mirror of https://github.com/status-im/consul.git
5000 lines
187 KiB
Go
5000 lines
187 KiB
Go
// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
|
|
|
|
package acmpca
|
|
|
|
import (
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/aws/aws-sdk-go/aws"
|
|
"github.com/aws/aws-sdk-go/aws/awsutil"
|
|
"github.com/aws/aws-sdk-go/aws/request"
|
|
"github.com/aws/aws-sdk-go/private/protocol"
|
|
"github.com/aws/aws-sdk-go/private/protocol/jsonrpc"
|
|
)
|
|
|
|
const opCreateCertificateAuthority = "CreateCertificateAuthority"
|
|
|
|
// CreateCertificateAuthorityRequest generates a "aws/request.Request" representing the
|
|
// client's request for the CreateCertificateAuthority operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See CreateCertificateAuthority for more information on using the CreateCertificateAuthority
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the CreateCertificateAuthorityRequest method.
|
|
// req, resp := client.CreateCertificateAuthorityRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CreateCertificateAuthority
|
|
func (c *ACMPCA) CreateCertificateAuthorityRequest(input *CreateCertificateAuthorityInput) (req *request.Request, output *CreateCertificateAuthorityOutput) {
|
|
op := &request.Operation{
|
|
Name: opCreateCertificateAuthority,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &CreateCertificateAuthorityInput{}
|
|
}
|
|
|
|
output = &CreateCertificateAuthorityOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// CreateCertificateAuthority API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Creates a root or subordinate private certificate authority (CA). You must
|
|
// specify the CA configuration, the certificate revocation list (CRL) configuration,
|
|
// the CA type, and an optional idempotency token to avoid accidental creation
|
|
// of multiple CAs. The CA configuration specifies the name of the algorithm
|
|
// and key size to be used to create the CA private key, the type of signing
|
|
// algorithm that the CA uses, and X.500 subject information. The CRL configuration
|
|
// specifies the CRL expiration period in days (the validity period of the CRL),
|
|
// the Amazon S3 bucket that will contain the CRL, and a CNAME alias for the
|
|
// S3 bucket that is included in certificates issued by the CA. If successful,
|
|
// this action returns the Amazon Resource Name (ARN) of the CA.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation CreateCertificateAuthority for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeInvalidArgsException "InvalidArgsException"
|
|
// One or more of the specified arguments was not valid.
|
|
//
|
|
// * ErrCodeInvalidPolicyException "InvalidPolicyException"
|
|
// The S3 bucket policy is not valid. The policy must give ACM Private CA rights
|
|
// to read from and write to the bucket and find the bucket location.
|
|
//
|
|
// * ErrCodeInvalidTagException "InvalidTagException"
|
|
// The tag associated with the CA is not valid. The invalid argument is contained
|
|
// in the message field.
|
|
//
|
|
// * ErrCodeLimitExceededException "LimitExceededException"
|
|
// An ACM Private CA limit has been exceeded. See the exception message returned
|
|
// to determine the limit that was exceeded.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CreateCertificateAuthority
|
|
func (c *ACMPCA) CreateCertificateAuthority(input *CreateCertificateAuthorityInput) (*CreateCertificateAuthorityOutput, error) {
|
|
req, out := c.CreateCertificateAuthorityRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// CreateCertificateAuthorityWithContext is the same as CreateCertificateAuthority with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See CreateCertificateAuthority for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) CreateCertificateAuthorityWithContext(ctx aws.Context, input *CreateCertificateAuthorityInput, opts ...request.Option) (*CreateCertificateAuthorityOutput, error) {
|
|
req, out := c.CreateCertificateAuthorityRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opCreateCertificateAuthorityAuditReport = "CreateCertificateAuthorityAuditReport"
|
|
|
|
// CreateCertificateAuthorityAuditReportRequest generates a "aws/request.Request" representing the
|
|
// client's request for the CreateCertificateAuthorityAuditReport operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See CreateCertificateAuthorityAuditReport for more information on using the CreateCertificateAuthorityAuditReport
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the CreateCertificateAuthorityAuditReportRequest method.
|
|
// req, resp := client.CreateCertificateAuthorityAuditReportRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CreateCertificateAuthorityAuditReport
|
|
func (c *ACMPCA) CreateCertificateAuthorityAuditReportRequest(input *CreateCertificateAuthorityAuditReportInput) (req *request.Request, output *CreateCertificateAuthorityAuditReportOutput) {
|
|
op := &request.Operation{
|
|
Name: opCreateCertificateAuthorityAuditReport,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &CreateCertificateAuthorityAuditReportInput{}
|
|
}
|
|
|
|
output = &CreateCertificateAuthorityAuditReportOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// CreateCertificateAuthorityAuditReport API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Creates an audit report that lists every time that your CA private key is
|
|
// used. The report is saved in the Amazon S3 bucket that you specify on input.
|
|
// The IssueCertificate and RevokeCertificate actions use the private key.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation CreateCertificateAuthorityAuditReport for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeRequestInProgressException "RequestInProgressException"
|
|
// Your request is already in progress.
|
|
//
|
|
// * ErrCodeRequestFailedException "RequestFailedException"
|
|
// The request has failed for an unspecified reason.
|
|
//
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidArgsException "InvalidArgsException"
|
|
// One or more of the specified arguments was not valid.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CreateCertificateAuthorityAuditReport
|
|
func (c *ACMPCA) CreateCertificateAuthorityAuditReport(input *CreateCertificateAuthorityAuditReportInput) (*CreateCertificateAuthorityAuditReportOutput, error) {
|
|
req, out := c.CreateCertificateAuthorityAuditReportRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// CreateCertificateAuthorityAuditReportWithContext is the same as CreateCertificateAuthorityAuditReport with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See CreateCertificateAuthorityAuditReport for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) CreateCertificateAuthorityAuditReportWithContext(ctx aws.Context, input *CreateCertificateAuthorityAuditReportInput, opts ...request.Option) (*CreateCertificateAuthorityAuditReportOutput, error) {
|
|
req, out := c.CreateCertificateAuthorityAuditReportRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opCreatePermission = "CreatePermission"
|
|
|
|
// CreatePermissionRequest generates a "aws/request.Request" representing the
|
|
// client's request for the CreatePermission operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See CreatePermission for more information on using the CreatePermission
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the CreatePermissionRequest method.
|
|
// req, resp := client.CreatePermissionRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CreatePermission
|
|
func (c *ACMPCA) CreatePermissionRequest(input *CreatePermissionInput) (req *request.Request, output *CreatePermissionOutput) {
|
|
op := &request.Operation{
|
|
Name: opCreatePermission,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &CreatePermissionInput{}
|
|
}
|
|
|
|
output = &CreatePermissionOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// CreatePermission API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Assigns permissions from a private CA to a designated AWS service. Services
|
|
// are specified by their service principals and can be given permission to
|
|
// create and retrieve certificates on a private CA. Services can also be given
|
|
// permission to list the active permissions that the private CA has granted.
|
|
// For ACM to automatically renew your private CA's certificates, you must assign
|
|
// all possible permissions from the CA to the ACM service principal.
|
|
//
|
|
// At this time, you can only assign permissions to ACM (acm.amazonaws.com).
|
|
// Permissions can be revoked with the DeletePermission action and listed with
|
|
// the ListPermissions action.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation CreatePermission for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodePermissionAlreadyExistsException "PermissionAlreadyExistsException"
|
|
// The designated permission has already been given to the user.
|
|
//
|
|
// * ErrCodeLimitExceededException "LimitExceededException"
|
|
// An ACM Private CA limit has been exceeded. See the exception message returned
|
|
// to determine the limit that was exceeded.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeRequestFailedException "RequestFailedException"
|
|
// The request has failed for an unspecified reason.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CreatePermission
|
|
func (c *ACMPCA) CreatePermission(input *CreatePermissionInput) (*CreatePermissionOutput, error) {
|
|
req, out := c.CreatePermissionRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// CreatePermissionWithContext is the same as CreatePermission with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See CreatePermission for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) CreatePermissionWithContext(ctx aws.Context, input *CreatePermissionInput, opts ...request.Option) (*CreatePermissionOutput, error) {
|
|
req, out := c.CreatePermissionRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opDeleteCertificateAuthority = "DeleteCertificateAuthority"
|
|
|
|
// DeleteCertificateAuthorityRequest generates a "aws/request.Request" representing the
|
|
// client's request for the DeleteCertificateAuthority operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See DeleteCertificateAuthority for more information on using the DeleteCertificateAuthority
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the DeleteCertificateAuthorityRequest method.
|
|
// req, resp := client.DeleteCertificateAuthorityRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DeleteCertificateAuthority
|
|
func (c *ACMPCA) DeleteCertificateAuthorityRequest(input *DeleteCertificateAuthorityInput) (req *request.Request, output *DeleteCertificateAuthorityOutput) {
|
|
op := &request.Operation{
|
|
Name: opDeleteCertificateAuthority,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &DeleteCertificateAuthorityInput{}
|
|
}
|
|
|
|
output = &DeleteCertificateAuthorityOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// DeleteCertificateAuthority API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Deletes a private certificate authority (CA). You must provide the Amazon
|
|
// Resource Name (ARN) of the private CA that you want to delete. You can find
|
|
// the ARN by calling the ListCertificateAuthorities action.
|
|
//
|
|
// Deleting a CA will invalidate other CAs and certificates below it in your
|
|
// CA hierarchy.
|
|
//
|
|
// Before you can delete a CA that you have created and activated, you must
|
|
// disable it. To do this, call the UpdateCertificateAuthority action and set
|
|
// the CertificateAuthorityStatus parameter to DISABLED.
|
|
//
|
|
// Additionally, you can delete a CA if you are waiting for it to be created
|
|
// (that is, the status of the CA is CREATING). You can also delete it if the
|
|
// CA has been created but you haven't yet imported the signed certificate into
|
|
// ACM Private CA (that is, the status of the CA is PENDING_CERTIFICATE).
|
|
//
|
|
// When you successfully call DeleteCertificateAuthority, the CA's status changes
|
|
// to DELETED. However, the CA won't be permanently deleted until the restoration
|
|
// period has passed. By default, if you do not set the PermanentDeletionTimeInDays
|
|
// parameter, the CA remains restorable for 30 days. You can set the parameter
|
|
// from 7 to 30 days. The DescribeCertificateAuthority action returns the time
|
|
// remaining in the restoration window of a private CA in the DELETED state.
|
|
// To restore an eligible CA, call the RestoreCertificateAuthority action.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation DeleteCertificateAuthority for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeConcurrentModificationException "ConcurrentModificationException"
|
|
// A previous update to your private CA is still ongoing.
|
|
//
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DeleteCertificateAuthority
|
|
func (c *ACMPCA) DeleteCertificateAuthority(input *DeleteCertificateAuthorityInput) (*DeleteCertificateAuthorityOutput, error) {
|
|
req, out := c.DeleteCertificateAuthorityRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// DeleteCertificateAuthorityWithContext is the same as DeleteCertificateAuthority with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See DeleteCertificateAuthority for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) DeleteCertificateAuthorityWithContext(ctx aws.Context, input *DeleteCertificateAuthorityInput, opts ...request.Option) (*DeleteCertificateAuthorityOutput, error) {
|
|
req, out := c.DeleteCertificateAuthorityRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opDeletePermission = "DeletePermission"
|
|
|
|
// DeletePermissionRequest generates a "aws/request.Request" representing the
|
|
// client's request for the DeletePermission operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See DeletePermission for more information on using the DeletePermission
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the DeletePermissionRequest method.
|
|
// req, resp := client.DeletePermissionRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DeletePermission
|
|
func (c *ACMPCA) DeletePermissionRequest(input *DeletePermissionInput) (req *request.Request, output *DeletePermissionOutput) {
|
|
op := &request.Operation{
|
|
Name: opDeletePermission,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &DeletePermissionInput{}
|
|
}
|
|
|
|
output = &DeletePermissionOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// DeletePermission API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Revokes permissions that a private CA assigned to a designated AWS service.
|
|
// Permissions can be created with the CreatePermission action and listed with
|
|
// the ListPermissions action.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation DeletePermission for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeRequestFailedException "RequestFailedException"
|
|
// The request has failed for an unspecified reason.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DeletePermission
|
|
func (c *ACMPCA) DeletePermission(input *DeletePermissionInput) (*DeletePermissionOutput, error) {
|
|
req, out := c.DeletePermissionRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// DeletePermissionWithContext is the same as DeletePermission with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See DeletePermission for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) DeletePermissionWithContext(ctx aws.Context, input *DeletePermissionInput, opts ...request.Option) (*DeletePermissionOutput, error) {
|
|
req, out := c.DeletePermissionRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opDescribeCertificateAuthority = "DescribeCertificateAuthority"
|
|
|
|
// DescribeCertificateAuthorityRequest generates a "aws/request.Request" representing the
|
|
// client's request for the DescribeCertificateAuthority operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See DescribeCertificateAuthority for more information on using the DescribeCertificateAuthority
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the DescribeCertificateAuthorityRequest method.
