be applied.
+     *       This must be of the form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     */
+    CertificateArn: string | undefined;
+    /**
+     * @public
+     * <p>The key-value pair that defines the tag. The tag value is optional.</p>
+     */
+    Tags: Tag[] | undefined;
+}
+/**
+ * @public
+ * <p>The requested Amazon Resource Name (ARN) does not refer to an existing resource.</p>
+ */
+export declare class InvalidArnException extends __BaseException {
+    readonly name: "InvalidArnException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidArnException, __BaseException>);
+}
+/**
+ * @public
+ * <p>An input parameter was invalid.</p>
+ */
+export declare class InvalidParameterException extends __BaseException {
+    readonly name: "InvalidParameterException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidParameterException, __BaseException>);
+}
+/**
+ * @public
+ * <p>One or both of the values that make up the key-value pair is not valid. For example, you
+ *       cannot specify a tag value that begins with <code>aws:</code>.</p>
+ */
+export declare class InvalidTagException extends __BaseException {
+    readonly name: "InvalidTagException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidTagException, __BaseException>);
+}
+/**
+ * @public
+ * <p>The specified certificate cannot be found in the caller's account or the caller's account
+ *       cannot be found.</p>
+ */
+export declare class ResourceNotFoundException extends __BaseException {
+    readonly name: "ResourceNotFoundException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
+}
+/**
+ * @public
+ * <p>A specified tag did not comply with an existing tag policy and was rejected.</p>
+ */
+export declare class TagPolicyException extends __BaseException {
+    readonly name: "TagPolicyException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<TagPolicyException, __BaseException>);
+}
+/**
+ * @public
+ * <p>The request was denied because it exceeded a quota.</p>
+ */
+export declare class ThrottlingException extends __BaseException {
+    readonly name: "ThrottlingException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
+}
+/**
+ * @public
+ * <p>The request contains too many tags. Try the request again with fewer tags.</p>
+ */
+export declare class TooManyTagsException extends __BaseException {
+    readonly name: "TooManyTagsException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<TooManyTagsException, __BaseException>);
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const RecordType: {
+    readonly CNAME: "CNAME";
+};
+/**
+ * @public
+ */
+export type RecordType = (typeof RecordType)[keyof typeof RecordType];
+/**
+ * @public
+ * <p>Contains a DNS record value that you can use to validate ownership or control of a domain.
+ *       This is used by the <a>DescribeCertificate</a> action. </p>
+ */
+export interface ResourceRecord {
+    /**
+     * @public
+     * <p>The name of the DNS record to create in your domain. This is supplied by ACM.</p>
+     */
+    Name: string | undefined;
+    /**
+     * @public
+     * <p>The type of DNS record. Currently this can be <code>CNAME</code>.</p>
+     */
+    Type: RecordType | undefined;
+    /**
+     * @public
+     * <p>The value of the CNAME record to add to your DNS database. This is supplied by
+     *       ACM.</p>
+     */
+    Value: string | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const ValidationMethod: {
+    readonly DNS: "DNS";
+    readonly EMAIL: "EMAIL";
+};
+/**
+ * @public
+ */
+export type ValidationMethod = (typeof ValidationMethod)[keyof typeof ValidationMethod];
+/**
+ * @public
+ * @enum
+ */
+export declare const DomainStatus: {
+    readonly FAILED: "FAILED";
+    readonly PENDING_VALIDATION: "PENDING_VALIDATION";
+    readonly SUCCESS: "SUCCESS";
+};
+/**
+ * @public
+ */
+export type DomainStatus = (typeof DomainStatus)[keyof typeof DomainStatus];
+/**
+ * @public
+ * <p>Contains information about the validation of each domain name in the certificate.</p>
+ */
+export interface DomainValidation {
+    /**
+     * @public
+     * <p>A fully qualified domain name (FQDN) in the certificate. For example,
+     *         <code>www.example.com</code> or <code>example.com</code>. </p>
+     */
+    DomainName: string | undefined;
+    /**
+     * @public
+     * <p>A list of email addresses that ACM used to send domain validation emails.</p>
+     */
+    ValidationEmails?: string[];
+    /**
+     * @public
+     * <p>The domain name that ACM used to send domain validation emails.</p>
+     */
+    ValidationDomain?: string;
+    /**
+     * @public
+     * <p>The validation status of the domain name. This can be one of the following values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>PENDING_VALIDATION</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code></code>SUCCESS</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code></code>FAILED</p>
+     *             </li>
+     *          </ul>
+     */
+    ValidationStatus?: DomainStatus;
+    /**
+     * @public
+     * <p>Contains the CNAME record that you add to your DNS database for domain validation. For
+     *       more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html">Use DNS to Validate Domain Ownership</a>.</p>
+     *          <p>Note: The CNAME information that you need does not include the name of your domain. If you
+     *       include
+   your domain name in the DNS database CNAME record, validation fails.
