acm

type AddTagsToCertificateInput struct {
	// The key-value pair that defines the tag. The tag value is optional.
	Tags []*types.Tag
	// String that contains the ARN of the ACM certificate to which the tag is to be
	// applied. This must be of the form:  <p>
	// <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
	// </p> <p>For more information about ARNs, see <a
	// href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon
	// Resource Names (ARNs) and AWS Service Namespaces</a>. </p>
	CertificateArn *string
}

type AddTagsToCertificateOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type Client struct {
	// contains filtered or unexported fields
}

type DeleteCertificateInput struct {
	// String that contains the ARN of the ACM certificate to be deleted. This must be
	// of the form:
	// arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
	// For more information about ARNs, see Amazon Resource Names (ARNs) and AWS
	// Service Namespaces
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html).
	CertificateArn *string
}

type DeleteCertificateOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type DescribeCertificateInput struct {
	// The Amazon Resource Name (ARN) of the ACM certificate. The ARN must have the
	// following form:
	// arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
	// For more information about ARNs, see Amazon Resource Names (ARNs) and AWS
	// Service Namespaces
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html).
	CertificateArn *string
}

type DescribeCertificateOutput struct {
	// Metadata about an ACM certificate.
	Certificate *types.CertificateDetail

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type EndpointResolver interface {
	ResolveEndpoint(region string, options ResolverOptions) (aws.Endpoint, error)
}

type EndpointResolverFunc func(region string, options ResolverOptions) (aws.Endpoint, error)

type ExportCertificateInput struct {
	// An Amazon Resource Name (ARN) of the issued certificate. This must be of the
	// form:
	// arn:aws:acm:region:account:certificate/12345678-1234-1234-1234-123456789012
	CertificateArn *string
	// Passphrase to associate with the encrypted exported private key. If you want to
	// later decrypt the private key, you must have the passphrase. You can use the
	// following OpenSSL command to decrypt a private key: openssl rsa -in
	// encrypted_key.pem -out decrypted_key.pem
	Passphrase []byte
}

type ExportCertificateOutput struct {
	// The base64 PEM-encoded certificate.
	Certificate *string
	// The encrypted private key associated with the public key in the certificate. The
	// key is output in PKCS #8 format and is base64 PEM-encoded.
	PrivateKey *string
	// The base64 PEM-encoded certificate chain. This does not include the certificate
	// that you are exporting.
	CertificateChain *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type GetCertificateInput struct {
	// String that contains a certificate ARN in the following format:
	// arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
	// For more information about ARNs, see Amazon Resource Names (ARNs) and AWS
	// Service Namespaces
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html).
	CertificateArn *string
}

type GetCertificateOutput struct {
	// Certificates forming the requested certificate's chain of trust. The chain
	// consists of the certificate of the issuing CA and the intermediate certificates
	// of any other subordinate CAs.
	CertificateChain *string
	// The ACM-issued certificate corresponding to the ARN specified as input.
	Certificate *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type HTTPClient interface {
	Do(*http.Request) (*http.Response, error)
}

type HTTPSignerV4 interface {
	SignHTTP(ctx context.Context, credentials aws.Credentials, r *http.Request, payloadHash string, service string, region string, signingTime time.Time) error
}

type ImportCertificateInput struct {
	// The Amazon Resource Name (ARN)
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of
	// an imported certificate to replace. To import a new certificate, omit this
	// field.
	CertificateArn *string
	// The private key that matches the public key in the certificate.
	PrivateKey []byte
	// One or more resource tags to associate with the imported certificate. Note: You
	// cannot apply tags when reimporting a certificate.
	Tags []*types.Tag
	// The certificate to import.
	Certificate []byte
	// The PEM encoded certificate chain.
	CertificateChain []byte
}

type ImportCertificateOutput struct {
	// The Amazon Resource Name (ARN)
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of
	// the imported certificate.
	CertificateArn *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type ListCertificatesInput struct {
	// Use this parameter when paginating results to specify the maximum number of
	// items to return in the response. If additional items exist beyond the number you
	// specify, the NextToken element is sent in the response. Use this NextToken value
	// in a subsequent request to retrieve additional items.
	MaxItems *int32
	// Filter the certificate list by status value.
	CertificateStatuses []types.CertificateStatus
	// Filter the certificate list. For more information, see the Filters () structure.
	Includes *types.Filters
	// Use this parameter only when paginating results and only in a subsequent request
	// after you receive a response with truncated results. Set it to the value of
	// NextToken from the response you just received.
	NextToken *string
}

type ListCertificatesOutput struct {
	// When the list is truncated, this value is present and contains the value to use
	// for the NextToken parameter in a subsequent pagination request.
	NextToken *string
	// A list of ACM certificates.
	CertificateSummaryList []*types.CertificateSummary