|
|
// req, resp := client.DescribeCertificateAuthorityRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DescribeCertificateAuthority
|
|
func (c *ACMPCA) DescribeCertificateAuthorityRequest(input *DescribeCertificateAuthorityInput) (req *request.Request, output *DescribeCertificateAuthorityOutput) {
|
|
op := &request.Operation{
|
|
Name: opDescribeCertificateAuthority,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &DescribeCertificateAuthorityInput{}
|
|
}
|
|
|
|
output = &DescribeCertificateAuthorityOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// DescribeCertificateAuthority API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Lists information about your private certificate authority (CA). You specify
|
|
// the private CA on input by its ARN (Amazon Resource Name). The output contains
|
|
// the status of your CA. This can be any of the following:
|
|
//
|
|
// * CREATING - ACM Private CA is creating your private certificate authority.
|
|
//
|
|
// * PENDING_CERTIFICATE - The certificate is pending. You must use your
|
|
// ACM Private CA-hosted or on-premises root or subordinate CA to sign your
|
|
// private CA CSR and then import it into PCA.
|
|
//
|
|
// * ACTIVE - Your private CA is active.
|
|
//
|
|
// * DISABLED - Your private CA has been disabled.
|
|
//
|
|
// * EXPIRED - Your private CA certificate has expired.
|
|
//
|
|
// * FAILED - Your private CA has failed. Your CA can fail because of problems
|
|
// such a network outage or backend AWS failure or other errors. A failed
|
|
// CA can never return to the pending state. You must create a new CA.
|
|
//
|
|
// * DELETED - Your private CA is within the restoration period, after which
|
|
// it is permanently deleted. The length of time remaining in the CA's restoration
|
|
// period is also included in this action's output.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation DescribeCertificateAuthority for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DescribeCertificateAuthority
|
|
func (c *ACMPCA) DescribeCertificateAuthority(input *DescribeCertificateAuthorityInput) (*DescribeCertificateAuthorityOutput, error) {
|
|
req, out := c.DescribeCertificateAuthorityRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// DescribeCertificateAuthorityWithContext is the same as DescribeCertificateAuthority with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See DescribeCertificateAuthority for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) DescribeCertificateAuthorityWithContext(ctx aws.Context, input *DescribeCertificateAuthorityInput, opts ...request.Option) (*DescribeCertificateAuthorityOutput, error) {
|
|
req, out := c.DescribeCertificateAuthorityRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opDescribeCertificateAuthorityAuditReport = "DescribeCertificateAuthorityAuditReport"
|
|
|
|
// DescribeCertificateAuthorityAuditReportRequest generates a "aws/request.Request" representing the
|
|
// client's request for the DescribeCertificateAuthorityAuditReport operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See DescribeCertificateAuthorityAuditReport for more information on using the DescribeCertificateAuthorityAuditReport
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the DescribeCertificateAuthorityAuditReportRequest method.
|
|
// req, resp := client.DescribeCertificateAuthorityAuditReportRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DescribeCertificateAuthorityAuditReport
|
|
func (c *ACMPCA) DescribeCertificateAuthorityAuditReportRequest(input *DescribeCertificateAuthorityAuditReportInput) (req *request.Request, output *DescribeCertificateAuthorityAuditReportOutput) {
|
|
op := &request.Operation{
|
|
Name: opDescribeCertificateAuthorityAuditReport,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &DescribeCertificateAuthorityAuditReportInput{}
|
|
}
|
|
|
|
output = &DescribeCertificateAuthorityAuditReportOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// DescribeCertificateAuthorityAuditReport API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Lists information about a specific audit report created by calling the CreateCertificateAuthorityAuditReport
|
|
// action. Audit information is created every time the certificate authority
|
|
// (CA) private key is used. The private key is used when you call the IssueCertificate
|
|
// action or the RevokeCertificate action.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation DescribeCertificateAuthorityAuditReport for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidArgsException "InvalidArgsException"
|
|
// One or more of the specified arguments was not valid.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DescribeCertificateAuthorityAuditReport
|
|
func (c *ACMPCA) DescribeCertificateAuthorityAuditReport(input *DescribeCertificateAuthorityAuditReportInput) (*DescribeCertificateAuthorityAuditReportOutput, error) {
|
|
req, out := c.DescribeCertificateAuthorityAuditReportRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// DescribeCertificateAuthorityAuditReportWithContext is the same as DescribeCertificateAuthorityAuditReport with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See DescribeCertificateAuthorityAuditReport for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) DescribeCertificateAuthorityAuditReportWithContext(ctx aws.Context, input *DescribeCertificateAuthorityAuditReportInput, opts ...request.Option) (*DescribeCertificateAuthorityAuditReportOutput, error) {
|
|
req, out := c.DescribeCertificateAuthorityAuditReportRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opGetCertificate = "GetCertificate"
|
|
|
|
// GetCertificateRequest generates a "aws/request.Request" representing the
|
|
// client's request for the GetCertificate operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See GetCertificate for more information on using the GetCertificate
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the GetCertificateRequest method.
|
|
// req, resp := client.GetCertificateRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificate
|
|
func (c *ACMPCA) GetCertificateRequest(input *GetCertificateInput) (req *request.Request, output *GetCertificateOutput) {
|
|
op := &request.Operation{
|
|
Name: opGetCertificate,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &GetCertificateInput{}
|
|
}
|
|
|
|
output = &GetCertificateOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// GetCertificate API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Retrieves a certificate from your private CA. The ARN of the certificate
|
|
// is returned when you call the IssueCertificate action. You must specify both
|
|
// the ARN of your private CA and the ARN of the issued certificate when calling
|
|
// the GetCertificate action. You can retrieve the certificate if it is in the
|
|
// ISSUED state. You can call the CreateCertificateAuthorityAuditReport action
|
|
// to create a report that contains information about all of the certificates
|
|
// issued and revoked by your private CA.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation GetCertificate for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeRequestInProgressException "RequestInProgressException"
|
|
// Your request is already in progress.
|
|
//
|
|
// * ErrCodeRequestFailedException "RequestFailedException"
|
|
// The request has failed for an unspecified reason.
|
|
//
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificate
|
|
func (c *ACMPCA) GetCertificate(input *GetCertificateInput) (*GetCertificateOutput, error) {
|
|
req, out := c.GetCertificateRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// GetCertificateWithContext is the same as GetCertificate with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See GetCertificate for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) GetCertificateWithContext(ctx aws.Context, input *GetCertificateInput, opts ...request.Option) (*GetCertificateOutput, error) {
|
|
req, out := c.GetCertificateRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opGetCertificateAuthorityCertificate = "GetCertificateAuthorityCertificate"
|
|
|
|
// GetCertificateAuthorityCertificateRequest generates a "aws/request.Request" representing the
|
|
// client's request for the GetCertificateAuthorityCertificate operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See GetCertificateAuthorityCertificate for more information on using the GetCertificateAuthorityCertificate
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the GetCertificateAuthorityCertificateRequest method.
|
|
// req, resp := client.GetCertificateAuthorityCertificateRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificateAuthorityCertificate
|
|
func (c *ACMPCA) GetCertificateAuthorityCertificateRequest(input *GetCertificateAuthorityCertificateInput) (req *request.Request, output *GetCertificateAuthorityCertificateOutput) {
|
|
op := &request.Operation{
|
|
Name: opGetCertificateAuthorityCertificate,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &GetCertificateAuthorityCertificateInput{}
|
|
}
|
|
|
|
output = &GetCertificateAuthorityCertificateOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// GetCertificateAuthorityCertificate API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Retrieves the certificate and certificate chain for your private certificate
|
|
// authority (CA). Both the certificate and the chain are base64 PEM-encoded.
|
|
// The chain does not include the CA certificate. Each certificate in the chain
|
|
// signs the one before it.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation GetCertificateAuthorityCertificate for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificateAuthorityCertificate
|
|
func (c *ACMPCA) GetCertificateAuthorityCertificate(input *GetCertificateAuthorityCertificateInput) (*GetCertificateAuthorityCertificateOutput, error) {
|
|
req, out := c.GetCertificateAuthorityCertificateRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// GetCertificateAuthorityCertificateWithContext is the same as GetCertificateAuthorityCertificate with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See GetCertificateAuthorityCertificate for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) GetCertificateAuthorityCertificateWithContext(ctx aws.Context, input *GetCertificateAuthorityCertificateInput, opts ...request.Option) (*GetCertificateAuthorityCertificateOutput, error) {
|
|
req, out := c.GetCertificateAuthorityCertificateRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opGetCertificateAuthorityCsr = "GetCertificateAuthorityCsr"
|
|
|
|
// GetCertificateAuthorityCsrRequest generates a "aws/request.Request" representing the
|
|
// client's request for the GetCertificateAuthorityCsr operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See GetCertificateAuthorityCsr for more information on using the GetCertificateAuthorityCsr
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the GetCertificateAuthorityCsrRequest method.
|
|
// req, resp := client.GetCertificateAuthorityCsrRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificateAuthorityCsr
|
|
func (c *ACMPCA) GetCertificateAuthorityCsrRequest(input *GetCertificateAuthorityCsrInput) (req *request.Request, output *GetCertificateAuthorityCsrOutput) {
|
|
op := &request.Operation{
|
|
Name: opGetCertificateAuthorityCsr,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &GetCertificateAuthorityCsrInput{}
|
|
}
|
|
|
|
output = &GetCertificateAuthorityCsrOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// GetCertificateAuthorityCsr API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Retrieves the certificate signing request (CSR) for your private certificate
|
|
// authority (CA). The CSR is created when you call the CreateCertificateAuthority
|
|
// action. Sign the CSR with your ACM Private CA-hosted or on-premises root
|
|
// or subordinate CA. Then import the signed certificate back into ACM Private
|
|
// CA by calling the ImportCertificateAuthorityCertificate action. The CSR is
|
|
// returned as a base64 PEM-encoded string.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation GetCertificateAuthorityCsr for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeRequestInProgressException "RequestInProgressException"
|
|
// Your request is already in progress.
|
|
//
|
|
// * ErrCodeRequestFailedException "RequestFailedException"
|
|
// The request has failed for an unspecified reason.
|
|
//
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificateAuthorityCsr
|
|
func (c *ACMPCA) GetCertificateAuthorityCsr(input *GetCertificateAuthorityCsrInput) (*GetCertificateAuthorityCsrOutput, error) {
|
|
req, out := c.GetCertificateAuthorityCsrRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// GetCertificateAuthorityCsrWithContext is the same as GetCertificateAuthorityCsr with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See GetCertificateAuthorityCsr for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) GetCertificateAuthorityCsrWithContext(ctx aws.Context, input *GetCertificateAuthorityCsrInput, opts ...request.Option) (*GetCertificateAuthorityCsrOutput, error) {
|
|
req, out := c.GetCertificateAuthorityCsrRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opImportCertificateAuthorityCertificate = "ImportCertificateAuthorityCertificate"
|
|
|
|
// ImportCertificateAuthorityCertificateRequest generates a "aws/request.Request" representing the
|
|
// client's request for the ImportCertificateAuthorityCertificate operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See ImportCertificateAuthorityCertificate for more information on using the ImportCertificateAuthorityCertificate
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the ImportCertificateAuthorityCertificateRequest method.
|
|
// req, resp := client.ImportCertificateAuthorityCertificateRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/ImportCertificateAuthorityCertificate
|
|
func (c *ACMPCA) ImportCertificateAuthorityCertificateRequest(input *ImportCertificateAuthorityCertificateInput) (req *request.Request, output *ImportCertificateAuthorityCertificateOutput) {
|
|
op := &request.Operation{
|
|
Name: opImportCertificateAuthorityCertificate,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &ImportCertificateAuthorityCertificateInput{}
|
|
}
|
|
|
|
output = &ImportCertificateAuthorityCertificateOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// ImportCertificateAuthorityCertificate API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Imports a signed private CA certificate into ACM Private CA. This action
|
|
// is used when you are using a chain of trust whose root is located outside
|
|
// ACM Private CA. Before you can call this action, the following preparations
|
|
// must in place:
|
|
//
|
|
// In ACM Private CA, call the CreateCertificateAuthority action to create the
|
|
// private CA that that you plan to back with the imported certificate.
|
|
//
|
|
// Call the GetCertificateAuthorityCsr action to generate a certificate signing
|
|
// request (CSR).