+   For example, if
+     *       the name is "_a79865eb4cd1a6ab990a45779b4e0b96.yourdomain.com", only
+     *       "_a79865eb4cd1a6ab990a45779b4e0b96" must be used.</p>
+     */
+    ResourceRecord?: ResourceRecord;
+    /**
+     * @public
+     * <p>Specifies the domain validation method.</p>
+     */
+    ValidationMethod?: ValidationMethod;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const ExtendedKeyUsageName: {
+    readonly ANY: "ANY";
+    readonly CODE_SIGNING: "CODE_SIGNING";
+    readonly CUSTOM: "CUSTOM";
+    readonly EMAIL_PROTECTION: "EMAIL_PROTECTION";
+    readonly IPSEC_END_SYSTEM: "IPSEC_END_SYSTEM";
+    readonly IPSEC_TUNNEL: "IPSEC_TUNNEL";
+    readonly IPSEC_USER: "IPSEC_USER";
+    readonly NONE: "NONE";
+    readonly OCSP_SIGNING: "OCSP_SIGNING";
+    readonly TIME_STAMPING: "TIME_STAMPING";
+    readonly TLS_WEB_CLIENT_AUTHENTICATION: "TLS_WEB_CLIENT_AUTHENTICATION";
+    readonly TLS_WEB_SERVER_AUTHENTICATION: "TLS_WEB_SERVER_AUTHENTICATION";
+};
+/**
+ * @public
+ */
+export type ExtendedKeyUsageName = (typeof ExtendedKeyUsageName)[keyof typeof ExtendedKeyUsageName];
+/**
+ * @public
+ * <p>The Extended Key Usage X.509 v3 extension defines one or more purposes for which the
+ *       public key can be used. This is in addition to or in place of the basic purposes specified by
+ *       the Key Usage extension. </p>
+ */
+export interface ExtendedKeyUsage {
+    /**
+     * @public
+     * <p>The name of an Extended Key Usage value.</p>
+     */
+    Name?: ExtendedKeyUsageName;
+    /**
+     * @public
+     * <p>An object identifier (OID) for the extension value. OIDs are strings of numbers separated
+     *       by periods. The following OIDs are defined in RFC 3280 and RFC 5280. </p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.1 (TLS_WEB_SERVER_AUTHENTICATION)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.2 (TLS_WEB_CLIENT_AUTHENTICATION)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.3 (CODE_SIGNING)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.4 (EMAIL_PROTECTION)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.8 (TIME_STAMPING)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.9 (OCSP_SIGNING)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.5 (IPSEC_END_SYSTEM)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.6 (IPSEC_TUNNEL)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1.3.6.1.5.5.7.3.7 (IPSEC_USER)</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     */
+    OID?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const FailureReason: {
+    readonly ADDITIONAL_VERIFICATION_REQUIRED: "ADDITIONAL_VERIFICATION_REQUIRED";
+    readonly CAA_ERROR: "CAA_ERROR";
+    readonly DOMAIN_NOT_ALLOWED: "DOMAIN_NOT_ALLOWED";
+    readonly DOMAIN_VALIDATION_DENIED: "DOMAIN_VALIDATION_DENIED";
+    readonly INVALID_PUBLIC_DOMAIN: "INVALID_PUBLIC_DOMAIN";
+    readonly NO_AVAILABLE_CONTACTS: "NO_AVAILABLE_CONTACTS";
+    readonly OTHER: "OTHER";
+    readonly PCA_ACCESS_DENIED: "PCA_ACCESS_DENIED";
+    readonly PCA_INVALID_ARGS: "PCA_INVALID_ARGS";
+    readonly PCA_INVALID_ARN: "PCA_INVALID_ARN";
+    readonly PCA_INVALID_DURATION: "PCA_INVALID_DURATION";
+    readonly PCA_INVALID_STATE: "PCA_INVALID_STATE";
+    readonly PCA_LIMIT_EXCEEDED: "PCA_LIMIT_EXCEEDED";
+    readonly PCA_NAME_CONSTRAINTS_VALIDATION: "PCA_NAME_CONSTRAINTS_VALIDATION";
+    readonly PCA_REQUEST_FAILED: "PCA_REQUEST_FAILED";
+    readonly PCA_RESOURCE_NOT_FOUND: "PCA_RESOURCE_NOT_FOUND";
+    readonly SLR_NOT_FOUND: "SLR_NOT_FOUND";
+};
+/**
+ * @public
+ */
+export type FailureReason = (typeof FailureReason)[keyof typeof FailureReason];
+/**
+ * @public
+ * @enum
+ */
+export declare const KeyAlgorithm: {
+    readonly EC_prime256v1: "EC_prime256v1";
+    readonly EC_secp384r1: "EC_secp384r1";
+    readonly EC_secp521r1: "EC_secp521r1";
+    readonly RSA_1024: "RSA_1024";
+    readonly RSA_2048: "RSA_2048";
+    readonly RSA_3072: "RSA_3072";
+    readonly RSA_4096: "RSA_4096";
+};
+/**
+ * @public
+ */
+export type KeyAlgorithm = (typeof KeyAlgorithm)[keyof typeof KeyAlgorithm];
+/**
+ * @public
+ * @enum
+ */
+export declare const KeyUsageName: {
+    readonly ANY: "ANY";
+    readonly CERTIFICATE_SIGNING: "CERTIFICATE_SIGNING";
+    readonly CRL_SIGNING: "CRL_SIGNING";
+    readonly CUSTOM: "CUSTOM";
+    readonly DATA_ENCIPHERMENT: "DATA_ENCIPHERMENT";
+    readonly DECIPHER_ONLY: "DECIPHER_ONLY";
+    readonly DIGITAL_SIGNATURE: "DIGITAL_SIGNATURE";
+    readonly ENCHIPER_ONLY: "ENCIPHER_ONLY";
+    readonly KEY_AGREEMENT: "KEY_AGREEMENT";
+    readonly KEY_ENCIPHERMENT: "KEY_ENCIPHERMENT";
+    readonly NON_REPUDATION: "NON_REPUDIATION";
+};
+/**
+ * @public
+ */
+export type KeyUsageName = (typeof KeyUsageName)[keyof typeof KeyUsageName];
+/**
+ * @public
+ * <p>The Key Usage X.509 v3 extension defines the purpose of the public key contained in the
+ *       certificate.</p>
+ */
+export interface KeyUsage {
+    /**
+     * @public
+     * <p>A string value that contains a Key Usage extension name.</p>
+     */
+    Name?: KeyUsageName;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const CertificateTransparencyLoggingPreference: {
+    readonly DISABLED: "DISABLED";
+    readonly ENABLED: "ENABLED";
+};
+/**
+ * @public
+ */
+export type CertificateTransparencyLoggingPreference = (typeof CertificateTransparencyLoggingPreference)[keyof typeof CertificateTransparencyLoggingPreference];
+/**
+ * @public
+ * <p>Structure that contains options for your certificate. Currently, you can use this only to
+ *       specify whether to opt in to or out of certificate transparency logging. Some browsers require
+ *       that public certificates issued for your domain be recorded in a log. Certificates that are
+ *       not logged typically generate a browser error. Transparency makes it possible for you to
+ *       detect SSL/TLS certificates that have been mistakenly or maliciously issued for your domain.
