type AccessDeniedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type AcmCertificateMetadata struct {

	// The time at which the certificate was requested.
	CreatedAt *time.Time

	// Indicates whether the certificate can be exported.
	ExportOption CertificateExport

	// Indicates whether the certificate has been exported.
	Exported *bool

	// The date and time when the certificate was imported. This value exists only
	// when the certificate type is IMPORTED .
	ImportedAt *time.Time

	// Indicates whether the certificate is currently in use by an Amazon Web Services
	// service.
	InUse *bool

	// The time at which the certificate was issued. This value exists only when the
	// certificate type is AMAZON_ISSUED .
	IssuedAt *time.Time

	// Identifies the Amazon Web Services service that manages the certificate issued
	// by ACM.
	ManagedBy CertificateManagedBy

	// Specifies whether the certificate is eligible for renewal. At this time, only
	// exported private certificates can be renewed with the RenewCertificatecommand.
	RenewalEligibility RenewalEligibility

	// The renewal status of the certificate.
	RenewalStatus RenewalStatus

	// The time at which the certificate was revoked. This value exists only when the
	// certificate status is REVOKED .
	RevokedAt *time.Time

	// The status of the certificate.
	//
	// A certificate enters status PENDING_VALIDATION upon being requested, unless it
	// fails for any of the reasons given in the troubleshooting topic [Certificate request fails]. ACM makes
	// repeated attempts to validate a certificate for 72 hours and then times out. If
	// a certificate shows status FAILED or VALIDATION_TIMED_OUT, delete the request,
	// correct the issue with [DNS validation]or [Email validation], and try again. If validation succeeds, the
	// certificate enters status ISSUED.
	//
	// [DNS validation]: https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html
	// [Certificate request fails]: https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html
	// [Email validation]: https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html
	Status CertificateStatus

	// The source of the certificate. For certificates provided by ACM, this value is
	// AMAZON_ISSUED . For certificates that you imported with ImportCertificate, this value is IMPORTED
	// . ACM does not provide [managed renewal]for imported certificates. For more information about
	// the differences between certificates that you import and those that ACM
	// provides, see [Importing Certificates]in the Certificate Manager User Guide.
	//
	// [Importing Certificates]: https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html
	// [managed renewal]: https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html
	Type CertificateType

	// Specifies the domain validation method.
	ValidationMethod ValidationMethod
	// contains filtered or unexported fields
}

type AcmCertificateMetadataFilter interface {
	// contains filtered or unexported methods
}

type AcmCertificateMetadataFilterMemberExportOption struct {
	Value CertificateExport
	// contains filtered or unexported fields
}

type AcmCertificateMetadataFilterMemberExported struct {
	Value bool
	// contains filtered or unexported fields
}

type AcmCertificateMetadataFilterMemberInUse struct {
	Value bool
	// contains filtered or unexported fields
}

type AcmCertificateMetadataFilterMemberManagedBy struct {
	Value CertificateManagedBy
	// contains filtered or unexported fields
}

type AcmCertificateMetadataFilterMemberRenewalStatus struct {
	Value RenewalStatus
	// contains filtered or unexported fields
}

type AcmCertificateMetadataFilterMemberStatus struct {
	Value CertificateStatus
	// contains filtered or unexported fields
}

type AcmCertificateMetadataFilterMemberType struct {
	Value CertificateType
	// contains filtered or unexported fields
}

type AcmCertificateMetadataFilterMemberValidationMethod struct {
	Value ValidationMethod
	// contains filtered or unexported fields
}

type CertificateDetail struct {

	// The Amazon Resource Name (ARN) of the certificate. For more information about
	// ARNs, see [Amazon Resource Names (ARNs)]in the Amazon Web Services General Reference.
	//
	// [Amazon Resource Names (ARNs)]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
	CertificateArn *string

	// The Amazon Resource Name (ARN) of the private certificate authority (CA) that
	// issued the certificate. This has the following format:
	//
	//     arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
	CertificateAuthorityArn *string

	// The time at which the certificate was requested.
	CreatedAt *time.Time

	// The fully qualified domain name for the certificate, such as www.example.com or
	// example.com.
	DomainName *string

	// Contains information about the initial validation of each domain name that
	// occurs as a result of the RequestCertificaterequest. This field exists only when the certificate
	// type is AMAZON_ISSUED .
	DomainValidationOptions []DomainValidation

	// Contains a list of Extended Key Usage X.509 v3 extension objects. Each object
	// specifies a purpose for which the certificate public key can be used and
	// consists of a name and an object identifier (OID).
	ExtendedKeyUsages []ExtendedKeyUsage

	// The reason the certificate request failed. This value exists only when the
	// certificate status is FAILED . For more information, see [Certificate Request Failed] in the Certificate
	// Manager User Guide.
	//
	// [Certificate Request Failed]: https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed
	FailureReason FailureReason

	// The date and time when the certificate was imported. This value exists only
	// when the certificate type is IMPORTED .
	ImportedAt *time.Time