|
|
//
|
|
// Sign the CSR using a root or intermediate CA hosted either by an on-premises
|
|
// PKI hierarchy or a commercial CA..
|
|
//
|
|
// Create a certificate chain and copy the signed certificate and the certificate
|
|
// chain to your working directory.
|
|
//
|
|
// The following requirements apply when you import a CA certificate.
|
|
//
|
|
// * You cannot import a non-self-signed certificate for use as a root CA.
|
|
//
|
|
// * You cannot import a self-signed certificate for use as a subordinate
|
|
// CA.
|
|
//
|
|
// * Your certificate chain must not include the private CA certificate that
|
|
// you are importing.
|
|
//
|
|
// * Your ACM Private CA-hosted or on-premises CA certificate must be the
|
|
// last certificate in your chain. The subordinate certificate, if any, that
|
|
// your root CA signed must be next to last. The subordinate certificate
|
|
// signed by the preceding subordinate CA must come next, and so on until
|
|
// your chain is built.
|
|
//
|
|
// * The chain must be PEM-encoded.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation ImportCertificateAuthorityCertificate for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeConcurrentModificationException "ConcurrentModificationException"
|
|
// A previous update to your private CA is still ongoing.
|
|
//
|
|
// * ErrCodeRequestInProgressException "RequestInProgressException"
|
|
// Your request is already in progress.
|
|
//
|
|
// * ErrCodeRequestFailedException "RequestFailedException"
|
|
// The request has failed for an unspecified reason.
|
|
//
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidRequestException "InvalidRequestException"
|
|
// The request action cannot be performed or is prohibited.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeMalformedCertificateException "MalformedCertificateException"
|
|
// One or more fields in the certificate are invalid.
|
|
//
|
|
// * ErrCodeCertificateMismatchException "CertificateMismatchException"
|
|
// The certificate authority certificate you are importing does not comply with
|
|
// conditions specified in the certificate that signed it.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/ImportCertificateAuthorityCertificate
|
|
func (c *ACMPCA) ImportCertificateAuthorityCertificate(input *ImportCertificateAuthorityCertificateInput) (*ImportCertificateAuthorityCertificateOutput, error) {
|
|
req, out := c.ImportCertificateAuthorityCertificateRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// ImportCertificateAuthorityCertificateWithContext is the same as ImportCertificateAuthorityCertificate with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See ImportCertificateAuthorityCertificate for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) ImportCertificateAuthorityCertificateWithContext(ctx aws.Context, input *ImportCertificateAuthorityCertificateInput, opts ...request.Option) (*ImportCertificateAuthorityCertificateOutput, error) {
|
|
req, out := c.ImportCertificateAuthorityCertificateRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opIssueCertificate = "IssueCertificate"
|
|
|
|
// IssueCertificateRequest generates a "aws/request.Request" representing the
|
|
// client's request for the IssueCertificate operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See IssueCertificate for more information on using the IssueCertificate
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the IssueCertificateRequest method.
|
|
// req, resp := client.IssueCertificateRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/IssueCertificate
|
|
func (c *ACMPCA) IssueCertificateRequest(input *IssueCertificateInput) (req *request.Request, output *IssueCertificateOutput) {
|
|
op := &request.Operation{
|
|
Name: opIssueCertificate,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &IssueCertificateInput{}
|
|
}
|
|
|
|
output = &IssueCertificateOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// IssueCertificate API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Uses your private certificate authority (CA) to issue a client certificate.
|
|
// This action returns the Amazon Resource Name (ARN) of the certificate. You
|
|
// can retrieve the certificate by calling the GetCertificate action and specifying
|
|
// the ARN.
|
|
//
|
|
// You cannot use the ACM ListCertificateAuthorities action to retrieve the
|
|
// ARNs of the certificates that you issue by using ACM Private CA.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation IssueCertificate for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeLimitExceededException "LimitExceededException"
|
|
// An ACM Private CA limit has been exceeded. See the exception message returned
|
|
// to determine the limit that was exceeded.
|
|
//
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidArgsException "InvalidArgsException"
|
|
// One or more of the specified arguments was not valid.
|
|
//
|
|
// * ErrCodeMalformedCSRException "MalformedCSRException"
|
|
// The certificate signing request is invalid.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/IssueCertificate
|
|
func (c *ACMPCA) IssueCertificate(input *IssueCertificateInput) (*IssueCertificateOutput, error) {
|
|
req, out := c.IssueCertificateRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// IssueCertificateWithContext is the same as IssueCertificate with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See IssueCertificate for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) IssueCertificateWithContext(ctx aws.Context, input *IssueCertificateInput, opts ...request.Option) (*IssueCertificateOutput, error) {
|
|
req, out := c.IssueCertificateRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opListCertificateAuthorities = "ListCertificateAuthorities"
|
|
|
|
// ListCertificateAuthoritiesRequest generates a "aws/request.Request" representing the
|
|
// client's request for the ListCertificateAuthorities operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See ListCertificateAuthorities for more information on using the ListCertificateAuthorities
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the ListCertificateAuthoritiesRequest method.
|
|
// req, resp := client.ListCertificateAuthoritiesRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/ListCertificateAuthorities
|
|
func (c *ACMPCA) ListCertificateAuthoritiesRequest(input *ListCertificateAuthoritiesInput) (req *request.Request, output *ListCertificateAuthoritiesOutput) {
|
|
op := &request.Operation{
|
|
Name: opListCertificateAuthorities,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
Paginator: &request.Paginator{
|
|
InputTokens: []string{"NextToken"},
|
|
OutputTokens: []string{"NextToken"},
|
|
LimitToken: "MaxResults",
|
|
TruncationToken: "",
|
|
},
|
|
}
|
|
|
|
if input == nil {
|
|
input = &ListCertificateAuthoritiesInput{}
|
|
}
|
|
|
|
output = &ListCertificateAuthoritiesOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// ListCertificateAuthorities API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Lists the private certificate authorities that you created by using the CreateCertificateAuthority
|
|
// action.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation ListCertificateAuthorities for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeInvalidNextTokenException "InvalidNextTokenException"
|
|
// The token specified in the NextToken argument is not valid. Use the token
|
|
// returned from your previous call to ListCertificateAuthorities.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/ListCertificateAuthorities
|
|
func (c *ACMPCA) ListCertificateAuthorities(input *ListCertificateAuthoritiesInput) (*ListCertificateAuthoritiesOutput, error) {
|
|
req, out := c.ListCertificateAuthoritiesRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// ListCertificateAuthoritiesWithContext is the same as ListCertificateAuthorities with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See ListCertificateAuthorities for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) ListCertificateAuthoritiesWithContext(ctx aws.Context, input *ListCertificateAuthoritiesInput, opts ...request.Option) (*ListCertificateAuthoritiesOutput, error) {
|
|
req, out := c.ListCertificateAuthoritiesRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// ListCertificateAuthoritiesPages iterates over the pages of a ListCertificateAuthorities operation,
|
|
// calling the "fn" function with the response data for each page. To stop
|
|
// iterating, return false from the fn function.
|
|
//
|
|
// See ListCertificateAuthorities method for more information on how to use this operation.
|
|
//
|
|
// Note: This operation can generate multiple requests to a service.
|
|
//
|
|
// // Example iterating over at most 3 pages of a ListCertificateAuthorities operation.
|
|
// pageNum := 0
|
|
// err := client.ListCertificateAuthoritiesPages(params,
|
|
// func(page *acmpca.ListCertificateAuthoritiesOutput, lastPage bool) bool {
|
|
// pageNum++
|
|
// fmt.Println(page)
|
|
// return pageNum <= 3
|
|
// })
|
|
//
|
|
func (c *ACMPCA) ListCertificateAuthoritiesPages(input *ListCertificateAuthoritiesInput, fn func(*ListCertificateAuthoritiesOutput, bool) bool) error {
|
|
return c.ListCertificateAuthoritiesPagesWithContext(aws.BackgroundContext(), input, fn)
|
|
}
|
|
|
|
// ListCertificateAuthoritiesPagesWithContext same as ListCertificateAuthoritiesPages except
|
|
// it takes a Context and allows setting request options on the pages.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) ListCertificateAuthoritiesPagesWithContext(ctx aws.Context, input *ListCertificateAuthoritiesInput, fn func(*ListCertificateAuthoritiesOutput, bool) bool, opts ...request.Option) error {
|
|
p := request.Pagination{
|
|
NewRequest: func() (*request.Request, error) {
|
|
var inCpy *ListCertificateAuthoritiesInput
|
|
if input != nil {
|
|
tmp := *input
|
|
inCpy = &tmp
|
|
}
|
|
req, _ := c.ListCertificateAuthoritiesRequest(inCpy)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return req, nil
|
|
},
|
|
}
|
|
|
|
cont := true
|
|
for p.Next() && cont {
|
|
cont = fn(p.Page().(*ListCertificateAuthoritiesOutput), !p.HasNextPage())
|
|
}
|
|
return p.Err()
|
|
}
|
|
|
|
const opListPermissions = "ListPermissions"
|
|
|
|
// ListPermissionsRequest generates a "aws/request.Request" representing the
|
|
// client's request for the ListPermissions operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See ListPermissions for more information on using the ListPermissions
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the ListPermissionsRequest method.
|
|
// req, resp := client.ListPermissionsRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/ListPermissions
|
|
func (c *ACMPCA) ListPermissionsRequest(input *ListPermissionsInput) (req *request.Request, output *ListPermissionsOutput) {
|
|
op := &request.Operation{
|
|
Name: opListPermissions,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
Paginator: &request.Paginator{
|
|
InputTokens: []string{"NextToken"},
|
|
OutputTokens: []string{"NextToken"},
|
|
LimitToken: "MaxResults",
|
|
TruncationToken: "",
|
|
},
|
|
}
|
|
|
|
if input == nil {
|
|
input = &ListPermissionsInput{}
|
|
}
|
|
|
|
output = &ListPermissionsOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// ListPermissions API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Lists all the permissions, if any, that have been assigned by a private CA.
|
|
// Permissions can be granted with the CreatePermission action and revoked with
|
|
// the DeletePermission action.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation ListPermissions for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidNextTokenException "InvalidNextTokenException"
|
|
// The token specified in the NextToken argument is not valid. Use the token
|
|
// returned from your previous call to ListCertificateAuthorities.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeRequestFailedException "RequestFailedException"
|
|
// The request has failed for an unspecified reason.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/ListPermissions
|
|
func (c *ACMPCA) ListPermissions(input *ListPermissionsInput) (*ListPermissionsOutput, error) {
|
|
req, out := c.ListPermissionsRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// ListPermissionsWithContext is the same as ListPermissions with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See ListPermissions for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) ListPermissionsWithContext(ctx aws.Context, input *ListPermissionsInput, opts ...request.Option) (*ListPermissionsOutput, error) {
|
|
req, out := c.ListPermissionsRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// ListPermissionsPages iterates over the pages of a ListPermissions operation,
|
|
// calling the "fn" function with the response data for each page. To stop
|
|
// iterating, return false from the fn function.
|
|
//
|
|
// See ListPermissions method for more information on how to use this operation.
|
|
//
|
|
// Note: This operation can generate multiple requests to a service.
|
|
//
|
|
// // Example iterating over at most 3 pages of a ListPermissions operation.
|
|
// pageNum := 0
|
|
// err := client.ListPermissionsPages(params,
|
|
// func(page *acmpca.ListPermissionsOutput, lastPage bool) bool {
|
|
// pageNum++
|
|
// fmt.Println(page)
|
|
// return pageNum <= 3
|
|
// })
|
|
//
|
|
func (c *ACMPCA) ListPermissionsPages(input *ListPermissionsInput, fn func(*ListPermissionsOutput, bool) bool) error {
|
|
return c.ListPermissionsPagesWithContext(aws.BackgroundContext(), input, fn)
|
|
}
|
|
|
|
// ListPermissionsPagesWithContext same as ListPermissionsPages except
|
|
// it takes a Context and allows setting request options on the pages.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) ListPermissionsPagesWithContext(ctx aws.Context, input *ListPermissionsInput, fn func(*ListPermissionsOutput, bool) bool, opts ...request.Option) error {
|
|
p := request.Pagination{
|
|
NewRequest: func() (*request.Request, error) {
|
|
var inCpy *ListPermissionsInput
|
|
if input != nil {
|
|
tmp := *input
|
|
inCpy = &tmp
|
|
}
|
|
req, _ := c.ListPermissionsRequest(inCpy)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return req, nil
|
|
},
|
|
}
|
|
|
|
cont := true
|
|
for p.Next() && cont {
|
|
cont = fn(p.Page().(*ListPermissionsOutput), !p.HasNextPage())
|
|
}
|
|
return p.Err()
|
|
}
|
|
|
|
const opListTags = "ListTags"
|
|
|
|
// ListTagsRequest generates a "aws/request.Request" representing the
|
|
// client's request for the ListTags operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See ListTags for more information on using the ListTags
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the ListTagsRequest method.