+ *       For general information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency">Certificate Transparency
+ *         Logging</a>. </p>
+ */
+export interface CertificateOptions {
+    /**
+     * @public
+     * <p>You can opt out of certificate transparency logging by specifying the
+     *         <code>DISABLED</code> option. Opt in by specifying <code>ENABLED</code>. </p>
+     */
+    CertificateTransparencyLoggingPreference?: CertificateTransparencyLoggingPreference;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const RenewalEligibility: {
+    readonly ELIGIBLE: "ELIGIBLE";
+    readonly INELIGIBLE: "INELIGIBLE";
+};
+/**
+ * @public
+ */
+export type RenewalEligibility = (typeof RenewalEligibility)[keyof typeof RenewalEligibility];
+/**
+ * @public
+ * @enum
+ */
+export declare const RenewalStatus: {
+    readonly FAILED: "FAILED";
+    readonly PENDING_AUTO_RENEWAL: "PENDING_AUTO_RENEWAL";
+    readonly PENDING_VALIDATION: "PENDING_VALIDATION";
+    readonly SUCCESS: "SUCCESS";
+};
+/**
+ * @public
+ */
+export type RenewalStatus = (typeof RenewalStatus)[keyof typeof RenewalStatus];
+/**
+ * @public
+ * <p>Contains information about the status of ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for the certificate. This
+ *       structure exists only when the certificate type is <code>AMAZON_ISSUED</code>.</p>
+ */
+export interface RenewalSummary {
+    /**
+     * @public
+     * <p>The status of ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> of the certificate.</p>
+     */
+    RenewalStatus: RenewalStatus | undefined;
+    /**
+     * @public
+     * <p>Contains information about the validation of each domain name in the certificate, as it
+     *       pertains to ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed
+     *         renewal</a>. This is different from the initial validation that occurs as a result of
+     *       the <a>RequestCertificate</a> request. This field exists only when the certificate
+     *       type is <code>AMAZON_ISSUED</code>.</p>
+     */
+    DomainValidationOptions: DomainValidation[] | undefined;
+    /**
+     * @public
+     * <p>The reason that a renewal request was unsuccessful.</p>
+     */
+    RenewalStatusReason?: FailureReason;
+    /**
+     * @public
+     * <p>The time at which the renewal summary was last updated.</p>
+     */
+    UpdatedAt: Date | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const RevocationReason: {
+    readonly AFFILIATION_CHANGED: "AFFILIATION_CHANGED";
+    readonly A_A_COMPROMISE: "A_A_COMPROMISE";
+    readonly CA_COMPROMISE: "CA_COMPROMISE";
+    readonly CERTIFICATE_HOLD: "CERTIFICATE_HOLD";
+    readonly CESSATION_OF_OPERATION: "CESSATION_OF_OPERATION";
+    readonly KEY_COMPROMISE: "KEY_COMPROMISE";
+    readonly PRIVILEGE_WITHDRAWN: "PRIVILEGE_WITHDRAWN";
+    readonly REMOVE_FROM_CRL: "REMOVE_FROM_CRL";
+    readonly SUPERCEDED: "SUPERCEDED";
+    readonly UNSPECIFIED: "UNSPECIFIED";
+};
+/**
+ * @public
+ */
+export type RevocationReason = (typeof RevocationReason)[keyof typeof RevocationReason];
+/**
+ * @public
+ * @enum
+ */
+export declare const CertificateStatus: {
+    readonly EXPIRED: "EXPIRED";
+    readonly FAILED: "FAILED";
+    readonly INACTIVE: "INACTIVE";
+    readonly ISSUED: "ISSUED";
+    readonly PENDING_VALIDATION: "PENDING_VALIDATION";
+    readonly REVOKED: "REVOKED";
+    readonly VALIDATION_TIMED_OUT: "VALIDATION_TIMED_OUT";
+};
+/**
+ * @public
+ */
+export type CertificateStatus = (typeof CertificateStatus)[keyof typeof CertificateStatus];
+/**
+ * @public
+ * @enum
+ */
+export declare const CertificateType: {
+    readonly AMAZON_ISSUED: "AMAZON_ISSUED";
+    readonly IMPORTED: "IMPORTED";
+    readonly PRIVATE: "PRIVATE";
+};
+/**
+ * @public
+ */
+export type CertificateType = (typeof CertificateType)[keyof typeof CertificateType];
+/**
+ * @public
+ * <p>Contains metadata about an ACM certificate. This structure is returned in the response
+ *       to a <a>DescribeCertificate</a> request. </p>
+ */
+export interface CertificateDetail {
+    /**
+     * @public
+     * <p>The Amazon Resource Name (ARN) of the certificate. For more information about ARNs, see
+     *         <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in
+     *       the <i>Amazon Web Services General Reference</i>.</p>
+     */
+    CertificateArn?: string;
+    /**
+     * @public
+     * <p>The fully qualified domain name for the certificate, such as www.example.com or
+     *       example.com.</p>
+     */
+    DomainName?: string;
+    /**
+     * @public
+     * <p>One or more domain names (subject alternative names)
+     *       included in the certificate. This
+     *       list contains the domain names that are bound to the public key that is contained in the
+     *       certificate. The subject alternative names include the canonical domain name (CN) of the
+     *       certificate and additional domain names that can be used to connect to the website. </p>
+     */
+    SubjectAlternativeNames?: string[];
+    /**
+     * @public
+     * <p>Contains information about the initial validation of each domain name that occurs as a
+     *       result of the <a>RequestCertificate</a> request. This field exists only when the
+     *       certificate type is <code>AMAZON_ISSUED</code>. </p>
+     */
+    DomainValidationOptions?: DomainValidation[];
+    /**
+     * @public
+     * <p>The serial number of the certificate.</p>
+     */
+    Serial?: string;
+    /**
+     * @public
+     * <p>The name of the entity that is associated with the public key contained in the
+     *       certificate.</p>
+     */
+    Subject?: string;
+    /**
+     * @public
+     * <p>The name of the certificate authority that issued and signed the certificate.</p>
+     */
+    Issuer?: string;
+    /**
+     * @public
+     * <p>The time at which the certificate was requested.</p>
+     */
+    CreatedAt?: Date;
+    /**
+     * @public
+     * <p>The time at which the certificate was issued. This value exists only when the certificate
+     *       type is <code>AMAZON_ISSUED</code>. </p>
+     */
+    IssuedAt?: Date;
+    /**
+     * @public
+     * <p>The date and time when the certificate was imported. This value exists only when the
+     *       certificate type is <code>IMPORTED</code>. </p>
+     */
+    ImportedAt?: Date;
+    /**
+     * @public
+     * <p>The status of the certificate.</p>
+     *          <p>A certificate enters status PENDING_VALIDATION upon being requested, unless it fails for
+     *       any of the reasons given in the troubleshooting topic <a href="https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html">Certificate request fails</a>. ACM makes
+     *       repeated attempts to validate a certificate for 72 hours and then times out. If a certificate
+     *       shows status FAILED or VALIDATION_TIMED_OUT, delete the request, correct the issue with <a href="https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html">DNS validation</a> or <a href="https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html">Email validation</a>, and