	// A list of ARNs for the Amazon Web Services resources that are using the
	// certificate. A certificate can be used by multiple Amazon Web Services
	// resources.
	InUseBy []string

	// The time at which the certificate was issued. This value exists only when the
	// certificate type is AMAZON_ISSUED .
	IssuedAt *time.Time

	// The name of the certificate authority that issued and signed the certificate.
	Issuer *string

	// The algorithm that was used to generate the public-private key pair.
	KeyAlgorithm KeyAlgorithm

	// A list of Key Usage X.509 v3 extension objects. Each object is a string value
	// that identifies the purpose of the public key contained in the certificate.
	// Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT,
	// NON_REPUDIATION, and more.
	KeyUsages []KeyUsage

	// Identifies the Amazon Web Services service that manages the certificate issued
	// by ACM.
	ManagedBy CertificateManagedBy

	// The time after which the certificate is not valid.
	NotAfter *time.Time

	// The time before which the certificate is not valid.
	NotBefore *time.Time

	// Value that specifies whether to add the certificate to a transparency log.
	// Certificate transparency makes it possible to detect SSL certificates that have
	// been mistakenly or maliciously issued. A browser might respond to certificate
	// that has not been logged by showing an error message. The logs are
	// cryptographically secure.
	Options *CertificateOptions

	// Specifies whether the certificate is eligible for renewal. At this time, only
	// exported private certificates can be renewed with the RenewCertificatecommand.
	RenewalEligibility RenewalEligibility

	// Contains information about the status of ACM's [managed renewal] for the certificate. This field
	// exists only when the certificate type is AMAZON_ISSUED .
	//
	// [managed renewal]: https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html
	RenewalSummary *RenewalSummary

	// The reason the certificate was revoked. This value exists only when the
	// certificate status is REVOKED .
	RevocationReason RevocationReason

	// The time at which the certificate was revoked. This value exists only when the
	// certificate status is REVOKED .
	RevokedAt *time.Time

	// The serial number of the certificate.
	Serial *string

	// The algorithm that was used to sign the certificate.
	SignatureAlgorithm *string

	// The status of the certificate.
	//
	// A certificate enters status PENDING_VALIDATION upon being requested, unless it
	// fails for any of the reasons given in the troubleshooting topic [Certificate request fails]. ACM makes
	// repeated attempts to validate a certificate for 72 hours and then times out. If
	// a certificate shows status FAILED or VALIDATION_TIMED_OUT, delete the request,
	// correct the issue with [DNS validation]or [Email validation], and try again. If validation succeeds, the
	// certificate enters status ISSUED.
	//
	// [DNS validation]: https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html
	// [Certificate request fails]: https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html
	// [Email validation]: https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html
	Status CertificateStatus

	// The name of the entity that is associated with the public key contained in the
	// certificate.
	Subject *string

	// One or more domain names (subject alternative names) included in the
	// certificate. This list contains the domain names that are bound to the public
	// key that is contained in the certificate. The subject alternative names include
	// the canonical domain name (CN) of the certificate and additional domain names
	// that can be used to connect to the website.
	SubjectAlternativeNames []string

	// The source of the certificate. For certificates provided by ACM, this value is
	// AMAZON_ISSUED . For certificates that you imported with ImportCertificate, this value is IMPORTED
	// . ACM does not provide [managed renewal]for imported certificates. For more information about
	// the differences between certificates that you import and those that ACM
	// provides, see [Importing Certificates]in the Certificate Manager User Guide.
	//
	// [Importing Certificates]: https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html
	// [managed renewal]: https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html
	Type CertificateType
	// contains filtered or unexported fields
}

type CertificateExport string

const (
	CertificateExportEnabled  CertificateExport = "ENABLED"
	CertificateExportDisabled CertificateExport = "DISABLED"
)

type CertificateFilter interface {
	// contains filtered or unexported methods
}

type CertificateFilterMemberAcmCertificateMetadataFilter struct {
	Value AcmCertificateMetadataFilter
	// contains filtered or unexported fields
}

type CertificateFilterMemberCertificateArn struct {
	Value string
	// contains filtered or unexported fields
}

type CertificateFilterMemberX509AttributeFilter struct {
	Value X509AttributeFilter
	// contains filtered or unexported fields
}

type CertificateFilterStatement interface {
	// contains filtered or unexported methods
}

type CertificateFilterStatementMemberAnd struct {
	Value []CertificateFilterStatement
	// contains filtered or unexported fields
}

type CertificateFilterStatementMemberFilter struct {
	Value CertificateFilter
	// contains filtered or unexported fields
}

type CertificateFilterStatementMemberNot struct {
	Value CertificateFilterStatement
	// contains filtered or unexported fields
}

type CertificateFilterStatementMemberOr struct {
	Value []CertificateFilterStatement
	// contains filtered or unexported fields
}

type CertificateManagedBy string

const (
	CertificateManagedByCloudfront CertificateManagedBy = "CLOUDFRONT"
)

type CertificateMetadata interface {
	// contains filtered or unexported methods
}

type CertificateMetadataMemberAcmCertificateMetadata struct {
	Value AcmCertificateMetadata
	// contains filtered or unexported fields
}

type CertificateOptions struct {

	// You can opt out of certificate transparency logging by specifying the DISABLED
	// option. Opt in by specifying ENABLED .
	CertificateTransparencyLoggingPreference CertificateTransparencyLoggingPreference