|
|
// req, resp := client.ListTagsRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/ListTags
|
|
func (c *ACMPCA) ListTagsRequest(input *ListTagsInput) (req *request.Request, output *ListTagsOutput) {
|
|
op := &request.Operation{
|
|
Name: opListTags,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
Paginator: &request.Paginator{
|
|
InputTokens: []string{"NextToken"},
|
|
OutputTokens: []string{"NextToken"},
|
|
LimitToken: "MaxResults",
|
|
TruncationToken: "",
|
|
},
|
|
}
|
|
|
|
if input == nil {
|
|
input = &ListTagsInput{}
|
|
}
|
|
|
|
output = &ListTagsOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
return
|
|
}
|
|
|
|
// ListTags API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Lists the tags, if any, that are associated with your private CA. Tags are
|
|
// labels that you can use to identify and organize your CAs. Each tag consists
|
|
// of a key and an optional value. Call the TagCertificateAuthority action to
|
|
// add one or more tags to your CA. Call the UntagCertificateAuthority action
|
|
// to remove tags.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation ListTags for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/ListTags
|
|
func (c *ACMPCA) ListTags(input *ListTagsInput) (*ListTagsOutput, error) {
|
|
req, out := c.ListTagsRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// ListTagsWithContext is the same as ListTags with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See ListTags for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) ListTagsWithContext(ctx aws.Context, input *ListTagsInput, opts ...request.Option) (*ListTagsOutput, error) {
|
|
req, out := c.ListTagsRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// ListTagsPages iterates over the pages of a ListTags operation,
|
|
// calling the "fn" function with the response data for each page. To stop
|
|
// iterating, return false from the fn function.
|
|
//
|
|
// See ListTags method for more information on how to use this operation.
|
|
//
|
|
// Note: This operation can generate multiple requests to a service.
|
|
//
|
|
// // Example iterating over at most 3 pages of a ListTags operation.
|
|
// pageNum := 0
|
|
// err := client.ListTagsPages(params,
|
|
// func(page *acmpca.ListTagsOutput, lastPage bool) bool {
|
|
// pageNum++
|
|
// fmt.Println(page)
|
|
// return pageNum <= 3
|
|
// })
|
|
//
|
|
func (c *ACMPCA) ListTagsPages(input *ListTagsInput, fn func(*ListTagsOutput, bool) bool) error {
|
|
return c.ListTagsPagesWithContext(aws.BackgroundContext(), input, fn)
|
|
}
|
|
|
|
// ListTagsPagesWithContext same as ListTagsPages except
|
|
// it takes a Context and allows setting request options on the pages.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) ListTagsPagesWithContext(ctx aws.Context, input *ListTagsInput, fn func(*ListTagsOutput, bool) bool, opts ...request.Option) error {
|
|
p := request.Pagination{
|
|
NewRequest: func() (*request.Request, error) {
|
|
var inCpy *ListTagsInput
|
|
if input != nil {
|
|
tmp := *input
|
|
inCpy = &tmp
|
|
}
|
|
req, _ := c.ListTagsRequest(inCpy)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return req, nil
|
|
},
|
|
}
|
|
|
|
cont := true
|
|
for p.Next() && cont {
|
|
cont = fn(p.Page().(*ListTagsOutput), !p.HasNextPage())
|
|
}
|
|
return p.Err()
|
|
}
|
|
|
|
const opRestoreCertificateAuthority = "RestoreCertificateAuthority"
|
|
|
|
// RestoreCertificateAuthorityRequest generates a "aws/request.Request" representing the
|
|
// client's request for the RestoreCertificateAuthority operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See RestoreCertificateAuthority for more information on using the RestoreCertificateAuthority
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the RestoreCertificateAuthorityRequest method.
|
|
// req, resp := client.RestoreCertificateAuthorityRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/RestoreCertificateAuthority
|
|
func (c *ACMPCA) RestoreCertificateAuthorityRequest(input *RestoreCertificateAuthorityInput) (req *request.Request, output *RestoreCertificateAuthorityOutput) {
|
|
op := &request.Operation{
|
|
Name: opRestoreCertificateAuthority,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &RestoreCertificateAuthorityInput{}
|
|
}
|
|
|
|
output = &RestoreCertificateAuthorityOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// RestoreCertificateAuthority API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Restores a certificate authority (CA) that is in the DELETED state. You can
|
|
// restore a CA during the period that you defined in the PermanentDeletionTimeInDays
|
|
// parameter of the DeleteCertificateAuthority action. Currently, you can specify
|
|
// 7 to 30 days. If you did not specify a PermanentDeletionTimeInDays value,
|
|
// by default you can restore the CA at any time in a 30 day period. You can
|
|
// check the time remaining in the restoration period of a private CA in the
|
|
// DELETED state by calling the DescribeCertificateAuthority or ListCertificateAuthorities
|
|
// actions. The status of a restored CA is set to its pre-deletion status when
|
|
// the RestoreCertificateAuthority action returns. To change its status to ACTIVE,
|
|
// call the UpdateCertificateAuthority action. If the private CA was in the
|
|
// PENDING_CERTIFICATE state at deletion, you must use the ImportCertificateAuthorityCertificate
|
|
// action to import a certificate authority into the private CA before it can
|
|
// be activated. You cannot restore a CA after the restoration period has ended.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation RestoreCertificateAuthority for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/RestoreCertificateAuthority
|
|
func (c *ACMPCA) RestoreCertificateAuthority(input *RestoreCertificateAuthorityInput) (*RestoreCertificateAuthorityOutput, error) {
|
|
req, out := c.RestoreCertificateAuthorityRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// RestoreCertificateAuthorityWithContext is the same as RestoreCertificateAuthority with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See RestoreCertificateAuthority for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) RestoreCertificateAuthorityWithContext(ctx aws.Context, input *RestoreCertificateAuthorityInput, opts ...request.Option) (*RestoreCertificateAuthorityOutput, error) {
|
|
req, out := c.RestoreCertificateAuthorityRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opRevokeCertificate = "RevokeCertificate"
|
|
|
|
// RevokeCertificateRequest generates a "aws/request.Request" representing the
|
|
// client's request for the RevokeCertificate operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See RevokeCertificate for more information on using the RevokeCertificate
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the RevokeCertificateRequest method.
|
|
// req, resp := client.RevokeCertificateRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/RevokeCertificate
|
|
func (c *ACMPCA) RevokeCertificateRequest(input *RevokeCertificateInput) (req *request.Request, output *RevokeCertificateOutput) {
|
|
op := &request.Operation{
|
|
Name: opRevokeCertificate,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &RevokeCertificateInput{}
|
|
}
|
|
|
|
output = &RevokeCertificateOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// RevokeCertificate API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Revokes a certificate that was issued inside ACM Private CA. If you enable
|
|
// a certificate revocation list (CRL) when you create or update your private
|
|
// CA, information about the revoked certificates will be included in the CRL.
|
|
// ACM Private CA writes the CRL to an S3 bucket that you specify. For more
|
|
// information about revocation, see the CrlConfiguration structure. ACM Private
|
|
// CA also writes revocation information to the audit report. For more information,
|
|
// see CreateCertificateAuthorityAuditReport.
|
|
//
|
|
// You cannot revoke a root CA self-signed certificate.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation RevokeCertificate for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeConcurrentModificationException "ConcurrentModificationException"
|
|
// A previous update to your private CA is still ongoing.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidRequestException "InvalidRequestException"
|
|
// The request action cannot be performed or is prohibited.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeLimitExceededException "LimitExceededException"
|
|
// An ACM Private CA limit has been exceeded. See the exception message returned
|
|
// to determine the limit that was exceeded.
|
|
//
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeRequestAlreadyProcessedException "RequestAlreadyProcessedException"
|
|
// Your request has already been completed.
|
|
//
|
|
// * ErrCodeRequestInProgressException "RequestInProgressException"
|
|
// Your request is already in progress.
|
|
//
|
|
// * ErrCodeRequestFailedException "RequestFailedException"
|
|
// The request has failed for an unspecified reason.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/RevokeCertificate
|
|
func (c *ACMPCA) RevokeCertificate(input *RevokeCertificateInput) (*RevokeCertificateOutput, error) {
|
|
req, out := c.RevokeCertificateRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// RevokeCertificateWithContext is the same as RevokeCertificate with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See RevokeCertificate for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) RevokeCertificateWithContext(ctx aws.Context, input *RevokeCertificateInput, opts ...request.Option) (*RevokeCertificateOutput, error) {
|
|
req, out := c.RevokeCertificateRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opTagCertificateAuthority = "TagCertificateAuthority"
|
|
|
|
// TagCertificateAuthorityRequest generates a "aws/request.Request" representing the
|
|
// client's request for the TagCertificateAuthority operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See TagCertificateAuthority for more information on using the TagCertificateAuthority
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the TagCertificateAuthorityRequest method.
|
|
// req, resp := client.TagCertificateAuthorityRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/TagCertificateAuthority
|
|
func (c *ACMPCA) TagCertificateAuthorityRequest(input *TagCertificateAuthorityInput) (req *request.Request, output *TagCertificateAuthorityOutput) {
|
|
op := &request.Operation{
|
|
Name: opTagCertificateAuthority,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &TagCertificateAuthorityInput{}
|
|
}
|
|
|
|
output = &TagCertificateAuthorityOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// TagCertificateAuthority API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Adds one or more tags to your private CA. Tags are labels that you can use
|
|
// to identify and organize your AWS resources. Each tag consists of a key and
|
|
// an optional value. You specify the private CA on input by its Amazon Resource
|
|
// Name (ARN). You specify the tag by using a key-value pair. You can apply
|
|
// a tag to just one private CA if you want to identify a specific characteristic
|
|
// of that CA, or you can apply the same tag to multiple private CAs if you
|
|
// want to filter for a common relationship among those CAs. To remove one or
|
|
// more tags, use the UntagCertificateAuthority action. Call the ListTags action
|
|
// to see what tags are associated with your CA.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation TagCertificateAuthority for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeInvalidTagException "InvalidTagException"
|
|
// The tag associated with the CA is not valid. The invalid argument is contained
|
|
// in the message field.
|
|
//
|
|
// * ErrCodeTooManyTagsException "TooManyTagsException"
|
|
// You can associate up to 50 tags with a private CA. Exception information
|
|
// is contained in the exception message field.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/TagCertificateAuthority
|
|
func (c *ACMPCA) TagCertificateAuthority(input *TagCertificateAuthorityInput) (*TagCertificateAuthorityOutput, error) {
|
|
req, out := c.TagCertificateAuthorityRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// TagCertificateAuthorityWithContext is the same as TagCertificateAuthority with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See TagCertificateAuthority for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) TagCertificateAuthorityWithContext(ctx aws.Context, input *TagCertificateAuthorityInput, opts ...request.Option) (*TagCertificateAuthorityOutput, error) {
|
|
req, out := c.TagCertificateAuthorityRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opUntagCertificateAuthority = "UntagCertificateAuthority"
|
|
|
|
// UntagCertificateAuthorityRequest generates a "aws/request.Request" representing the
|
|
// client's request for the UntagCertificateAuthority operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See UntagCertificateAuthority for more information on using the UntagCertificateAuthority
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the UntagCertificateAuthorityRequest method.
|
|
// req, resp := client.UntagCertificateAuthorityRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/UntagCertificateAuthority
|
|
func (c *ACMPCA) UntagCertificateAuthorityRequest(input *UntagCertificateAuthorityInput) (req *request.Request, output *UntagCertificateAuthorityOutput) {
|
|
op := &request.Operation{
|
|
Name: opUntagCertificateAuthority,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &UntagCertificateAuthorityInput{}
|
|
}
|
|
|
|
output = &UntagCertificateAuthorityOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// UntagCertificateAuthority API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Remove one or more tags from your private CA. A tag consists of a key-value
|
|
// pair. If you do not specify the value portion of the tag when calling this
|
|
// action, the tag will be removed regardless of value. If you specify a value,
|
|
// the tag is removed only if it is associated with the specified value. To
|
|
// add tags to a private CA, use the TagCertificateAuthority. Call the ListTags
|
|
// action to see what tags are associated with your CA.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation UntagCertificateAuthority for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeInvalidTagException "InvalidTagException"
|
|
// The tag associated with the CA is not valid. The invalid argument is contained
|
|
// in the message field.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/UntagCertificateAuthority
|
|
func (c *ACMPCA) UntagCertificateAuthority(input *UntagCertificateAuthorityInput) (*UntagCertificateAuthorityOutput, error) {
|
|
req, out := c.UntagCertificateAuthorityRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// UntagCertificateAuthorityWithContext is the same as UntagCertificateAuthority with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See UntagCertificateAuthority for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) UntagCertificateAuthorityWithContext(ctx aws.Context, input *UntagCertificateAuthorityInput, opts ...request.Option) (*UntagCertificateAuthorityOutput, error) {
|
|
req, out := c.UntagCertificateAuthorityRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
const opUpdateCertificateAuthority = "UpdateCertificateAuthority"
|
|
|
|
// UpdateCertificateAuthorityRequest generates a "aws/request.Request" representing the
|
|
// client's request for the UpdateCertificateAuthority operation. The "output" return
|
|
// value will be populated with the request's response once the request completes
|
|
// successfully.