+     *       try again. If validation succeeds, the certificate enters status ISSUED. </p>
+     */
+    Status?: CertificateStatus;
+    /**
+     * @public
+     * <p>The time at which the certificate was revoked. This value exists only when the certificate
+     *       status is <code>REVOKED</code>. </p>
+     */
+    RevokedAt?: Date;
+    /**
+     * @public
+     * <p>The reason the certificate was revoked. This value exists only when the certificate status
+     *       is <code>REVOKED</code>. </p>
+     */
+    RevocationReason?: RevocationReason;
+    /**
+     * @public
+     * <p>The time before which the certificate is not valid.</p>
+     */
+    NotBefore?: Date;
+    /**
+     * @public
+     * <p>The time after which the certificate is not valid.</p>
+     */
+    NotAfter?: Date;
+    /**
+     * @public
+     * <p>The algorithm that was used to generate the public-private key pair.</p>
+     */
+    KeyAlgorithm?: KeyAlgorithm;
+    /**
+     * @public
+     * <p>The algorithm that was used to sign the certificate.</p>
+     */
+    SignatureAlgorithm?: string;
+    /**
+     * @public
+     * <p>A list of ARNs for the Amazon Web Services resources that are using the certificate. A certificate can
+     *       be used by multiple Amazon Web Services resources. </p>
+     */
+    InUseBy?: string[];
+    /**
+     * @public
+     * <p>The reason the certificate request failed. This value exists only when the certificate
+     *       status is <code>FAILED</code>. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed">Certificate Request
+     *         Failed</a> in the <i>Certificate Manager User Guide</i>. </p>
+     */
+    FailureReason?: FailureReason;
+    /**
+     * @public
+     * <p>The source of the certificate. For certificates provided by ACM, this value is
+     *         <code>AMAZON_ISSUED</code>. For certificates that you imported with <a>ImportCertificate</a>, this value is <code>IMPORTED</code>. ACM does not provide
+     *         <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for
+     *       imported certificates. For more information about the differences between certificates that
+     *       you import and those that ACM provides, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html">Importing Certificates</a> in the
+     *         <i>Certificate Manager User Guide</i>. </p>
+     */
+    Type?: CertificateType;
+    /**
+     * @public
+     * <p>Contains information about the status of ACM's <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for the certificate. This field
+     *       exists only when the certificate type is <code>AMAZON_ISSUED</code>.</p>
+     */
+    RenewalSummary?: RenewalSummary;
+    /**
+     * @public
+     * <p>A list of Key Usage X.509 v3 extension objects. Each object is a string value that
+     *       identifies the purpose of the public key contained in the certificate. Possible extension
+     *       values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.</p>
+     */
+    KeyUsages?: KeyUsage[];
+    /**
+     * @public
+     * <p>Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a
+     *       purpose for which the certificate public key can be used and consists of a name and an object
+     *       identifier (OID). </p>
+     */
+    ExtendedKeyUsages?: ExtendedKeyUsage[];
+    /**
+     * @public
+     * <p>The Amazon Resource Name (ARN) of the private certificate authority (CA) that issued the
+     *       certificate. This has the following format: </p>
+     *          <p>
+     *             <code>arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     */
+    CertificateAuthorityArn?: string;
+    /**
+     * @public
+     * <p>Specifies whether the certificate is eligible for renewal. At this time, only exported
+     *       private certificates can be renewed with the <a>RenewCertificate</a>
+     *       command.</p>
+     */
+    RenewalEligibility?: RenewalEligibility;
+    /**
+     * @public
+     * <p>Value that specifies whether to add the certificate to a transparency log. Certificate
+     *       transparency makes it possible to detect SSL certificates that have been mistakenly or
+     *       maliciously issued. A browser might respond to certificate that has not been logged by showing
+     *       an error message. The logs are cryptographically secure. </p>
+     */
+    Options?: CertificateOptions;
+}
+/**
+ * @public
+ * <p>You are trying to update a resource or configuration that is already being created or
+ *       updated. Wait for the previous operation to finish and try again.</p>
+ */
+export declare class ConflictException extends __BaseException {
+    readonly name: "ConflictException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface DeleteCertificateRequest {
+    /**
+     * @public
+     * <p>String that contains the ARN of the ACM certificate to be deleted. This must be of the
+     *       form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     */
+    CertificateArn: string | undefined;
+}
+/**
+ * @public
+ * <p>The certificate is in use by another Amazon Web Services service in the caller's account. Remove the
+ *       association and try again.</p>
+ */
+export declare class ResourceInUseException extends __BaseException {
+    readonly name: "ResourceInUseException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ResourceInUseException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface DescribeCertificateRequest {
+    /**
+     * @public
+     * <p>The Amazon Resource Name (ARN) of the ACM certificate. The ARN must have the following
+     *       form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     */
+    CertificateArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeCertificateResponse {
+    /**
+     * @public
+     * <p>Metadata about an ACM certificate.</p>
+     */
+    Certificate?: CertificateDetail;
+}
+/**
+ * @public
+ */
+export interface ExportCertificateRequest {
+    /**
+     * @public
+     * <p>An Amazon Resource Name (ARN) of the issued certificate. This must be of the form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:account:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     */
+    CertificateArn: string | undefined;
+    /**
+     * @public
+     * <p>Passphrase to associate with the encrypted exported private key. </p>
+     *          <note>
+     *             <p>When creating your passphrase, you can use any ASCII character except #, $, or %.</p>
+     *          </note>
+     *          <p>If you want to later decrypt the private key, you must have the passphrase. You can use
+     *       the following OpenSSL command to decrypt a private key. After entering the command, you are
+     *       prompted for the passphrase.</p>
+     *          <p>
+     *             <code>openssl rsa -in encrypted_key.pem -out decrypted_key.pem</code>
+     *          </p>
+     */
+    Passphrase: Uint8Array | undefined;
+}
+/**
+ * @public
+ */
+export interface ExportCertificateResponse {
+    /**
+     * @public
+     * <p>The base64 PEM-encoded certificate.</p>
+     */
+    Certificate?: string;
+    /**
+     * @public