	// You can opt in to allow the export of your certificates by specifying ENABLED .
	// You cannot update the value of Export after the the certificate is created.
	Export CertificateExport
	// contains filtered or unexported fields
}

type CertificateSearchResult struct {

	// The Amazon Resource Name (ARN) of the certificate.
	CertificateArn *string

	// ACM-specific metadata about the certificate.
	CertificateMetadata CertificateMetadata

	// X.509 certificate attributes such as subject, issuer, and validity period.
	X509Attributes *X509Attributes
	// contains filtered or unexported fields
}

type CertificateStatus string

const (
	CertificateStatusPendingValidation  CertificateStatus = "PENDING_VALIDATION"
	CertificateStatusIssued             CertificateStatus = "ISSUED"
	CertificateStatusInactive           CertificateStatus = "INACTIVE"
	CertificateStatusExpired            CertificateStatus = "EXPIRED"
	CertificateStatusValidationTimedOut CertificateStatus = "VALIDATION_TIMED_OUT"
	CertificateStatusRevoked            CertificateStatus = "REVOKED"
	CertificateStatusFailed             CertificateStatus = "FAILED"
)

type CertificateSummary struct {

	// Amazon Resource Name (ARN) of the certificate. This is of the form:
	//
	//     arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
	//
	// For more information about ARNs, see [Amazon Resource Names (ARNs)].
	//
	// [Amazon Resource Names (ARNs)]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
	CertificateArn *string

	// The time at which the certificate was requested.
	CreatedAt *time.Time

	// Fully qualified domain name (FQDN), such as www.example.com or example.com, for
	// the certificate.
	DomainName *string

	// Indicates if export is enabled for the certificate.
	ExportOption CertificateExport

	// Indicates whether the certificate has been exported. This value exists only
	// when the certificate type is PRIVATE .
	Exported *bool

	// Contains a list of Extended Key Usage X.509 v3 extension objects. Each object
	// specifies a purpose for which the certificate public key can be used and
	// consists of a name and an object identifier (OID).
	ExtendedKeyUsages []ExtendedKeyUsageName

	// When called by [ListCertificates], indicates whether the full list of subject alternative names
	// has been included in the response. If false, the response includes all of the
	// subject alternative names included in the certificate. If true, the response
	// only includes the first 100 subject alternative names included in the
	// certificate. To display the full list of subject alternative names, use [DescribeCertificate].
	//
	// [DescribeCertificate]: https://docs.aws.amazon.com/acm/latest/APIReference/API_DescribeCertificate.html
	// [ListCertificates]: https://docs.aws.amazon.com/acm/latest/APIReference/API_ListCertificates.html
	HasAdditionalSubjectAlternativeNames *bool

	// The date and time when the certificate was imported. This value exists only
	// when the certificate type is IMPORTED .
	ImportedAt *time.Time

	// Indicates whether the certificate is currently in use by any Amazon Web
	// Services resources.
	InUse *bool

	// The time at which the certificate was issued. This value exists only when the
	// certificate type is AMAZON_ISSUED .
	IssuedAt *time.Time

	// The algorithm that was used to generate the public-private key pair.
	KeyAlgorithm KeyAlgorithm

	// A list of Key Usage X.509 v3 extension objects. Each object is a string value
	// that identifies the purpose of the public key contained in the certificate.
	// Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT,
	// NON_REPUDIATION, and more.
	KeyUsages []KeyUsageName

	// Identifies the Amazon Web Services service that manages the certificate issued
	// by ACM.
	ManagedBy CertificateManagedBy

	// The time after which the certificate is not valid.
	NotAfter *time.Time

	// The time before which the certificate is not valid.
	NotBefore *time.Time

	// Specifies whether the certificate is eligible for renewal. At this time, only
	// exported private certificates can be renewed with the RenewCertificatecommand.
	RenewalEligibility RenewalEligibility

	// The time at which the certificate was revoked. This value exists only when the
	// certificate status is REVOKED .
	RevokedAt *time.Time

	// The status of the certificate.
	//
	// A certificate enters status PENDING_VALIDATION upon being requested, unless it
	// fails for any of the reasons given in the troubleshooting topic [Certificate request fails]. ACM makes
	// repeated attempts to validate a certificate for 72 hours and then times out. If
	// a certificate shows status FAILED or VALIDATION_TIMED_OUT, delete the request,
	// correct the issue with [DNS validation]or [Email validation], and try again. If validation succeeds, the
	// certificate enters status ISSUED.
	//
	// [DNS validation]: https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html
	// [Certificate request fails]: https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html
	// [Email validation]: https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html
	Status CertificateStatus