|
|
//
|
|
// Use "Send" method on the returned Request to send the API call to the service.
|
|
// the "output" return value is not valid until after Send returns without error.
|
|
//
|
|
// See UpdateCertificateAuthority for more information on using the UpdateCertificateAuthority
|
|
// API call, and error handling.
|
|
//
|
|
// This method is useful when you want to inject custom logic or configuration
|
|
// into the SDK's request lifecycle. Such as custom headers, or retry logic.
|
|
//
|
|
//
|
|
// // Example sending a request using the UpdateCertificateAuthorityRequest method.
|
|
// req, resp := client.UpdateCertificateAuthorityRequest(params)
|
|
//
|
|
// err := req.Send()
|
|
// if err == nil { // resp is now filled
|
|
// fmt.Println(resp)
|
|
// }
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/UpdateCertificateAuthority
|
|
func (c *ACMPCA) UpdateCertificateAuthorityRequest(input *UpdateCertificateAuthorityInput) (req *request.Request, output *UpdateCertificateAuthorityOutput) {
|
|
op := &request.Operation{
|
|
Name: opUpdateCertificateAuthority,
|
|
HTTPMethod: "POST",
|
|
HTTPPath: "/",
|
|
}
|
|
|
|
if input == nil {
|
|
input = &UpdateCertificateAuthorityInput{}
|
|
}
|
|
|
|
output = &UpdateCertificateAuthorityOutput{}
|
|
req = c.newRequest(op, input, output)
|
|
req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
|
|
return
|
|
}
|
|
|
|
// UpdateCertificateAuthority API operation for AWS Certificate Manager Private Certificate Authority.
|
|
//
|
|
// Updates the status or configuration of a private certificate authority (CA).
|
|
// Your private CA must be in the ACTIVE or DISABLED state before you can update
|
|
// it. You can disable a private CA that is in the ACTIVE state or make a CA
|
|
// that is in the DISABLED state active again.
|
|
//
|
|
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
|
// with awserr.Error's Code and Message methods to get detailed information about
|
|
// the error.
|
|
//
|
|
// See the AWS API reference guide for AWS Certificate Manager Private Certificate Authority's
|
|
// API operation UpdateCertificateAuthority for usage and error information.
|
|
//
|
|
// Returned Error Codes:
|
|
// * ErrCodeConcurrentModificationException "ConcurrentModificationException"
|
|
// A previous update to your private CA is still ongoing.
|
|
//
|
|
// * ErrCodeResourceNotFoundException "ResourceNotFoundException"
|
|
// A resource such as a private CA, S3 bucket, certificate, or audit report
|
|
// cannot be found.
|
|
//
|
|
// * ErrCodeInvalidArgsException "InvalidArgsException"
|
|
// One or more of the specified arguments was not valid.
|
|
//
|
|
// * ErrCodeInvalidArnException "InvalidArnException"
|
|
// The requested Amazon Resource Name (ARN) does not refer to an existing resource.
|
|
//
|
|
// * ErrCodeInvalidStateException "InvalidStateException"
|
|
// The private CA is in a state during which a report or certificate cannot
|
|
// be generated.
|
|
//
|
|
// * ErrCodeInvalidPolicyException "InvalidPolicyException"
|
|
// The S3 bucket policy is not valid. The policy must give ACM Private CA rights
|
|
// to read from and write to the bucket and find the bucket location.
|
|
//
|
|
// See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/UpdateCertificateAuthority
|
|
func (c *ACMPCA) UpdateCertificateAuthority(input *UpdateCertificateAuthorityInput) (*UpdateCertificateAuthorityOutput, error) {
|
|
req, out := c.UpdateCertificateAuthorityRequest(input)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// UpdateCertificateAuthorityWithContext is the same as UpdateCertificateAuthority with the addition of
|
|
// the ability to pass a context and additional request options.
|
|
//
|
|
// See UpdateCertificateAuthority for details on how to use this API operation.
|
|
//
|
|
// The context must be non-nil and will be used for request cancellation. If
|
|
// the context is nil a panic will occur. In the future the SDK may create
|
|
// sub-contexts for http.Requests. See https://golang.org/pkg/context/
|
|
// for more information on using Contexts.
|
|
func (c *ACMPCA) UpdateCertificateAuthorityWithContext(ctx aws.Context, input *UpdateCertificateAuthorityInput, opts ...request.Option) (*UpdateCertificateAuthorityOutput, error) {
|
|
req, out := c.UpdateCertificateAuthorityRequest(input)
|
|
req.SetContext(ctx)
|
|
req.ApplyOptions(opts...)
|
|
return out, req.Send()
|
|
}
|
|
|
|
// Contains information about the certificate subject. The certificate can be
|
|
// one issued by your private certificate authority (CA) or it can be your private
|
|
// CA certificate. The Subject field in the certificate identifies the entity
|
|
// that owns or controls the public key in the certificate. The entity can be
|
|
// a user, computer, device, or service. The Subject must contain an X.500 distinguished
|
|
// name (DN). A DN is a sequence of relative distinguished names (RDNs). The
|
|
// RDNs are separated by commas in the certificate. The DN must be unique for
|
|
// each entity, but your private CA can issue more than one certificate with
|
|
// the same DN to the same entity.
|
|
type ASN1Subject struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Fully qualified domain name (FQDN) associated with the certificate subject.
|
|
CommonName *string `type:"string"`
|
|
|
|
// Two-digit code that specifies the country in which the certificate subject
|
|
// located.
|
|
Country *string `type:"string"`
|
|
|
|
// Disambiguating information for the certificate subject.
|
|
DistinguishedNameQualifier *string `type:"string"`
|
|
|
|
// Typically a qualifier appended to the name of an individual. Examples include
|
|
// Jr. for junior, Sr. for senior, and III for third.
|
|
GenerationQualifier *string `type:"string"`
|
|
|
|
// First name.
|
|
GivenName *string `type:"string"`
|
|
|
|
// Concatenation that typically contains the first letter of the GivenName,
|
|
// the first letter of the middle name if one exists, and the first letter of
|
|
// the SurName.
|
|
Initials *string `type:"string"`
|
|
|
|
// The locality (such as a city or town) in which the certificate subject is
|
|
// located.
|
|
Locality *string `type:"string"`
|
|
|
|
// Legal name of the organization with which the certificate subject is affiliated.
|
|
Organization *string `type:"string"`
|
|
|
|
// A subdivision or unit of the organization (such as sales or finance) with
|
|
// which the certificate subject is affiliated.
|
|
OrganizationalUnit *string `type:"string"`
|
|
|
|
// Typically a shortened version of a longer GivenName. For example, Jonathan
|
|
// is often shortened to John. Elizabeth is often shortened to Beth, Liz, or
|
|
// Eliza.
|
|
Pseudonym *string `type:"string"`
|
|
|
|
// The certificate serial number.
|
|
SerialNumber *string `type:"string"`
|
|
|
|
// State in which the subject of the certificate is located.
|
|
State *string `type:"string"`
|
|
|
|
// Family name. In the US and the UK, for example, the surname of an individual
|
|
// is ordered last. In Asian cultures the surname is typically ordered first.
|
|
Surname *string `type:"string"`
|
|
|
|
// A title such as Mr. or Ms., which is pre-pended to the name to refer formally
|
|
// to the certificate subject.
|
|
Title *string `type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ASN1Subject) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ASN1Subject) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetCommonName sets the CommonName field's value.
|
|
func (s *ASN1Subject) SetCommonName(v string) *ASN1Subject {
|
|
s.CommonName = &v
|
|
return s
|
|
}
|
|
|
|
// SetCountry sets the Country field's value.
|
|
func (s *ASN1Subject) SetCountry(v string) *ASN1Subject {
|
|
s.Country = &v
|
|
return s
|
|
}
|
|
|
|
// SetDistinguishedNameQualifier sets the DistinguishedNameQualifier field's value.
|
|
func (s *ASN1Subject) SetDistinguishedNameQualifier(v string) *ASN1Subject {
|
|
s.DistinguishedNameQualifier = &v
|
|
return s
|
|
}
|
|
|
|
// SetGenerationQualifier sets the GenerationQualifier field's value.
|
|
func (s *ASN1Subject) SetGenerationQualifier(v string) *ASN1Subject {
|
|
s.GenerationQualifier = &v
|
|
return s
|
|
}
|
|
|
|
// SetGivenName sets the GivenName field's value.
|
|
func (s *ASN1Subject) SetGivenName(v string) *ASN1Subject {
|
|
s.GivenName = &v
|
|
return s
|
|
}
|
|
|
|
// SetInitials sets the Initials field's value.
|
|
func (s *ASN1Subject) SetInitials(v string) *ASN1Subject {
|
|
s.Initials = &v
|
|
return s
|
|
}
|
|
|
|
// SetLocality sets the Locality field's value.
|
|
func (s *ASN1Subject) SetLocality(v string) *ASN1Subject {
|
|
s.Locality = &v
|
|
return s
|
|
}
|
|
|
|
// SetOrganization sets the Organization field's value.
|
|
func (s *ASN1Subject) SetOrganization(v string) *ASN1Subject {
|
|
s.Organization = &v
|
|
return s
|
|
}
|
|
|
|
// SetOrganizationalUnit sets the OrganizationalUnit field's value.
|
|
func (s *ASN1Subject) SetOrganizationalUnit(v string) *ASN1Subject {
|
|
s.OrganizationalUnit = &v
|
|
return s
|
|
}
|
|
|
|
// SetPseudonym sets the Pseudonym field's value.
|
|
func (s *ASN1Subject) SetPseudonym(v string) *ASN1Subject {
|
|
s.Pseudonym = &v
|
|
return s
|
|
}
|
|
|
|
// SetSerialNumber sets the SerialNumber field's value.
|
|
func (s *ASN1Subject) SetSerialNumber(v string) *ASN1Subject {
|
|
s.SerialNumber = &v
|
|
return s
|
|
}
|
|
|
|
// SetState sets the State field's value.
|
|
func (s *ASN1Subject) SetState(v string) *ASN1Subject {
|
|
s.State = &v
|
|
return s
|
|
}
|
|
|
|
// SetSurname sets the Surname field's value.
|
|
func (s *ASN1Subject) SetSurname(v string) *ASN1Subject {
|
|
s.Surname = &v
|
|
return s
|
|
}
|
|
|
|
// SetTitle sets the Title field's value.
|
|
func (s *ASN1Subject) SetTitle(v string) *ASN1Subject {
|
|
s.Title = &v
|
|
return s
|
|
}
|
|
|
|
// Contains information about your private certificate authority (CA). Your
|
|
// private CA can issue and revoke X.509 digital certificates. Digital certificates
|
|
// verify that the entity named in the certificate Subject field owns or controls
|
|
// the public key contained in the Subject Public Key Info field. Call the CreateCertificateAuthority
|
|
// action to create your private CA. You must then call the GetCertificateAuthorityCertificate
|
|
// action to retrieve a private CA certificate signing request (CSR). Sign the
|
|
// CSR with your ACM Private CA-hosted or on-premises root or subordinate CA
|
|
// certificate. Call the ImportCertificateAuthorityCertificate action to import
|
|
// the signed certificate into AWS Certificate Manager (ACM).
|
|
type CertificateAuthority struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Amazon Resource Name (ARN) for your private certificate authority (CA). The
|
|
// format is 12345678-1234-1234-1234-123456789012 .
|
|
Arn *string `min:"5" type:"string"`
|
|
|
|
// Your private CA configuration.
|
|
CertificateAuthorityConfiguration *CertificateAuthorityConfiguration `type:"structure"`
|
|
|
|
// Date and time at which your private CA was created.
|
|
CreatedAt *time.Time `type:"timestamp"`
|
|
|
|
// Reason the request to create your private CA failed.
|
|
FailureReason *string `type:"string" enum:"FailureReason"`
|
|
|
|
// Date and time at which your private CA was last updated.
|
|
LastStateChangeAt *time.Time `type:"timestamp"`
|
|
|
|
// Date and time after which your private CA certificate is not valid.