+     * <p>The base64 PEM-encoded certificate chain. This does not include the certificate that you
+     *       are exporting.</p>
+     */
+    CertificateChain?: string;
+    /**
+     * @public
+     * <p>The encrypted private key associated with the public key in the certificate. The key is
+     *       output in PKCS #8 format and is base64 PEM-encoded. </p>
+     */
+    PrivateKey?: string;
+}
+/**
+ * @public
+ * <p>The certificate request is in process and the certificate in your account has not yet been
+ *       issued.</p>
+ */
+export declare class RequestInProgressException extends __BaseException {
+    readonly name: "RequestInProgressException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<RequestInProgressException, __BaseException>);
+}
+/**
+ * @public
+ * <p>Object containing expiration events options associated with an Amazon Web Services account.</p>
+ */
+export interface ExpiryEventsConfiguration {
+    /**
+     * @public
+     * <p>Specifies the number of days prior to certificate expiration when ACM starts generating
+     *         <code>EventBridge</code> events. ACM sends one event per day per certificate until the
+     *       certificate expires. By default, accounts receive events starting 45 days before certificate
+     *       expiration.</p>
+     */
+    DaysBeforeExpiry?: number;
+}
+/**
+ * @public
+ */
+export interface GetAccountConfigurationResponse {
+    /**
+     * @public
+     * <p>Expiration events configuration options associated with the Amazon Web Services account.</p>
+     */
+    ExpiryEvents?: ExpiryEventsConfiguration;
+}
+/**
+ * @public
+ */
+export interface GetCertificateRequest {
+    /**
+     * @public
+     * <p>String that contains a certificate ARN in the following format:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     */
+    CertificateArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetCertificateResponse {
+    /**
+     * @public
+     * <p>The ACM-issued certificate corresponding to the ARN specified as input.</p>
+     */
+    Certificate?: string;
+    /**
+     * @public
+     * <p>Certificates forming the requested certificate's chain of trust. The chain consists of the
+     *       certificate of the issuing CA and the intermediate certificates of any other subordinate CAs.
+     *     </p>
+     */
+    CertificateChain?: string;
+}
+/**
+ * @public
+ */
+export interface ImportCertificateRequest {
+    /**
+     * @public
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name
+     *         (ARN)</a> of an imported certificate to replace. To import a new certificate, omit this
+     *       field. </p>
+     */
+    CertificateArn?: string;
+    /**
+     * @public
+     * <p>The certificate to import.</p>
+     */
+    Certificate: Uint8Array | undefined;
+    /**
+     * @public
+     * <p>The private key that matches the public key in the certificate.</p>
+     */
+    PrivateKey: Uint8Array | undefined;
+    /**
+     * @public
+     * <p>The PEM encoded certificate chain.</p>
+     */
+    CertificateChain?: Uint8Array;
+    /**
+     * @public
+     * <p>One or more resource tags to associate with the imported certificate. </p>
+     *          <p>Note: You cannot apply tags when reimporting a certificate.</p>
+     */
+    Tags?: Tag[];
+}
+/**
+ * @public
+ */
+export interface ImportCertificateResponse {
+    /**
+     * @public
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name
+     *         (ARN)</a> of the imported certificate.</p>
+     */
+    CertificateArn?: string;
+}
+/**
+ * @public
+ * <p>An ACM quota has been exceeded.</p>
+ */
+export declare class LimitExceededException extends __BaseException {
+    readonly name: "LimitExceededException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
+}
+/**
+ * @public
+ * <p>One or more of of request parameters specified is not valid.</p>
+ */
+export declare class InvalidArgsException extends __BaseException {
+    readonly name: "InvalidArgsException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidArgsException, __BaseException>);
+}
+/**
+ * @public
+ * <p>This structure can be used in the <a>ListCertificates</a> action to filter the
+ *       output of the certificate list. </p>
+ */
+export interface Filters {
+    /**
+     * @public
+     * <p>Specify one or more <a>ExtendedKeyUsage</a> extension values.</p>
+     */
+    extendedKeyUsage?: ExtendedKeyUsageName[];
+    /**
+     * @public
+     * <p>Specify one or more <a>KeyUsage</a> extension values.</p>
+     */
+    keyUsage?: KeyUsageName[];
+    /**
+     * @public
+     * <p>Specify one or more algorithms that can be used to generate key pairs.</p>
+     *          <p>Default filtering returns only <code>RSA_1024</code> and <code>RSA_2048</code>
+     *       certificates that have at least one domain. To return other certificate types, provide the
+     *       desired type signatures in a comma-separated list. For example, <code>"keyTypes":
+     *         ["RSA_2048","RSA_4096"]</code> returns both <code>RSA_2048</code> and <code>RSA_4096</code>
+     *       certificates.</p>
+     */
+    keyTypes?: KeyAlgorithm[];
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const SortBy: {
+    readonly CREATED_AT: "CREATED_AT";
+};
+/**
+ * @public
+ */
+export type SortBy = (typeof SortBy)[keyof typeof SortBy];
+/**
+ * @public
+ * @enum
+ */
+export declare const SortOrder: {
+    readonly ASCENDING: "ASCENDING";
+    readonly DESCENDING: "DESCENDING";
+};
+/**
+ * @public
+ */
+export type SortOrder = (typeof SortOrder)[keyof typeof SortOrder];
+/**
+ * @public
+ */
+export interface ListCertificatesRequest {
+    /**
+     * @public
+     * <p>Filter the certificate list by status value.</p>
+     */
+    CertificateStatuses?: CertificateStatus[];
+    /**
+     * @public
+     * <p>Filter the certificate list. For more information, see the <a>Filters</a>
+     *       structure.</p>
+     */
+    Includes?: Filters;
+    /**
+     * @public
+     * <p>Use this parameter only when paginating results and only in a subsequent request after you
+     *       receive a response with truncated results. Set it to the value of <code>NextToken</code> from
+     *       the response you just received.</p>
+     */
+    NextToken?: string;
+    /**
+     * @public
+     * <p>Use this parameter when paginating results to specify the maximum number of items to
+     *       return in the response. If additional items exist beyond the number you specify, the
+     *         <code>NextToken</code> element is sent in the response. Use this <code>NextToken</code>
+     *       value in a subsequent request to retrieve additional items.</p>
+     */
+    MaxItems?: number;
+    /**
+     * @public
+     * <p>Specifies the field to sort results by. If you specify <code>SortBy</code>, you must also
+     *       specify <code>SortOrder</code>.</p>
+     */
+    SortBy?: SortBy;
+    /**
+     * @public
+     * <p>Specifies the order of sorted results. If you specify <code>SortOrder</code>, you must
+     *       also specify <code>SortBy</code>.</p>
+     */
+    SortOrder?: SortOrder;
+}
+/**
+ * @public
+ * <p>This structure is returned in the response object of <a>ListCertificates</a>