	// One or more domain names (subject alternative names) included in the
	// certificate. This list contains the domain names that are bound to the public
	// key that is contained in the certificate. The subject alternative names include
	// the canonical domain name (CN) of the certificate and additional domain names
	// that can be used to connect to the website.
	//
	// When called by [ListCertificates], this parameter will only return the first 100 subject
	// alternative names included in the certificate. To display the full list of
	// subject alternative names, use [DescribeCertificate].
	//
	// [DescribeCertificate]: https://docs.aws.amazon.com/acm/latest/APIReference/API_DescribeCertificate.html
	// [ListCertificates]: https://docs.aws.amazon.com/acm/latest/APIReference/API_ListCertificates.html
	SubjectAlternativeNameSummaries []string

	// The source of the certificate. For certificates provided by ACM, this value is
	// AMAZON_ISSUED . For certificates that you imported with ImportCertificate, this value is IMPORTED
	// . ACM does not provide [managed renewal]for imported certificates. For more information about
	// the differences between certificates that you import and those that ACM
	// provides, see [Importing Certificates]in the Certificate Manager User Guide.
	//
	// [Importing Certificates]: https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html
	// [managed renewal]: https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html
	Type CertificateType
	// contains filtered or unexported fields
}

type CertificateTransparencyLoggingPreference string

const (
	CertificateTransparencyLoggingPreferenceEnabled  CertificateTransparencyLoggingPreference = "ENABLED"
	CertificateTransparencyLoggingPreferenceDisabled CertificateTransparencyLoggingPreference = "DISABLED"
)

type CertificateType string

const (
	CertificateTypeImported     CertificateType = "IMPORTED"
	CertificateTypeAmazonIssued CertificateType = "AMAZON_ISSUED"
	CertificateTypePrivate      CertificateType = "PRIVATE"
)

type CommonNameFilter struct {

	// The comparison operator to use.
	//
	// This member is required.
	ComparisonOperator ComparisonOperator

	// The value to match against.
	//
	// This member is required.
	Value *string
	// contains filtered or unexported fields
}

type ComparisonOperator string

const (
	ComparisonOperatorContains ComparisonOperator = "CONTAINS"
	ComparisonOperatorEquals   ComparisonOperator = "EQUALS"
)

type ConflictException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type CustomAttribute struct {

	// Specifies the object identifier (OID) of the attribute type of the relative
	// distinguished name (RDN).
	ObjectIdentifier *string

	// Specifies the attribute value of relative distinguished name (RDN).
	Value *string
	// contains filtered or unexported fields
}

type DistinguishedName struct {

	// The common name (CN) attribute.
	CommonName *string

	// The country (C) attribute.
	Country *string

	// A list of custom attributes in the distinguished name. Each custom attribute
	// contains an object identifier (OID) and its corresponding value.
	CustomAttributes []CustomAttribute

	// The distinguished name qualifier attribute.
	DistinguishedNameQualifier *string

	// The domain component attributes.
	DomainComponents []string

	// The generation qualifier attribute.
	GenerationQualifier *string

	// The given name attribute.
	GivenName *string

	// The initials attribute.
	Initials *string

	// The locality (L) attribute.
	Locality *string

	// The organization (O) attribute.
	Organization *string

	// The organizational unit (OU) attribute.
	OrganizationalUnit *string

	// The pseudonym attribute.
	Pseudonym *string

	// The serial number attribute.
	SerialNumber *string

	// The state or province (ST) attribute.
	State *string

	// The surname attribute.
	Surname *string

	// The title attribute.
	Title *string
	// contains filtered or unexported fields
}

type DnsNameFilter struct {

	// The comparison operator to use.
	//
	// This member is required.
	ComparisonOperator ComparisonOperator

	// The DNS name value to match against.
	//
	// This member is required.
	Value *string
	// contains filtered or unexported fields
}

type DomainStatus string

const (
	DomainStatusPendingValidation DomainStatus = "PENDING_VALIDATION"
	DomainStatusSuccess           DomainStatus = "SUCCESS"
	DomainStatusFailed            DomainStatus = "FAILED"
)

type DomainValidation struct {

	// A fully qualified domain name (FQDN) in the certificate. For example,
	// www.example.com or example.com .
	//
	// This member is required.
	DomainName *string

	// Contains information for HTTP-based domain validation of certificates requested
	// through Amazon CloudFront and issued by ACM. This field exists only when the
	// certificate type is AMAZON_ISSUED and the validation method is HTTP .
	HttpRedirect *HttpRedirect

	// Contains the CNAME record that you add to your DNS database for domain
	// validation. For more information, see [Use DNS to Validate Domain Ownership].
	//
	// The CNAME information that you need does not include the name of your domain.
	// If you include your domain name in the DNS database CNAME record, validation
	// fails. For example, if the name is
	// _a79865eb4cd1a6ab990a45779b4e0b96.yourdomain.com , only
	// _a79865eb4cd1a6ab990a45779b4e0b96 must be used.
	//
	// [Use DNS to Validate Domain Ownership]: https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html
	ResourceRecord *ResourceRecord