|
|
NotAfter *time.Time `type:"timestamp"`
|
|
|
|
// Date and time before which your private CA certificate is not valid.
|
|
NotBefore *time.Time `type:"timestamp"`
|
|
|
|
// The period during which a deleted CA can be restored. For more information,
|
|
// see the PermanentDeletionTimeInDays parameter of the DeleteCertificateAuthorityRequest
|
|
// action.
|
|
RestorableUntil *time.Time `type:"timestamp"`
|
|
|
|
// Information about the certificate revocation list (CRL) created and maintained
|
|
// by your private CA.
|
|
RevocationConfiguration *RevocationConfiguration `type:"structure"`
|
|
|
|
// Serial number of your private CA.
|
|
Serial *string `type:"string"`
|
|
|
|
// Status of your private CA.
|
|
Status *string `type:"string" enum:"CertificateAuthorityStatus"`
|
|
|
|
// Type of your private CA.
|
|
Type *string `type:"string" enum:"CertificateAuthorityType"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CertificateAuthority) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CertificateAuthority) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetArn sets the Arn field's value.
|
|
func (s *CertificateAuthority) SetArn(v string) *CertificateAuthority {
|
|
s.Arn = &v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateAuthorityConfiguration sets the CertificateAuthorityConfiguration field's value.
|
|
func (s *CertificateAuthority) SetCertificateAuthorityConfiguration(v *CertificateAuthorityConfiguration) *CertificateAuthority {
|
|
s.CertificateAuthorityConfiguration = v
|
|
return s
|
|
}
|
|
|
|
// SetCreatedAt sets the CreatedAt field's value.
|
|
func (s *CertificateAuthority) SetCreatedAt(v time.Time) *CertificateAuthority {
|
|
s.CreatedAt = &v
|
|
return s
|
|
}
|
|
|
|
// SetFailureReason sets the FailureReason field's value.
|
|
func (s *CertificateAuthority) SetFailureReason(v string) *CertificateAuthority {
|
|
s.FailureReason = &v
|
|
return s
|
|
}
|
|
|
|
// SetLastStateChangeAt sets the LastStateChangeAt field's value.
|
|
func (s *CertificateAuthority) SetLastStateChangeAt(v time.Time) *CertificateAuthority {
|
|
s.LastStateChangeAt = &v
|
|
return s
|
|
}
|
|
|
|
// SetNotAfter sets the NotAfter field's value.
|
|
func (s *CertificateAuthority) SetNotAfter(v time.Time) *CertificateAuthority {
|
|
s.NotAfter = &v
|
|
return s
|
|
}
|
|
|
|
// SetNotBefore sets the NotBefore field's value.
|
|
func (s *CertificateAuthority) SetNotBefore(v time.Time) *CertificateAuthority {
|
|
s.NotBefore = &v
|
|
return s
|
|
}
|
|
|
|
// SetRestorableUntil sets the RestorableUntil field's value.
|
|
func (s *CertificateAuthority) SetRestorableUntil(v time.Time) *CertificateAuthority {
|
|
s.RestorableUntil = &v
|
|
return s
|
|
}
|
|
|
|
// SetRevocationConfiguration sets the RevocationConfiguration field's value.
|
|
func (s *CertificateAuthority) SetRevocationConfiguration(v *RevocationConfiguration) *CertificateAuthority {
|
|
s.RevocationConfiguration = v
|
|
return s
|
|
}
|
|
|
|
// SetSerial sets the Serial field's value.
|
|
func (s *CertificateAuthority) SetSerial(v string) *CertificateAuthority {
|
|
s.Serial = &v
|
|
return s
|
|
}
|
|
|
|
// SetStatus sets the Status field's value.
|
|
func (s *CertificateAuthority) SetStatus(v string) *CertificateAuthority {
|
|
s.Status = &v
|
|
return s
|
|
}
|
|
|
|
// SetType sets the Type field's value.
|
|
func (s *CertificateAuthority) SetType(v string) *CertificateAuthority {
|
|
s.Type = &v
|
|
return s
|
|
}
|
|
|
|
// Contains configuration information for your private certificate authority
|
|
// (CA). This includes information about the class of public key algorithm and
|
|
// the key pair that your private CA creates when it issues a certificate. It
|
|
// also includes the signature algorithm that it uses when issuing certificates,
|
|
// and its X.500 distinguished name. You must specify this information when
|
|
// you call the CreateCertificateAuthority action.
|
|
type CertificateAuthorityConfiguration struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Type of the public key algorithm and size, in bits, of the key pair that
|
|
// your CA creates when it issues a certificate. When you create a subordinate
|
|
// CA, you must use a key algorithm supported by the parent CA.
|
|
//
|
|
// KeyAlgorithm is a required field
|
|
KeyAlgorithm *string `type:"string" required:"true" enum:"KeyAlgorithm"`
|
|
|
|
// Name of the algorithm your private CA uses to sign certificate requests.
|
|
//
|
|
// SigningAlgorithm is a required field
|
|
SigningAlgorithm *string `type:"string" required:"true" enum:"SigningAlgorithm"`
|
|
|
|
// Structure that contains X.500 distinguished name information for your private
|
|
// CA.
|
|
//
|
|
// Subject is a required field
|
|
Subject *ASN1Subject `type:"structure" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CertificateAuthorityConfiguration) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CertificateAuthorityConfiguration) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *CertificateAuthorityConfiguration) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "CertificateAuthorityConfiguration"}
|
|
if s.KeyAlgorithm == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("KeyAlgorithm"))
|
|
}
|
|
if s.SigningAlgorithm == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("SigningAlgorithm"))
|
|
}
|
|
if s.Subject == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Subject"))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetKeyAlgorithm sets the KeyAlgorithm field's value.
|
|
func (s *CertificateAuthorityConfiguration) SetKeyAlgorithm(v string) *CertificateAuthorityConfiguration {
|
|
s.KeyAlgorithm = &v
|
|
return s
|
|
}
|
|
|
|
// SetSigningAlgorithm sets the SigningAlgorithm field's value.
|
|
func (s *CertificateAuthorityConfiguration) SetSigningAlgorithm(v string) *CertificateAuthorityConfiguration {
|
|
s.SigningAlgorithm = &v
|
|
return s
|
|
}
|
|
|
|
// SetSubject sets the Subject field's value.
|
|
func (s *CertificateAuthorityConfiguration) SetSubject(v *ASN1Subject) *CertificateAuthorityConfiguration {
|
|
s.Subject = v
|
|
return s
|
|
}
|
|
|
|
type CreateCertificateAuthorityAuditReportInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The format in which to create the report. This can be either JSON or CSV.
|
|
//
|
|
// AuditReportResponseFormat is a required field
|
|
AuditReportResponseFormat *string `type:"string" required:"true" enum:"AuditReportResponseFormat"`
|
|
|
|
// The Amazon Resource Name (ARN) of the CA to be audited. This is of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// The name of the S3 bucket that will contain the audit report.
|
|
//
|
|
// S3BucketName is a required field
|
|
S3BucketName *string `type:"string" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CreateCertificateAuthorityAuditReportInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CreateCertificateAuthorityAuditReportInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *CreateCertificateAuthorityAuditReportInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "CreateCertificateAuthorityAuditReportInput"}
|
|
if s.AuditReportResponseFormat == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("AuditReportResponseFormat"))
|
|
}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.S3BucketName == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("S3BucketName"))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetAuditReportResponseFormat sets the AuditReportResponseFormat field's value.
|
|
func (s *CreateCertificateAuthorityAuditReportInput) SetAuditReportResponseFormat(v string) *CreateCertificateAuthorityAuditReportInput {
|
|
s.AuditReportResponseFormat = &v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *CreateCertificateAuthorityAuditReportInput) SetCertificateAuthorityArn(v string) *CreateCertificateAuthorityAuditReportInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetS3BucketName sets the S3BucketName field's value.
|
|
func (s *CreateCertificateAuthorityAuditReportInput) SetS3BucketName(v string) *CreateCertificateAuthorityAuditReportInput {
|
|
s.S3BucketName = &v
|
|
return s
|
|
}
|
|
|
|
type CreateCertificateAuthorityAuditReportOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// An alphanumeric string that contains a report identifier.
|
|
AuditReportId *string `min:"36" type:"string"`
|
|
|
|
// The key that uniquely identifies the report file in your S3 bucket.
|
|
S3Key *string `type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CreateCertificateAuthorityAuditReportOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CreateCertificateAuthorityAuditReportOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetAuditReportId sets the AuditReportId field's value.
|
|
func (s *CreateCertificateAuthorityAuditReportOutput) SetAuditReportId(v string) *CreateCertificateAuthorityAuditReportOutput {
|
|
s.AuditReportId = &v
|
|
return s
|
|
}
|
|
|
|
// SetS3Key sets the S3Key field's value.
|
|
func (s *CreateCertificateAuthorityAuditReportOutput) SetS3Key(v string) *CreateCertificateAuthorityAuditReportOutput {
|
|
s.S3Key = &v
|
|
return s
|
|
}
|
|
|
|
type CreateCertificateAuthorityInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Name and bit size of the private key algorithm, the name of the signing algorithm,
|
|
// and X.500 certificate subject information.
|
|
//
|
|
// CertificateAuthorityConfiguration is a required field
|
|
CertificateAuthorityConfiguration *CertificateAuthorityConfiguration `type:"structure" required:"true"`
|
|
|
|
// The type of the certificate authority.
|
|
//
|
|
// CertificateAuthorityType is a required field
|
|
CertificateAuthorityType *string `type:"string" required:"true" enum:"CertificateAuthorityType"`
|
|
|
|
// Alphanumeric string that can be used to distinguish between calls to CreateCertificateAuthority.
|
|
// Idempotency tokens time out after five minutes. Therefore, if you call CreateCertificateAuthority
|
|
// multiple times with the same idempotency token within a five minute period,
|
|
// ACM Private CA recognizes that you are requesting only one certificate. As
|
|
// a result, ACM Private CA issues only one. If you change the idempotency token
|
|
// for each call, however, ACM Private CA recognizes that you are requesting
|
|
// multiple certificates.
|
|
IdempotencyToken *string `min:"1" type:"string"`
|
|
|
|
// Contains a Boolean value that you can use to enable a certification revocation
|
|
// list (CRL) for the CA, the name of the S3 bucket to which ACM Private CA
|
|
// will write the CRL, and an optional CNAME alias that you can use to hide
|
|
// the name of your bucket in the CRL Distribution Points extension of your
|
|
// CA certificate. For more information, see the CrlConfiguration structure.
|
|
RevocationConfiguration *RevocationConfiguration `type:"structure"`
|
|
|
|
// Key-value pairs that will be attached to the new private CA. You can associate
|
|
// up to 50 tags with a private CA. For information using tags with
|
|
//
|
|
// IAM to manage permissions, see Controlling Access Using IAM Tags (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_iam-tags.html).
|
|
Tags []*Tag `min:"1" type:"list"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CreateCertificateAuthorityInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CreateCertificateAuthorityInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *CreateCertificateAuthorityInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "CreateCertificateAuthorityInput"}
|
|
if s.CertificateAuthorityConfiguration == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityConfiguration"))
|
|
}
|
|
if s.CertificateAuthorityType == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityType"))
|
|
}
|
|
if s.IdempotencyToken != nil && len(*s.IdempotencyToken) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("IdempotencyToken", 1))
|
|
}
|
|
if s.Tags != nil && len(s.Tags) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("Tags", 1))
|
|
}
|
|
if s.CertificateAuthorityConfiguration != nil {
|
|
if err := s.CertificateAuthorityConfiguration.Validate(); err != nil {
|
|
invalidParams.AddNested("CertificateAuthorityConfiguration", err.(request.ErrInvalidParams))
|
|
}
|
|
}
|
|
if s.RevocationConfiguration != nil {
|
|
if err := s.RevocationConfiguration.Validate(); err != nil {
|
|
invalidParams.AddNested("RevocationConfiguration", err.(request.ErrInvalidParams))
|
|
}
|
|
}
|
|
if s.Tags != nil {
|
|
for i, v := range s.Tags {
|
|
if v == nil {
|
|
continue
|
|
}
|
|
if err := v.Validate(); err != nil {
|
|
invalidParams.AddNested(fmt.Sprintf("%s[%v]", "Tags", i), err.(request.ErrInvalidParams))
|
|
}
|
|
}
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityConfiguration sets the CertificateAuthorityConfiguration field's value.
|
|
func (s *CreateCertificateAuthorityInput) SetCertificateAuthorityConfiguration(v *CertificateAuthorityConfiguration) *CreateCertificateAuthorityInput {
|
|
s.CertificateAuthorityConfiguration = v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateAuthorityType sets the CertificateAuthorityType field's value.