+ *       action. </p>
+ */
+export interface CertificateSummary {
+    /**
+     * @public
+     * <p>Amazon Resource Name (ARN) of the certificate. This is of the form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     */
+    CertificateArn?: string;
+    /**
+     * @public
+     * <p>Fully qualified domain name (FQDN), such as www.example.com or example.com, for the
+     *       certificate.</p>
+     */
+    DomainName?: string;
+    /**
+     * @public
+     * <p>One or more domain names (subject alternative names)
+     *       included in the certificate. This
+     *       list contains the domain names that are bound to the public key that is contained in the
+     *       certificate. The subject alternative names include the canonical domain name (CN) of the
+     *       certificate and additional domain names that can be used to connect to the website. </p>
+     *          <p>When called by <a href="https://docs.aws.amazon.com/acm/latestAPIReference/API_ListCertificates.html">ListCertificates</a>, this parameter will only return the first 100 subject alternative
+     *       names included in the certificate. To display the full list of subject alternative names, use
+     *         <a href="https://docs.aws.amazon.com/acm/latestAPIReference/API_DescribeCertificate.html">DescribeCertificate</a>.</p>
+     */
+    SubjectAlternativeNameSummaries?: string[];
+    /**
+     * @public
+     * <p>When called by <a href="https://docs.aws.amazon.com/acm/latestAPIReference/API_ListCertificates.html">ListCertificates</a>, indicates whether the full list of subject alternative names has
+     *       been included in the response. If false, the response includes all of the subject alternative
+     *       names included in the certificate. If true, the response only includes the first 100 subject
+     *       alternative names included in the certificate. To display the full list of subject alternative
+     *       names, use <a href="https://docs.aws.amazon.com/acm/latestAPIReference/API_DescribeCertificate.html">DescribeCertificate</a>.</p>
+     */
+    HasAdditionalSubjectAlternativeNames?: boolean;
+    /**
+     * @public
+     * <p>The status of the certificate.</p>
+     *          <p>A certificate enters status PENDING_VALIDATION upon being requested, unless it fails for
+     *       any of the reasons given in the troubleshooting topic <a href="https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html">Certificate request fails</a>. ACM makes
+     *       repeated attempts to validate a certificate for 72 hours and then times out. If a certificate
+     *       shows status FAILED or VALIDATION_TIMED_OUT, delete the request, correct the issue with <a href="https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html">DNS validation</a> or <a href="https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html">Email validation</a>, and
+     *       try again. If validation succeeds, the certificate enters status ISSUED. </p>
+     */
+    Status?: CertificateStatus;
+    /**
+     * @public
+     * <p>The source of the certificate. For certificates provided by ACM, this value is
+     *         <code>AMAZON_ISSUED</code>. For certificates that you imported with <a>ImportCertificate</a>, this value is <code>IMPORTED</code>. ACM does not provide
+     *         <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html">managed renewal</a> for
+     *       imported certificates. For more information about the differences between certificates that
+     *       you import and those that ACM provides, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html">Importing Certificates</a> in the
+     *         <i>Certificate Manager User Guide</i>. </p>
+     */
+    Type?: CertificateType;
+    /**
+     * @public
+     * <p>The algorithm that was used to generate the public-private key pair.</p>
+     */
+    KeyAlgorithm?: KeyAlgorithm;
+    /**
+     * @public
+     * <p>A list of Key Usage X.509 v3 extension objects. Each object is a string value that
+     *       identifies the purpose of the public key contained in the certificate. Possible extension
+     *       values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.</p>
+     */
+    KeyUsages?: KeyUsageName[];
+    /**
+     * @public
+     * <p>Contains a list of Extended Key Usage X.509 v3 extension objects. Each object specifies a
+     *       purpose for which the certificate public key can be used and consists of a name and an object
+     *       identifier (OID). </p>
+     */
+    ExtendedKeyUsages?: ExtendedKeyUsageName[];
+    /**
+     * @public
+     * <p>Indicates whether the certificate is currently in use by any Amazon Web Services resources.</p>
+     */
+    InUse?: boolean;
+    /**
+     * @public
+     * <p>Indicates whether the certificate has been exported. This value exists only when the
+     *       certificate type is <code>PRIVATE</code>.</p>
+     */
+    Exported?: boolean;
+    /**
+     * @public
+     * <p>Specifies whether the certificate is eligible for renewal. At this time, only exported
+     *       private certificates can be renewed with the <a>RenewCertificate</a>
+     *       command.</p>
+     */
+    RenewalEligibility?: RenewalEligibility;
+    /**
+     * @public
+     * <p>The time before which the certificate is not valid.</p>
+     */
+    NotBefore?: Date;
+    /**
+     * @public
+     * <p>The time after which the certificate is not valid.</p>
+     */
+    NotAfter?: Date;
+    /**
+     * @public
+     * <p>The time at which the certificate was requested.</p>
+     */
+    CreatedAt?: Date;
+    /**
+     * @public
+     * <p>The time at which the certificate was issued. This value exists only when the certificate
+     *       type is <code>AMAZON_ISSUED</code>. </p>
+     */
+    IssuedAt?: Date;
+    /**
+     * @public
+     * <p>The date and time when the certificate was imported. This value exists only when the
+     *       certificate type is <code>IMPORTED</code>. </p>
+     */
+    ImportedAt?: Date;
+    /**
+     * @public
+     * <p>The time at which the certificate was revoked. This value exists only when the certificate
+     *       status is <code>REVOKED</code>. </p>
+     */
+    RevokedAt?: Date;
+}
+/**
+ * @public
+ */
+export interface ListCertificatesResponse {
+    /**
+     * @public
+     * <p>When the list is truncated, this value is present and contains the value to use for the
+     *         <code>NextToken</code> parameter in a subsequent pagination request.</p>
+     */
+    NextToken?: string;
+    /**
+     * @public
+     * <p>A list of ACM certificates.</p>
+     */
+    CertificateSummaryList?: CertificateSummary[];
+}
+/**
+ * @public
+ * <p>The supplied input failed to satisfy constraints of an Amazon Web Services service.</p>
+ */
+export declare class ValidationException extends __BaseException {
+    readonly name: "ValidationException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface ListTagsForCertificateRequest {
+    /**
+     * @public
+     * <p>String that contains the ARN of the ACM certificate for which you want to list the tags.