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type ListTagsForCertificateInput struct {
	// String that contains the ARN of the ACM certificate for which you want to list
	// the tags. This must have the following form:
	// arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
	// For more information about ARNs, see Amazon Resource Names (ARNs) and AWS
	// Service Namespaces
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html).
	CertificateArn *string
}

type ListTagsForCertificateOutput struct {
	// The key-value pairs that define the applied tags.
	Tags []*types.Tag

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type Options struct {
	// Set of options to modify how an operation is invoked. These apply to all
	// operations invoked for this client. Use functional options on operation call to
	// modify this list for per operation behavior.
	APIOptions []func(*middleware.Stack) error

	// The credentials object to use when signing requests.
	Credentials aws.CredentialsProvider

	// The endpoint options to be used when attempting to resolve an endpoint.
	EndpointOptions ResolverOptions

	// The service endpoint resolver.
	EndpointResolver EndpointResolver

	// Signature Version 4 (SigV4) Signer
	HTTPSignerV4 HTTPSignerV4

	// The region to send requests to. (Required)
	Region string

	// Retryer guides how HTTP requests should be retried in case of recoverable
	// failures. When nil the API client will use a default retryer.
	Retryer retry.Retryer

	// The HTTP client to invoke API calls with. Defaults to client's default HTTP
	// implementation if nil.
	HTTPClient HTTPClient
}

type RemoveTagsFromCertificateInput struct {
	// String that contains the ARN of the ACM Certificate with one or more tags that
	// you want to remove. This must be of the form:  <p>
	// <code>arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
	// </p> <p>For more information about ARNs, see <a
	// href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon
	// Resource Names (ARNs) and AWS Service Namespaces</a>. </p>
	CertificateArn *string
	// The key-value pair that defines the tag to remove.
	Tags []*types.Tag
}

type RemoveTagsFromCertificateOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type RenewCertificateInput struct {
	// String that contains the ARN of the ACM certificate to be renewed. This must be
	// of the form:
	// arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
	// For more information about ARNs, see Amazon Resource Names (ARNs) and AWS
	// Service Namespaces
	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html).
	CertificateArn *string
}

type RenewCertificateOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type RequestCertificateInput struct {
	// The domain name that you want ACM to use to send you emails so that you can
	// validate domain ownership.
	DomainValidationOptions []*types.DomainValidationOption
	// Customer chosen string that can be used to distinguish between calls to
	// RequestCertificate. Idempotency tokens time out after one hour. Therefore, if
	// you call RequestCertificate multiple times with the same idempotency token
	// within one hour, ACM recognizes that you are requesting only one certificate and
	// will issue only one. If you change the idempotency token for each call, ACM
	// recognizes that you are requesting multiple certificates.
	IdempotencyToken *string
	// The method you want to use if you are requesting a public certificate to
	// validate that you own or control domain. You can validate with DNS
	// (https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html) or
	// validate with email
	// (https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html).
	// We recommend that you use DNS validation.
	ValidationMethod types.ValidationMethod
	// Currently, you can use this parameter to specify whether to add the certificate
	// to a certificate transparency log. Certificate transparency makes it possible to
	// detect SSL/TLS certificates that have been mistakenly or maliciously issued.
	// Certificates that have not been logged typically produce an error message in a
	// browser. For more information, see Opting Out of Certificate Transparency
	// Logging
	// (https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency).
	Options *types.CertificateOptions
	// One or more resource tags to associate with the certificate.
	Tags []*types.Tag
	// Fully qualified domain name (FQDN), such as www.example.com, that you want to
	// secure with an ACM certificate. Use an asterisk (*) to create a wildcard
	// certificate that protects several sites in the same domain. For example,
	// *.example.com protects www.example.com, site.example.com, and
	// images.example.com.  <p> The first domain name you enter cannot exceed 64
	// octets, including periods. Each subsequent Subject Alternative Name (SAN),
	// however, can be up to 253 octets in length. </p>
	DomainName *string
	// The Amazon Resource Name (ARN) of the private certificate authority (CA) that
	// will be used to issue the certificate. If you do not provide an ARN and you are
	// trying to request a private certificate, ACM will attempt to issue a public
	// certificate. For more information about private CAs, see the AWS Certificate
	// Manager Private Certificate Authority (PCA)
	// (https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaWelcome.html) user
	// guide. The ARN must have the following form:  <p>
	// <code>arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012</code>
	// </p>
	CertificateAuthorityArn *string
	// Additional FQDNs to be included in the Subject Alternative Name extension of the
	// ACM certificate. For example, add the name www.example.net to a certificate for
	// which the DomainName field is www.example.com if users can reach your site by
	// using either name. The maximum number of domain names that you can add to an ACM
	// certificate is 100. However, the initial quota is 10 domain names. If you need
	// more than 10 names, you must request a quota increase. For more information, see
	// Quotas (https://docs.aws.amazon.com/acm/latest/userguide/acm-limits.html).  <p>
	// The maximum length of a SAN DNS name is 253 octets. The name is made up of
	// multiple labels separated by periods. No label can be longer than 63 octets.
	// Consider the following examples: </p> <ul> <li> <p> <code>(63 octets).(63
	// octets).(63 octets).(61 octets)</code> is legal because the total length is 253
	// octets (63+1+63+1+63+1+61) and no label exceeds 63 octets.</p> </li> <li> <p>
	// <code>(64 octets).(63 octets).(63 octets).(61 octets)</code> is not legal
	// because the total length exceeds 253 octets (64+1+63+1+63+1+61) and the first
	// label exceeds 63 octets.</p> </li> <li> <p> <code>(63 octets).(63 octets).(63
	// octets).(62 octets)</code> is not legal because the total length of the DNS name
	// (63+1+63+1+63+1+62) exceeds 253 octets.</p> </li> </ul>
	SubjectAlternativeNames []*string
}

type RequestCertificateOutput struct {
	// String that contains the ARN of the issued certificate. This must be of the
	// form:
	// arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012
	CertificateArn *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type ResendValidationEmailInput struct {
	// The base validation domain that will act as the suffix of the email addresses
	// that are used to send the emails. This must be the same as the Domain value or a
	// superdomain of the Domain value. For example, if you requested a certificate for
	// site.subdomain.example.com and specify a ValidationDomain of
	// subdomain.example.com, ACM sends email to the domain registrant, technical
	// contact, and administrative contact in WHOIS and the following five addresses:
	//
	//
	// * admin@subdomain.example.com
	//
	//     * administrator@subdomain.example.com
	//
	//     *
	// hostmaster@subdomain.example.com
	//
	//     * postmaster@subdomain.example.com
	//
	//     *
	// webmaster@subdomain.example.com
	ValidationDomain *string
	// String that contains the ARN of the requested certificate. The certificate ARN
	// is generated and returned by the RequestCertificate () action as soon as the
	// request is made. By default, using this parameter causes email to be sent to all
	// top-level domains you specified in the certificate request. The ARN must be of
	// the form:  <p>
	// <code>arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012</code>
	// </p>
	CertificateArn *string
	// The fully qualified domain name (FQDN) of the certificate that needs to be
	// validated.
	Domain *string
}

type ResendValidationEmailOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type ResolveEndpoint struct {
	Resolver EndpointResolver
	Options  ResolverOptions
}

type ResolveEndpointMiddlewareOptions interface {
	GetEndpointResolver() EndpointResolver
	GetEndpointOptions() ResolverOptions
}

type ResolverOptions = internalendpoints.Options

type UpdateCertificateOptionsInput struct {
	// Use to update the options for your certificate. Currently, you can specify
	// whether to add your certificate to a transparency log. Certificate transparency
	// makes it possible to detect SSL/TLS certificates that have been mistakenly or
	// maliciously issued. Certificates that have not been logged typically produce an
	// error message in a browser.
	Options *types.CertificateOptions
	// ARN of the requested certificate to update. This must be of the form:
	// arn:aws:acm:us-east-1:account:certificate/12345678-1234-1234-1234-123456789012
	CertificateArn *string
}

type UpdateCertificateOptionsOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}