|
|
func (s *CreateCertificateAuthorityInput) SetCertificateAuthorityType(v string) *CreateCertificateAuthorityInput {
|
|
s.CertificateAuthorityType = &v
|
|
return s
|
|
}
|
|
|
|
// SetIdempotencyToken sets the IdempotencyToken field's value.
|
|
func (s *CreateCertificateAuthorityInput) SetIdempotencyToken(v string) *CreateCertificateAuthorityInput {
|
|
s.IdempotencyToken = &v
|
|
return s
|
|
}
|
|
|
|
// SetRevocationConfiguration sets the RevocationConfiguration field's value.
|
|
func (s *CreateCertificateAuthorityInput) SetRevocationConfiguration(v *RevocationConfiguration) *CreateCertificateAuthorityInput {
|
|
s.RevocationConfiguration = v
|
|
return s
|
|
}
|
|
|
|
// SetTags sets the Tags field's value.
|
|
func (s *CreateCertificateAuthorityInput) SetTags(v []*Tag) *CreateCertificateAuthorityInput {
|
|
s.Tags = v
|
|
return s
|
|
}
|
|
|
|
type CreateCertificateAuthorityOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// If successful, the Amazon Resource Name (ARN) of the certificate authority
|
|
// (CA). This is of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
CertificateAuthorityArn *string `min:"5" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CreateCertificateAuthorityOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CreateCertificateAuthorityOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *CreateCertificateAuthorityOutput) SetCertificateAuthorityArn(v string) *CreateCertificateAuthorityOutput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
type CreatePermissionInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The actions that the specified AWS service principal can use. These include
|
|
// IssueCertificate, GetCertificate, and ListPermissions.
|
|
//
|
|
// Actions is a required field
|
|
Actions []*string `min:"1" type:"list" required:"true"`
|
|
|
|
// The Amazon Resource Name (ARN) of the CA that grants the permissions. You
|
|
// can find the ARN by calling the ListCertificateAuthorities action. This must
|
|
// have the following form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// The AWS service or identity that receives the permission. At this time, the
|
|
// only valid principal is acm.amazonaws.com.
|
|
//
|
|
// Principal is a required field
|
|
Principal *string `type:"string" required:"true"`
|
|
|
|
// The ID of the calling account.
|
|
SourceAccount *string `min:"12" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CreatePermissionInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CreatePermissionInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *CreatePermissionInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "CreatePermissionInput"}
|
|
if s.Actions == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Actions"))
|
|
}
|
|
if s.Actions != nil && len(s.Actions) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("Actions", 1))
|
|
}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.Principal == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Principal"))
|
|
}
|
|
if s.SourceAccount != nil && len(*s.SourceAccount) < 12 {
|
|
invalidParams.Add(request.NewErrParamMinLen("SourceAccount", 12))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetActions sets the Actions field's value.
|
|
func (s *CreatePermissionInput) SetActions(v []*string) *CreatePermissionInput {
|
|
s.Actions = v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *CreatePermissionInput) SetCertificateAuthorityArn(v string) *CreatePermissionInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetPrincipal sets the Principal field's value.
|
|
func (s *CreatePermissionInput) SetPrincipal(v string) *CreatePermissionInput {
|
|
s.Principal = &v
|
|
return s
|
|
}
|
|
|
|
// SetSourceAccount sets the SourceAccount field's value.
|
|
func (s *CreatePermissionInput) SetSourceAccount(v string) *CreatePermissionInput {
|
|
s.SourceAccount = &v
|
|
return s
|
|
}
|
|
|
|
type CreatePermissionOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CreatePermissionOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CreatePermissionOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Contains configuration information for a certificate revocation list (CRL).
|
|
// Your private certificate authority (CA) creates base CRLs. Delta CRLs are
|
|
// not supported. You can enable CRLs for your new or an existing private CA
|
|
// by setting the Enabled parameter to true. Your private CA writes CRLs to
|
|
// an S3 bucket that you specify in the S3BucketName parameter. You can hide
|
|
// the name of your bucket by specifying a value for the CustomCname parameter.
|
|
// Your private CA copies the CNAME or the S3 bucket name to the CRL Distribution
|
|
// Points extension of each certificate it issues. Your S3 bucket policy must
|
|
// give write permission to ACM Private CA.
|
|
//
|
|
// Your private CA uses the value in the ExpirationInDays parameter to calculate
|
|
// the nextUpdate field in the CRL. The CRL is refreshed at 1/2 the age of next
|
|
// update or when a certificate is revoked. When a certificate is revoked, it
|
|
// is recorded in the next CRL that is generated and in the next audit report.
|
|
// Only time valid certificates are listed in the CRL. Expired certificates
|
|
// are not included.
|
|
//
|
|
// CRLs contain the following fields:
|
|
//
|
|
// * Version: The current version number defined in RFC 5280 is V2. The integer
|
|
// value is 0x1.
|
|
//
|
|
// * Signature Algorithm: The name of the algorithm used to sign the CRL.
|
|
//
|
|
// * Issuer: The X.500 distinguished name of your private CA that issued
|
|
// the CRL.
|
|
//
|
|
// * Last Update: The issue date and time of this CRL.
|
|
//
|
|
// * Next Update: The day and time by which the next CRL will be issued.
|
|
//
|
|
// * Revoked Certificates: List of revoked certificates. Each list item contains
|
|
// the following information. Serial Number: The serial number, in hexadecimal
|
|
// format, of the revoked certificate. Revocation Date: Date and time the
|
|
// certificate was revoked. CRL Entry Extensions: Optional extensions for
|
|
// the CRL entry. X509v3 CRL Reason Code: Reason the certificate was revoked.
|
|
//
|
|
// * CRL Extensions: Optional extensions for the CRL. X509v3 Authority Key
|
|
// Identifier: Identifies the public key associated with the private key
|
|
// used to sign the certificate. X509v3 CRL Number:: Decimal sequence number
|
|
// for the CRL.
|
|
//
|
|
// * Signature Algorithm: Algorithm used by your private CA to sign the CRL.
|
|
//
|
|
// * Signature Value: Signature computed over the CRL.
|
|
//
|
|
// Certificate revocation lists created by ACM Private CA are DER-encoded. You
|
|
// can use the following OpenSSL command to list a CRL.
|
|
//
|
|
// openssl crl -inform DER -text -in crl_path -noout
|
|
type CrlConfiguration struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Name inserted into the certificate CRL Distribution Points extension that
|
|
// enables the use of an alias for the CRL distribution point. Use this value
|
|
// if you don't want the name of your S3 bucket to be public.
|
|
CustomCname *string `type:"string"`
|
|
|
|
// Boolean value that specifies whether certificate revocation lists (CRLs)
|
|
// are enabled. You can use this value to enable certificate revocation for
|
|
// a new CA when you call the CreateCertificateAuthority action or for an existing
|
|
// CA when you call the UpdateCertificateAuthority action.
|
|
//
|
|
// Enabled is a required field
|
|
Enabled *bool `type:"boolean" required:"true"`
|
|
|
|
// Number of days until a certificate expires.
|
|
ExpirationInDays *int64 `min:"1" type:"integer"`
|
|
|
|
// Name of the S3 bucket that contains the CRL. If you do not provide a value
|
|
// for the CustomCname argument, the name of your S3 bucket is placed into the
|
|
// CRL Distribution Points extension of the issued certificate. You can change
|
|
// the name of your bucket by calling the UpdateCertificateAuthority action.
|
|
// You must specify a bucket policy that allows ACM Private CA to write the
|
|
// CRL to your bucket.
|
|
S3BucketName *string `min:"3" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s CrlConfiguration) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s CrlConfiguration) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *CrlConfiguration) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "CrlConfiguration"}
|
|
if s.Enabled == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Enabled"))
|
|
}
|
|
if s.ExpirationInDays != nil && *s.ExpirationInDays < 1 {
|
|
invalidParams.Add(request.NewErrParamMinValue("ExpirationInDays", 1))
|
|
}
|
|
if s.S3BucketName != nil && len(*s.S3BucketName) < 3 {
|
|
invalidParams.Add(request.NewErrParamMinLen("S3BucketName", 3))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCustomCname sets the CustomCname field's value.
|
|
func (s *CrlConfiguration) SetCustomCname(v string) *CrlConfiguration {
|
|
s.CustomCname = &v
|
|
return s
|
|
}
|
|
|
|
// SetEnabled sets the Enabled field's value.
|
|
func (s *CrlConfiguration) SetEnabled(v bool) *CrlConfiguration {
|
|
s.Enabled = &v
|
|
return s
|
|
}
|
|
|
|
// SetExpirationInDays sets the ExpirationInDays field's value.
|
|
func (s *CrlConfiguration) SetExpirationInDays(v int64) *CrlConfiguration {
|
|
s.ExpirationInDays = &v
|
|
return s
|
|
}
|
|
|
|
// SetS3BucketName sets the S3BucketName field's value.
|
|
func (s *CrlConfiguration) SetS3BucketName(v string) *CrlConfiguration {
|
|
s.S3BucketName = &v
|
|
return s
|
|
}
|
|
|
|
type DeleteCertificateAuthorityInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority.
|
|
// This must have the following form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// The number of days to make a CA restorable after it has been deleted. This
|
|
// can be anywhere from 7 to 30 days, with 30 being the default.
|
|
PermanentDeletionTimeInDays *int64 `min:"7" type:"integer"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s DeleteCertificateAuthorityInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s DeleteCertificateAuthorityInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *DeleteCertificateAuthorityInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "DeleteCertificateAuthorityInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.PermanentDeletionTimeInDays != nil && *s.PermanentDeletionTimeInDays < 7 {
|
|
invalidParams.Add(request.NewErrParamMinValue("PermanentDeletionTimeInDays", 7))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *DeleteCertificateAuthorityInput) SetCertificateAuthorityArn(v string) *DeleteCertificateAuthorityInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetPermanentDeletionTimeInDays sets the PermanentDeletionTimeInDays field's value.
|
|
func (s *DeleteCertificateAuthorityInput) SetPermanentDeletionTimeInDays(v int64) *DeleteCertificateAuthorityInput {
|
|
s.PermanentDeletionTimeInDays = &v
|
|
return s
|
|
}
|
|
|
|
type DeleteCertificateAuthorityOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s DeleteCertificateAuthorityOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s DeleteCertificateAuthorityOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
type DeletePermissionInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Number (ARN) of the private CA that issued the permissions.
|
|
// You can find the CA's ARN by calling the ListCertificateAuthorities action.
|
|
// This must have the following form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// The AWS service or identity that will have its CA permissions revoked. At
|
|
// this time, the only valid service principal is acm.amazonaws.com
|
|
//
|
|
// Principal is a required field
|
|
Principal *string `type:"string" required:"true"`
|
|
|
|
// The AWS account that calls this action.
|
|
SourceAccount *string `min:"12" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s DeletePermissionInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s DeletePermissionInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *DeletePermissionInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "DeletePermissionInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.Principal == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Principal"))
|
|
}
|
|
if s.SourceAccount != nil && len(*s.SourceAccount) < 12 {
|
|
invalidParams.Add(request.NewErrParamMinLen("SourceAccount", 12))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *DeletePermissionInput) SetCertificateAuthorityArn(v string) *DeletePermissionInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetPrincipal sets the Principal field's value.
|
|
func (s *DeletePermissionInput) SetPrincipal(v string) *DeletePermissionInput {
|
|
s.Principal = &v
|
|
return s
|
|
}
|
|
|
|
// SetSourceAccount sets the SourceAccount field's value.
|
|
func (s *DeletePermissionInput) SetSourceAccount(v string) *DeletePermissionInput {
|
|
s.SourceAccount = &v
|
|
return s
|
|
}
|
|
|
|
type DeletePermissionOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s DeletePermissionOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s DeletePermissionOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
type DescribeCertificateAuthorityAuditReportInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The report ID returned by calling the CreateCertificateAuthorityAuditReport
|
|
// action.
|
|
//
|
|
// AuditReportId is a required field
|
|
AuditReportId *string `min:"36" type:"string" required:"true"`
|
|
|
|
// The Amazon Resource Name (ARN) of the private CA. This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s DescribeCertificateAuthorityAuditReportInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s DescribeCertificateAuthorityAuditReportInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *DescribeCertificateAuthorityAuditReportInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "DescribeCertificateAuthorityAuditReportInput"}
|
|
if s.AuditReportId == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("AuditReportId"))
|
|
}
|
|
if s.AuditReportId != nil && len(*s.AuditReportId) < 36 {
|
|
invalidParams.Add(request.NewErrParamMinLen("AuditReportId", 36))
|
|
}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetAuditReportId sets the AuditReportId field's value.