	// The domain name that ACM used to send domain validation emails.
	ValidationDomain *string

	// A list of email addresses that ACM used to send domain validation emails.
	ValidationEmails []string

	// Specifies the domain validation method.
	ValidationMethod ValidationMethod

	// The validation status of the domain name. This can be one of the following
	// values:
	//
	//   - PENDING_VALIDATION
	//
	//   - SUCCESS
	//
	//   - FAILED
	ValidationStatus DomainStatus
	// contains filtered or unexported fields
}

type DomainValidationOption struct {

	// A fully qualified domain name (FQDN) in the certificate request.
	//
	// This member is required.
	DomainName *string

	// The domain name that you want ACM to use to send you validation emails. This
	// domain name is the suffix of the email addresses that you want ACM to use. This
	// must be the same as the DomainName value or a superdomain of the DomainName
	// value. For example, if you request a certificate for testing.example.com , you
	// can specify example.com for this value. In that case, ACM sends domain
	// validation emails to the following five addresses:
	//
	//   - admin@example.com
	//
	//   - administrator@example.com
	//
	//   - hostmaster@example.com
	//
	//   - postmaster@example.com
	//
	//   - webmaster@example.com
	//
	// This member is required.
	ValidationDomain *string
	// contains filtered or unexported fields
}

type ExpiryEventsConfiguration struct {

	// Specifies the number of days prior to certificate expiration when ACM starts
	// generating EventBridge events. ACM sends one event per day per certificate
	// until the certificate expires. By default, accounts receive events starting 45
	// days before certificate expiration.
	DaysBeforeExpiry *int32
	// contains filtered or unexported fields
}

type ExtendedKeyUsage struct {

	// The name of an Extended Key Usage value.
	Name ExtendedKeyUsageName

	// An object identifier (OID) for the extension value. OIDs are strings of numbers
	// separated by periods. The following OIDs are defined in RFC 3280 and RFC 5280.
	//
	//   - 1.3.6.1.5.5.7.3.1 (TLS_WEB_SERVER_AUTHENTICATION)
	//
	//   - 1.3.6.1.5.5.7.3.2 (TLS_WEB_CLIENT_AUTHENTICATION)
	//
	//   - 1.3.6.1.5.5.7.3.3 (CODE_SIGNING)
	//
	//   - 1.3.6.1.5.5.7.3.4 (EMAIL_PROTECTION)
	//
	//   - 1.3.6.1.5.5.7.3.8 (TIME_STAMPING)
	//
	//   - 1.3.6.1.5.5.7.3.9 (OCSP_SIGNING)
	//
	//   - 1.3.6.1.5.5.7.3.5 (IPSEC_END_SYSTEM)
	//
	//   - 1.3.6.1.5.5.7.3.6 (IPSEC_TUNNEL)
	//
	//   - 1.3.6.1.5.5.7.3.7 (IPSEC_USER)
	OID *string
	// contains filtered or unexported fields
}

type ExtendedKeyUsageName string

const (
	ExtendedKeyUsageNameTlsWebServerAuthentication ExtendedKeyUsageName = "TLS_WEB_SERVER_AUTHENTICATION"
	ExtendedKeyUsageNameTlsWebClientAuthentication ExtendedKeyUsageName = "TLS_WEB_CLIENT_AUTHENTICATION"
	ExtendedKeyUsageNameCodeSigning                ExtendedKeyUsageName = "CODE_SIGNING"
	ExtendedKeyUsageNameEmailProtection            ExtendedKeyUsageName = "EMAIL_PROTECTION"
	ExtendedKeyUsageNameTimeStamping               ExtendedKeyUsageName = "TIME_STAMPING"
	ExtendedKeyUsageNameOcspSigning                ExtendedKeyUsageName = "OCSP_SIGNING"
	ExtendedKeyUsageNameIpsecEndSystem             ExtendedKeyUsageName = "IPSEC_END_SYSTEM"
	ExtendedKeyUsageNameIpsecTunnel                ExtendedKeyUsageName = "IPSEC_TUNNEL"
	ExtendedKeyUsageNameIpsecUser                  ExtendedKeyUsageName = "IPSEC_USER"
	ExtendedKeyUsageNameAny                        ExtendedKeyUsageName = "ANY"
	ExtendedKeyUsageNameNone                       ExtendedKeyUsageName = "NONE"
	ExtendedKeyUsageNameCustom                     ExtendedKeyUsageName = "CUSTOM"
)