+     *       This must have the following form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     */
+    CertificateArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTagsForCertificateResponse {
+    /**
+     * @public
+     * <p>The key-value pairs that define the applied tags.</p>
+     */
+    Tags?: Tag[];
+}
+/**
+ * @public
+ */
+export interface PutAccountConfigurationRequest {
+    /**
+     * @public
+     * <p>Specifies expiration events associated with an account.</p>
+     */
+    ExpiryEvents?: ExpiryEventsConfiguration;
+    /**
+     * @public
+     * <p>Customer-chosen string used to distinguish between calls to
+     *         <code>PutAccountConfiguration</code>. Idempotency tokens time out after one hour. If you
+     *       call <code>PutAccountConfiguration</code> multiple times with the same unexpired idempotency
+     *       token, ACM treats it as the same request and returns the original result. If you change the
+     *       idempotency token for each call, ACM treats each call as a new request.</p>
+     */
+    IdempotencyToken: string | undefined;
+}
+/**
+ * @public
+ */
+export interface RemoveTagsFromCertificateRequest {
+    /**
+     * @public
+     * <p>String that contains the ARN of the ACM Certificate with one or more tags that you want
+     *       to remove. This must be of the form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     */
+    CertificateArn: string | undefined;
+    /**
+     * @public
+     * <p>The key-value pair that defines the tag to remove.</p>
+     */
+    Tags: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface RenewCertificateRequest {
+    /**
+     * @public
+     * <p>String that contains the ARN of the ACM certificate to be renewed. This must be of the
+     *       form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a>.</p>
+     */
+    CertificateArn: string | undefined;
+}
+/**
+ * @public
+ * <p>One or more values in the <a>DomainValidationOption</a> structure is
+ *       incorrect.</p>
+ */
+export declare class InvalidDomainValidationOptionsException extends __BaseException {
+    readonly name: "InvalidDomainValidationOptionsException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidDomainValidationOptionsException, __BaseException>);
+}
+/**
+ * @public
+ * <p>Contains information about the domain names that you want ACM to use to send you emails
+ *       that enable you to validate domain ownership.</p>
+ */
+export interface DomainValidationOption {
+    /**
+     * @public
+     * <p>A fully qualified domain name (FQDN) in the certificate request.</p>
+     */
+    DomainName: string | undefined;
+    /**
+     * @public
+     * <p>The domain name that you want ACM to use to send you validation emails. This domain name
+     *       is the suffix of the email addresses that you want ACM to use. This must be the same as the
+     *         <code>DomainName</code> value or a superdomain of the <code>DomainName</code> value. For
+     *       example, if you request a certificate for <code>testing.example.com</code>, you can specify
+     *         <code>example.com</code> for this value. In that case, ACM sends domain validation emails
+     *       to the following five addresses:</p>
+     *          <ul>
+     *             <li>
+     *                <p>admin@example.com</p>
+     *             </li>
+     *             <li>
+     *                <p>administrator@example.com</p>
+     *             </li>
+     *             <li>
+     *                <p>hostmaster@example.com</p>
+     *             </li>
+     *             <li>
+     *                <p>postmaster@example.com</p>
+     *             </li>
+     *             <li>
+     *                <p>webmaster@example.com</p>
+     *             </li>
+     *          </ul>
+     */
+    ValidationDomain: string | undefined;
+}
+/**
+ * @public
+ */
+export interface RequestCertificateRequest {
+    /**
+     * @public
+     * <p>Fully qualified domain name (FQDN), such as www.example.com, that you want to secure with
+     *       an ACM certificate. Use an asterisk (*) to create a wildcard certificate that protects
+     *       several sites in the same domain. For example, *.example.com protects www.example.com,
+     *       site.example.com, and images.example.com. </p>
+     *          <p>In compliance with <a href="https://datatracker.ietf.org/doc/html/rfc5280">RFC
+     *         5280</a>, the length of the domain name (technically, the Common Name) that you provide
+     *       cannot exceed 64 octets (characters), including periods. To add a longer domain name, specify it in the Subject Alternative
+     *       Name field, which supports names up to 253 octets in length. </p>
+     */
+    DomainName: string | undefined;
+    /**
+     * @public
+     * <p>The method you want to use if you are requesting a public certificate to validate that you
+     *       own or control domain. You can <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html">validate with DNS</a> or <a href="https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html">validate with
+     *         email</a>. We recommend that you use DNS validation. </p>
+     */
+    ValidationMethod?: ValidationMethod;
+    /**
+     * @public
+     * <p>Additional FQDNs to be included in the Subject Alternative Name extension of the ACM
+     *       certificate. For example, add the name www.example.net to a certificate for which the
+     *         <code>DomainName</code> field is www.example.com if users can reach your site by using
+     *       either name. The maximum number of domain names that you can add to an ACM certificate is
+     *       100. However, the initial quota is 10 domain names. If you need more than 10 names, you must
+     *       request a quota increase. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-limits.html">Quotas</a>.</p>
+     *          <p> The maximum length of a SAN DNS name is 253 octets. The name is made up of multiple
+     *       labels separated by periods. No label can be longer than 63 octets. Consider the following
+     *       examples: </p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>(63 octets).(63 octets).(63 octets).(61 octets)</code> is legal because the
+     *           total length is 253 octets (63+1+63+1+63+1+61) and no label exceeds 63 octets.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>(64 octets).(63 octets).(63 octets).(61 octets)</code> is not legal because the
+     *           total length exceeds 253 octets (64+1+63+1+63+1+61) and the first label exceeds 63
+     *           octets.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>(63 octets).(63 octets).(63 octets).(62 octets)</code> is not legal because the
+     *           total length of the DNS name (63+1+63+1+63+1+62) exceeds 253 octets.</p>
+     *             </li>
+     *          </ul>
+     */
+    SubjectAlternativeNames?: string[];