type FailureReason string

const (
	FailureReasonNoAvailableContacts            FailureReason = "NO_AVAILABLE_CONTACTS"
	FailureReasonAdditionalVerificationRequired FailureReason = "ADDITIONAL_VERIFICATION_REQUIRED"
	FailureReasonDomainNotAllowed               FailureReason = "DOMAIN_NOT_ALLOWED"
	FailureReasonInvalidPublicDomain            FailureReason = "INVALID_PUBLIC_DOMAIN"
	FailureReasonDomainValidationDenied         FailureReason = "DOMAIN_VALIDATION_DENIED"
	FailureReasonCaaError                       FailureReason = "CAA_ERROR"
	FailureReasonPcaLimitExceeded               FailureReason = "PCA_LIMIT_EXCEEDED"
	FailureReasonPcaInvalidArn                  FailureReason = "PCA_INVALID_ARN"
	FailureReasonPcaInvalidState                FailureReason = "PCA_INVALID_STATE"
	FailureReasonPcaRequestFailed               FailureReason = "PCA_REQUEST_FAILED"
	FailureReasonPcaNameConstraintsValidation   FailureReason = "PCA_NAME_CONSTRAINTS_VALIDATION"
	FailureReasonPcaResourceNotFound            FailureReason = "PCA_RESOURCE_NOT_FOUND"
	FailureReasonPcaInvalidArgs                 FailureReason = "PCA_INVALID_ARGS"
	FailureReasonPcaInvalidDuration             FailureReason = "PCA_INVALID_DURATION"
	FailureReasonPcaAccessDenied                FailureReason = "PCA_ACCESS_DENIED"
	FailureReasonSlrNotFound                    FailureReason = "SLR_NOT_FOUND"
	FailureReasonOther                          FailureReason = "OTHER"
)

type Filters struct {

	// Specify ENABLED or DISABLED to identify certificates that can be exported.
	ExportOption CertificateExport

	// Specify one or more ExtendedKeyUsage extension values.
	ExtendedKeyUsage []ExtendedKeyUsageName

	// Specify one or more algorithms that can be used to generate key pairs.
	//
	// Default filtering returns only RSA_1024 and RSA_2048 certificates that have at
	// least one domain. To return other certificate types, provide the desired type
	// signatures in a comma-separated list. For example, "keyTypes":
	// ["RSA_2048","RSA_4096"] returns both RSA_2048 and RSA_4096 certificates.
	KeyTypes []KeyAlgorithm

	// Specify one or more KeyUsage extension values.
	KeyUsage []KeyUsageName

	// Identifies the Amazon Web Services service that manages the certificate issued
	// by ACM.
	ManagedBy CertificateManagedBy
	// contains filtered or unexported fields
}

type GeneralName interface {
	// contains filtered or unexported methods
}

type GeneralNameMemberDirectoryName struct {
	Value DistinguishedName
	// contains filtered or unexported fields
}

type GeneralNameMemberDnsName struct {
	Value string
	// contains filtered or unexported fields
}

type GeneralNameMemberIpAddress struct {
	Value string
	// contains filtered or unexported fields
}

type GeneralNameMemberOtherName struct {
	Value OtherName
	// contains filtered or unexported fields
}

type GeneralNameMemberRegisteredId struct {
	Value string
	// contains filtered or unexported fields
}

type GeneralNameMemberRfc822Name struct {
	Value string
	// contains filtered or unexported fields
}

type GeneralNameMemberUniformResourceIdentifier struct {
	Value string
	// contains filtered or unexported fields
}

type HttpRedirect struct {

	// The URL including the domain to be validated. The certificate authority sends
	// GET requests here during validation.
	RedirectFrom *string

	// The URL hosting the validation token. RedirectFrom must return this content or
	// redirect here.
	RedirectTo *string
	// contains filtered or unexported fields
}

type InvalidArgsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidArnException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidDomainValidationOptionsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidParameterException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidStateException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidTagException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type KeyAlgorithm string

const (
	KeyAlgorithmRsa1024      KeyAlgorithm = "RSA_1024"
	KeyAlgorithmRsa2048      KeyAlgorithm = "RSA_2048"
	KeyAlgorithmRsa3072      KeyAlgorithm = "RSA_3072"
	KeyAlgorithmRsa4096      KeyAlgorithm = "RSA_4096"
	KeyAlgorithmEcPrime256v1 KeyAlgorithm = "EC_prime256v1"
	KeyAlgorithmEcSecp384r1  KeyAlgorithm = "EC_secp384r1"
	KeyAlgorithmEcSecp521r1  KeyAlgorithm = "EC_secp521r1"
)

type KeyUsage struct {

	// A string value that contains a Key Usage extension name.
	Name KeyUsageName
	// contains filtered or unexported fields
}

type KeyUsageName string

const (
	KeyUsageNameDigitalSignature   KeyUsageName = "DIGITAL_SIGNATURE"
	KeyUsageNameNonRepudation      KeyUsageName = "NON_REPUDIATION"
	KeyUsageNameKeyEncipherment    KeyUsageName = "KEY_ENCIPHERMENT"
	KeyUsageNameDataEncipherment   KeyUsageName = "DATA_ENCIPHERMENT"
	KeyUsageNameKeyAgreement       KeyUsageName = "KEY_AGREEMENT"
	KeyUsageNameCertificateSigning KeyUsageName = "CERTIFICATE_SIGNING"
	KeyUsageNameCrlSigning         KeyUsageName = "CRL_SIGNING"
	KeyUsageNameEnchiperOnly       KeyUsageName = "ENCIPHER_ONLY"
	KeyUsageNameDecipherOnly       KeyUsageName = "DECIPHER_ONLY"
	KeyUsageNameAny                KeyUsageName = "ANY"
	KeyUsageNameCustom             KeyUsageName = "CUSTOM"
)

type LimitExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type OtherName struct {