+    /**
+     * @public
+     * <p>Customer chosen string that can be used to distinguish between calls to
+     *         <code>RequestCertificate</code>. Idempotency tokens time out after one hour. Therefore, if
+     *       you call <code>RequestCertificate</code> multiple times with the same idempotency token within
+     *       one hour, ACM recognizes that you are requesting only one certificate and will issue only
+     *       one. If you change the idempotency token for each call, ACM recognizes that you are
+     *       requesting multiple certificates.</p>
+     */
+    IdempotencyToken?: string;
+    /**
+     * @public
+     * <p>The domain name that you want ACM to use to send you emails so that you can validate
+     *       domain ownership.</p>
+     */
+    DomainValidationOptions?: DomainValidationOption[];
+    /**
+     * @public
+     * <p>Currently, you can use this parameter to specify whether to add the certificate to a
+     *       certificate transparency log. Certificate transparency makes it possible to detect SSL/TLS
+     *       certificates that have been mistakenly or maliciously issued. Certificates that have not been
+     *       logged typically produce an error message in a browser. For more information, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency">Opting Out of Certificate Transparency Logging</a>.</p>
+     */
+    Options?: CertificateOptions;
+    /**
+     * @public
+     * <p>The Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used
+     *       to issue the certificate. If you do not provide an ARN and you are trying to request a private
+     *       certificate, ACM will attempt to issue a public certificate. For more information about
+     *       private CAs, see the <a href="https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html">Amazon Web Services Private Certificate Authority</a> user guide. The ARN must have the following form: </p>
+     *          <p>
+     *             <code>arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     */
+    CertificateAuthorityArn?: string;
+    /**
+     * @public
+     * <p>One or more resource tags to associate with the certificate.</p>
+     */
+    Tags?: Tag[];
+    /**
+     * @public
+     * <p>Specifies the algorithm of the public and private key pair that your certificate uses to
+     *       encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital
+     *       Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but
+     *       with greater computing efficiency. However, ECDSA is not supported by all network clients.
+     *       Some AWS services may require RSA keys, or only support ECDSA keys of a particular size, while
+     *       others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken.
+     *       Check the requirements for the AWS service where you plan to deploy your certificate.</p>
+     *          <p>Default: RSA_2048</p>
+     */
+    KeyAlgorithm?: KeyAlgorithm;
+}
+/**
+ * @public
+ */
+export interface RequestCertificateResponse {
+    /**
+     * @public
+     * <p>String that contains the ARN of the issued certificate. This must be of the form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     */
+    CertificateArn?: string;
+}
+/**
+ * @public
+ * <p>Processing has reached an invalid state.</p>
+ */
+export declare class InvalidStateException extends __BaseException {
+    readonly name: "InvalidStateException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidStateException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface ResendValidationEmailRequest {
+    /**
+     * @public
+     * <p>String that contains the ARN of the requested certificate. The certificate ARN is
+     *       generated and returned by the <a>RequestCertificate</a> action as soon as the
+     *       request is made. By default, using this parameter causes email to be sent to all top-level
+     *       domains you specified in the certificate request. The ARN must be of the form: </p>
+     *          <p>
+     *             <code>arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
+     *          </p>
+     */
+    CertificateArn: string | undefined;
+    /**
+     * @public
+     * <p>The fully qualified domain name (FQDN) of the certificate that needs to be
+     *       validated.</p>
+     */
+    Domain: string | undefined;
+    /**
+     * @public
+     * <p>The base validation domain that will act as the suffix of the email addresses that are
+     *       used to send the emails. This must be the same as the <code>Domain</code> value or a
+     *       superdomain of the <code>Domain</code> value. For example, if you requested a certificate for
+     *         <code>site.subdomain.example.com</code> and specify a <b>ValidationDomain</b> of <code>subdomain.example.com</code>, ACM sends email to the
+     *       domain registrant, technical contact, and administrative contact in WHOIS and the following
+     *       five addresses:</p>
+     *          <ul>
+     *             <li>
+     *                <p>admin@subdomain.example.com</p>
+     *             </li>
+     *             <li>
+     *                <p>administrator@subdomain.example.com</p>
+     *             </li>
+     *             <li>
+     *                <p>hostmaster@subdomain.example.com</p>
+     *             </li>
+     *             <li>
+     *                <p>postmaster@subdomain.example.com</p>
+     *             </li>
+     *             <li>
+     *                <p>webmaster@subdomain.example.com</p>
+     *             </li>
+     *          </ul>
+     */
+    ValidationDomain: string | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateCertificateOptionsRequest {
+    /**
+     * @public
+     * <p>ARN of the requested certificate to update. This must be of the form:</p>
+     *          <p>
+     *             <code>arn:aws:acm:us-east-1:<i>account</i>:certificate/<i>12345678-1234-1234-1234-123456789012</i>
+     *             </code>
+     *          </p>
+     */
+    CertificateArn: string | undefined;
+    /**
+     * @public
+     * <p>Use to update the options for your certificate. Currently, you can specify whether to add
+     *       your certificate to a transparency log. Certificate transparency makes it possible to detect
+     *       SSL/TLS certificates that have been mistakenly or maliciously issued. Certificates that have
+     *       not been logged typically produce an error message in a browser. </p>
+     */
+    Options: CertificateOptions | undefined;
+}
+/**
+ * @internal
+ */
+export declare const ExportCertificateRequestFilterSensitiveLog: (obj: ExportCertificateRequest) => any;
+/**
+ * @internal
+ */
+export declare const ExportCertificateResponseFilterSensitiveLog: (obj: ExportCertificateResponse) => any;
+/**
+ * @internal
+ */
+export declare const ImportCertificateRequestFilterSensitiveLog: (obj: ImportCertificateRequest) => any;