	// Specifies an OID.
	ObjectIdentifier *string

	// Specifies an OID value.
	Value *string
	// contains filtered or unexported fields
}

type RecordType string

const (
	RecordTypeCname RecordType = "CNAME"
)

type RenewalEligibility string

const (
	RenewalEligibilityEligible   RenewalEligibility = "ELIGIBLE"
	RenewalEligibilityIneligible RenewalEligibility = "INELIGIBLE"
)

type RenewalStatus string

const (
	RenewalStatusPendingAutoRenewal RenewalStatus = "PENDING_AUTO_RENEWAL"
	RenewalStatusPendingValidation  RenewalStatus = "PENDING_VALIDATION"
	RenewalStatusSuccess            RenewalStatus = "SUCCESS"
	RenewalStatusFailed             RenewalStatus = "FAILED"
)

type RenewalSummary struct {

	// Contains information about the validation of each domain name in the
	// certificate, as it pertains to ACM's [managed renewal]. This is different from the initial
	// validation that occurs as a result of the RequestCertificaterequest. This field exists only when
	// the certificate type is AMAZON_ISSUED .
	//
	// [managed renewal]: https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html
	//
	// This member is required.
	DomainValidationOptions []DomainValidation

	// The status of ACM's [managed renewal] of the certificate.
	//
	// [managed renewal]: https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html
	//
	// This member is required.
	RenewalStatus RenewalStatus

	// The time at which the renewal summary was last updated.
	//
	// This member is required.
	UpdatedAt *time.Time

	// The reason that a renewal request was unsuccessful.
	RenewalStatusReason FailureReason
	// contains filtered or unexported fields
}

type RequestInProgressException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ResourceInUseException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ResourceNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ResourceRecord struct {

	// The name of the DNS record to create in your domain. This is supplied by ACM.
	//
	// This member is required.
	Name *string

	// The type of DNS record. Currently this can be CNAME .
	//
	// This member is required.
	Type RecordType

	// The value of the CNAME record to add to your DNS database. This is supplied by
	// ACM.
	//
	// This member is required.
	Value *string
	// contains filtered or unexported fields
}

type RevocationReason string

const (
	RevocationReasonUnspecified          RevocationReason = "UNSPECIFIED"
	RevocationReasonKeyCompromise        RevocationReason = "KEY_COMPROMISE"
	RevocationReasonCaCompromise         RevocationReason = "CA_COMPROMISE"
	RevocationReasonAffiliationChanged   RevocationReason = "AFFILIATION_CHANGED"
	RevocationReasonSuperceded           RevocationReason = "SUPERCEDED"
	RevocationReasonSuperseded           RevocationReason = "SUPERSEDED"
	RevocationReasonCessationOfOperation RevocationReason = "CESSATION_OF_OPERATION"
	RevocationReasonCertificateHold      RevocationReason = "CERTIFICATE_HOLD"
	RevocationReasonRemoveFromCrl        RevocationReason = "REMOVE_FROM_CRL"
	RevocationReasonPrivilegeWithdrawn   RevocationReason = "PRIVILEGE_WITHDRAWN"
	RevocationReasonAACompromise         RevocationReason = "A_A_COMPROMISE"
)

type SearchCertificatesSortBy string

const (
	SearchCertificatesSortByCreatedAt          SearchCertificatesSortBy = "CREATED_AT"
	SearchCertificatesSortByNotAfter           SearchCertificatesSortBy = "NOT_AFTER"
	SearchCertificatesSortByStatus             SearchCertificatesSortBy = "STATUS"
	SearchCertificatesSortByRenewalStatus      SearchCertificatesSortBy = "RENEWAL_STATUS"
	SearchCertificatesSortByExported           SearchCertificatesSortBy = "EXPORTED"
	SearchCertificatesSortByInUse              SearchCertificatesSortBy = "IN_USE"
	SearchCertificatesSortByNotBefore          SearchCertificatesSortBy = "NOT_BEFORE"
	SearchCertificatesSortByKeyAlgorithm       SearchCertificatesSortBy = "KEY_ALGORITHM"
	SearchCertificatesSortByType               SearchCertificatesSortBy = "TYPE"
	SearchCertificatesSortByCertificateArn     SearchCertificatesSortBy = "CERTIFICATE_ARN"
	SearchCertificatesSortByCommonName         SearchCertificatesSortBy = "COMMON_NAME"
	SearchCertificatesSortByRevokedAt          SearchCertificatesSortBy = "REVOKED_AT"
	SearchCertificatesSortByRenewalEligibility SearchCertificatesSortBy = "RENEWAL_ELIGIBILITY"
	SearchCertificatesSortByIssuedAt           SearchCertificatesSortBy = "ISSUED_AT"
	SearchCertificatesSortByManagedBy          SearchCertificatesSortBy = "MANAGED_BY"
	SearchCertificatesSortByExportOption       SearchCertificatesSortBy = "EXPORT_OPTION"
	SearchCertificatesSortByValidationMethod   SearchCertificatesSortBy = "VALIDATION_METHOD"
	SearchCertificatesSortByImportedAt         SearchCertificatesSortBy = "IMPORTED_AT"
)

type SearchCertificatesSortOrder string

const (
	SearchCertificatesSortOrderAscending  SearchCertificatesSortOrder = "ASCENDING"
	SearchCertificatesSortOrderDescending SearchCertificatesSortOrder = "DESCENDING"
)

type SortBy string

const (
	SortByCreatedAt SortBy = "CREATED_AT"
)

type SortOrder string

const (
	SortOrderAscending  SortOrder = "ASCENDING"
	SortOrderDescending SortOrder = "DESCENDING"
)

type SubjectAlternativeNameFilter interface {
	// contains filtered or unexported methods
}

type SubjectAlternativeNameFilterMemberDnsName struct {
	Value DnsNameFilter
	// contains filtered or unexported fields
}

type SubjectFilter interface {
	// contains filtered or unexported methods
}

type SubjectFilterMemberCommonName struct {
	Value CommonNameFilter
	// contains filtered or unexported fields
}

type Tag struct {

	// The key of the tag.
	//
	// This member is required.
	Key *string

	// The value of the tag.
	Value *string
	// contains filtered or unexported fields
}

type TagPolicyException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ThrottlingException struct {
	Message *string

	ErrorCodeOverride *string

	ThrottlingReasons []ThrottlingReason
	// contains filtered or unexported fields
}

type ThrottlingReason struct {

	// A description of why a request was throttled.
	Reason *string

	// The resource that causes the request to be throttled.
	Resource *string
	// contains filtered or unexported fields
}

type TimestampRange struct {

	// The end of the time range. This value is inclusive.
	End *time.Time

	// The start of the time range. This value is inclusive.
	Start *time.Time
	// contains filtered or unexported fields
}

type TooManyTagsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type UnknownUnionMember struct {
	Tag   string
	Value []byte
	// contains filtered or unexported fields
}

type ValidationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ValidationMethod string

const (
	ValidationMethodEmail ValidationMethod = "EMAIL"
	ValidationMethodDns   ValidationMethod = "DNS"
	ValidationMethodHttp  ValidationMethod = "HTTP"
)

type X509AttributeFilter interface {
	// contains filtered or unexported methods
}

type X509AttributeFilterMemberExtendedKeyUsage struct {
	Value ExtendedKeyUsageName
	// contains filtered or unexported fields
}

type X509AttributeFilterMemberKeyAlgorithm struct {
	Value KeyAlgorithm
	// contains filtered or unexported fields
}

type X509AttributeFilterMemberKeyUsage struct {
	Value KeyUsageName
	// contains filtered or unexported fields
}

type X509AttributeFilterMemberNotAfter struct {
	Value TimestampRange
	// contains filtered or unexported fields
}

type X509AttributeFilterMemberNotBefore struct {
	Value TimestampRange
	// contains filtered or unexported fields
}

type X509AttributeFilterMemberSerialNumber struct {
	Value string
	// contains filtered or unexported fields
}

type X509AttributeFilterMemberSubject struct {
	Value SubjectFilter
	// contains filtered or unexported fields
}

type X509AttributeFilterMemberSubjectAlternativeName struct {
	Value SubjectAlternativeNameFilter
	// contains filtered or unexported fields
}

type X509Attributes struct {

	// Contains a list of Extended Key Usage X.509 v3 extension objects. Each object
	// specifies a purpose for which the certificate public key can be used and
	// consists of a name and an object identifier (OID).
	ExtendedKeyUsages []ExtendedKeyUsageName

	// The distinguished name of the certificate issuer.
	Issuer *DistinguishedName

	// The algorithm that was used to generate the public-private key pair.
	KeyAlgorithm KeyAlgorithm

	// A list of Key Usage X.509 v3 extension objects. Each object is a string value
	// that identifies the purpose of the public key contained in the certificate.
	// Possible extension values include DIGITAL_SIGNATURE, KEY_ENCHIPHERMENT,
	// NON_REPUDIATION, and more.
	KeyUsages []KeyUsageName

	// The time after which the certificate is not valid.
	NotAfter *time.Time

	// The time before which the certificate is not valid.
	NotBefore *time.Time

	// The serial number assigned by the certificate authority.
	SerialNumber *string

	// The distinguished name of the certificate subject.
	Subject *DistinguishedName

	// One or more domain names (subject alternative names) included in the
	// certificate. This list contains the domain names that are bound to the public
	// key that is contained in the certificate. The subject alternative names include
	// the canonical domain name (CN) of the certificate and additional domain names
	// that can be used to connect to the website.
	SubjectAlternativeNames []GeneralName
	// contains filtered or unexported fields
}