|
|
func (s *DescribeCertificateAuthorityAuditReportInput) SetAuditReportId(v string) *DescribeCertificateAuthorityAuditReportInput {
|
|
s.AuditReportId = &v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *DescribeCertificateAuthorityAuditReportInput) SetCertificateAuthorityArn(v string) *DescribeCertificateAuthorityAuditReportInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
type DescribeCertificateAuthorityAuditReportOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Specifies whether report creation is in progress, has succeeded, or has failed.
|
|
AuditReportStatus *string `type:"string" enum:"AuditReportStatus"`
|
|
|
|
// The date and time at which the report was created.
|
|
CreatedAt *time.Time `type:"timestamp"`
|
|
|
|
// Name of the S3 bucket that contains the report.
|
|
S3BucketName *string `type:"string"`
|
|
|
|
// S3 key that uniquely identifies the report file in your S3 bucket.
|
|
S3Key *string `type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s DescribeCertificateAuthorityAuditReportOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s DescribeCertificateAuthorityAuditReportOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetAuditReportStatus sets the AuditReportStatus field's value.
|
|
func (s *DescribeCertificateAuthorityAuditReportOutput) SetAuditReportStatus(v string) *DescribeCertificateAuthorityAuditReportOutput {
|
|
s.AuditReportStatus = &v
|
|
return s
|
|
}
|
|
|
|
// SetCreatedAt sets the CreatedAt field's value.
|
|
func (s *DescribeCertificateAuthorityAuditReportOutput) SetCreatedAt(v time.Time) *DescribeCertificateAuthorityAuditReportOutput {
|
|
s.CreatedAt = &v
|
|
return s
|
|
}
|
|
|
|
// SetS3BucketName sets the S3BucketName field's value.
|
|
func (s *DescribeCertificateAuthorityAuditReportOutput) SetS3BucketName(v string) *DescribeCertificateAuthorityAuditReportOutput {
|
|
s.S3BucketName = &v
|
|
return s
|
|
}
|
|
|
|
// SetS3Key sets the S3Key field's value.
|
|
func (s *DescribeCertificateAuthorityAuditReportOutput) SetS3Key(v string) *DescribeCertificateAuthorityAuditReportOutput {
|
|
s.S3Key = &v
|
|
return s
|
|
}
|
|
|
|
type DescribeCertificateAuthorityInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority.
|
|
// This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s DescribeCertificateAuthorityInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s DescribeCertificateAuthorityInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *DescribeCertificateAuthorityInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "DescribeCertificateAuthorityInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *DescribeCertificateAuthorityInput) SetCertificateAuthorityArn(v string) *DescribeCertificateAuthorityInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
type DescribeCertificateAuthorityOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// A CertificateAuthority structure that contains information about your private
|
|
// CA.
|
|
CertificateAuthority *CertificateAuthority `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s DescribeCertificateAuthorityOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s DescribeCertificateAuthorityOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetCertificateAuthority sets the CertificateAuthority field's value.
|
|
func (s *DescribeCertificateAuthorityOutput) SetCertificateAuthority(v *CertificateAuthority) *DescribeCertificateAuthorityOutput {
|
|
s.CertificateAuthority = v
|
|
return s
|
|
}
|
|
|
|
type GetCertificateAuthorityCertificateInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) of your private CA. This is of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s GetCertificateAuthorityCertificateInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s GetCertificateAuthorityCertificateInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *GetCertificateAuthorityCertificateInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "GetCertificateAuthorityCertificateInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *GetCertificateAuthorityCertificateInput) SetCertificateAuthorityArn(v string) *GetCertificateAuthorityCertificateInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
type GetCertificateAuthorityCertificateOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Base64-encoded certificate authority (CA) certificate.
|
|
Certificate *string `type:"string"`
|
|
|
|
// Base64-encoded certificate chain that includes any intermediate certificates
|
|
// and chains up to root on-premises certificate that you used to sign your
|
|
// private CA certificate. The chain does not include your private CA certificate.
|
|
// If this is a root CA, the value will be null.
|
|
CertificateChain *string `type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s GetCertificateAuthorityCertificateOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s GetCertificateAuthorityCertificateOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetCertificate sets the Certificate field's value.
|
|
func (s *GetCertificateAuthorityCertificateOutput) SetCertificate(v string) *GetCertificateAuthorityCertificateOutput {
|
|
s.Certificate = &v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateChain sets the CertificateChain field's value.
|
|
func (s *GetCertificateAuthorityCertificateOutput) SetCertificateChain(v string) *GetCertificateAuthorityCertificateOutput {
|
|
s.CertificateChain = &v
|
|
return s
|
|
}
|
|
|
|
type GetCertificateAuthorityCsrInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called the CreateCertificateAuthority
|
|
// action. This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s GetCertificateAuthorityCsrInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s GetCertificateAuthorityCsrInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *GetCertificateAuthorityCsrInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "GetCertificateAuthorityCsrInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *GetCertificateAuthorityCsrInput) SetCertificateAuthorityArn(v string) *GetCertificateAuthorityCsrInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
type GetCertificateAuthorityCsrOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The base64 PEM-encoded certificate signing request (CSR) for your private
|
|
// CA certificate.
|
|
Csr *string `type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s GetCertificateAuthorityCsrOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s GetCertificateAuthorityCsrOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetCsr sets the Csr field's value.
|
|
func (s *GetCertificateAuthorityCsrOutput) SetCsr(v string) *GetCertificateAuthorityCsrOutput {
|
|
s.Csr = &v
|
|
return s
|
|
}
|
|
|
|
type GetCertificateInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The ARN of the issued certificate. The ARN contains the certificate serial
|
|
// number and must be in the following form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012/certificate/286535153982981100925020015808220737245
|
|
//
|
|
// CertificateArn is a required field
|
|
CertificateArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority.
|
|
// This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s GetCertificateInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s GetCertificateInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *GetCertificateInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "GetCertificateInput"}
|
|
if s.CertificateArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateArn"))
|
|
}
|
|
if s.CertificateArn != nil && len(*s.CertificateArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateArn", 5))
|
|
}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateArn sets the CertificateArn field's value.
|
|
func (s *GetCertificateInput) SetCertificateArn(v string) *GetCertificateInput {
|
|
s.CertificateArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *GetCertificateInput) SetCertificateAuthorityArn(v string) *GetCertificateInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
type GetCertificateOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The base64 PEM-encoded certificate specified by the CertificateArn parameter.
|
|
Certificate *string `type:"string"`
|
|
|
|
// The base64 PEM-encoded certificate chain that chains up to the on-premises
|
|
// root CA certificate that you used to sign your private CA certificate.
|
|
CertificateChain *string `type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s GetCertificateOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s GetCertificateOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetCertificate sets the Certificate field's value.
|
|
func (s *GetCertificateOutput) SetCertificate(v string) *GetCertificateOutput {
|
|
s.Certificate = &v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateChain sets the CertificateChain field's value.
|
|
func (s *GetCertificateOutput) SetCertificateChain(v string) *GetCertificateOutput {
|
|
s.CertificateChain = &v
|
|
return s
|
|
}
|
|
|
|
type ImportCertificateAuthorityCertificateInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The PEM-encoded certificate for a private CA. This may be a self-signed certificate
|
|
// in the case of a root CA, or it may be signed by another CA that you control.
|
|
//
|
|
// Certificate is automatically base64 encoded/decoded by the SDK.
|
|
//
|
|
// Certificate is a required field
|
|
Certificate []byte `min:"1" type:"blob" required:"true"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority.
|
|
// This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// A PEM-encoded file that contains all of your certificates, other than the
|
|
// certificate you're importing, chaining up to your root CA. Your ACM Private
|
|
// CA-hosted or on-premises root certificate is the last in the chain, and each
|
|
// certificate in the chain signs the one preceding.
|
|
//
|
|
// This parameter must be supplied when you import a subordinate CA. When you
|
|
// import a root CA, there is no chain.
|
|
//
|
|
// CertificateChain is automatically base64 encoded/decoded by the SDK.
|
|
CertificateChain []byte `type:"blob"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ImportCertificateAuthorityCertificateInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ImportCertificateAuthorityCertificateInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *ImportCertificateAuthorityCertificateInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "ImportCertificateAuthorityCertificateInput"}
|
|
if s.Certificate == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Certificate"))
|
|
}
|
|
if s.Certificate != nil && len(s.Certificate) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("Certificate", 1))
|
|
}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificate sets the Certificate field's value.
|
|
func (s *ImportCertificateAuthorityCertificateInput) SetCertificate(v []byte) *ImportCertificateAuthorityCertificateInput {
|
|
s.Certificate = v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *ImportCertificateAuthorityCertificateInput) SetCertificateAuthorityArn(v string) *ImportCertificateAuthorityCertificateInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateChain sets the CertificateChain field's value.
|
|
func (s *ImportCertificateAuthorityCertificateInput) SetCertificateChain(v []byte) *ImportCertificateAuthorityCertificateInput {
|
|
s.CertificateChain = v
|
|
return s
|
|
}
|
|
|
|
type ImportCertificateAuthorityCertificateOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ImportCertificateAuthorityCertificateOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ImportCertificateAuthorityCertificateOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
type IssueCertificateInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority.
|
|
// This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// The certificate signing request (CSR) for the certificate you want to issue.
|
|
// You can use the following OpenSSL command to create the CSR and a 2048 bit
|
|
// RSA private key.
|
|
//
|
|
// openssl req -new -newkey rsa:2048 -days 365 -keyout private/test_cert_priv_key.pem
|
|
// -out csr/test_cert_.csr
|
|
//
|
|
// If you have a configuration file, you can use the following OpenSSL command.
|
|
// The usr_cert block in the configuration file contains your X509 version 3
|
|
// extensions.
|
|
//
|
|
// openssl req -new -config openssl_rsa.cnf -extensions usr_cert -newkey rsa:2048
|
|
// -days -365 -keyout private/test_cert_priv_key.pem -out csr/test_cert_.csr
|
|
//
|
|
// Csr is automatically base64 encoded/decoded by the SDK.
|
|
//
|
|
// Csr is a required field
|
|
Csr []byte `min:"1" type:"blob" required:"true"`
|
|
|
|
// Custom string that can be used to distinguish between calls to the IssueCertificate
|
|
// action. Idempotency tokens time out after one hour. Therefore, if you call
|
|
// IssueCertificate multiple times with the same idempotency token within 5
|
|
// minutes, ACM Private CA recognizes that you are requesting only one certificate
|
|
// and will issue only one. If you change the idempotency token for each call,
|
|
// PCA recognizes that you are requesting multiple certificates.
|
|
IdempotencyToken *string `min:"1" type:"string"`
|
|
|
|
// The name of the algorithm that will be used to sign the certificate to be
|
|
// issued.
|
|
//
|
|
// SigningAlgorithm is a required field
|
|
SigningAlgorithm *string `type:"string" required:"true" enum:"SigningAlgorithm"`
|
|
|
|
// Specifies a custom configuration template to use when issuing a certificate.
|
|
// If this parameter is not provided, ACM Private CA defaults to the EndEntityCertificate/V1
|
|
// template.
|
|
//
|
|
// The following service-owned TemplateArn values are supported by ACM Private
|
|
// CA:
|
|
//
|
|
// * arn:aws:acm-pca:::template/EndEntityCertificate/V1
|
|
//
|
|
// * arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen0/V1
|
|
//
|
|
// * arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen1/V1
|
|
//
|
|
// * arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen2/V1
|
|
//
|
|
// * arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen3/V1
|
|
//
|
|
// * arn:aws:acm-pca:::template/RootCACertificate/V1
|
|
//
|
|
// For more information, see Using Templates (https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html).
|
|
TemplateArn *string `min:"5" type:"string"`
|
|
|
|
// The type of the validity period.
|
|
//
|
|
// Validity is a required field
|
|
Validity *Validity `type:"structure" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s IssueCertificateInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s IssueCertificateInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *IssueCertificateInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "IssueCertificateInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.Csr == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Csr"))
|
|
}
|
|
if s.Csr != nil && len(s.Csr) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("Csr", 1))
|
|
}
|
|
if s.IdempotencyToken != nil && len(*s.IdempotencyToken) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("IdempotencyToken", 1))
|
|
}
|
|
if s.SigningAlgorithm == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("SigningAlgorithm"))
|
|
}
|
|
if s.TemplateArn != nil && len(*s.TemplateArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("TemplateArn", 5))
|
|
}
|
|
if s.Validity == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Validity"))
|
|
}
|
|
if s.Validity != nil {
|
|
if err := s.Validity.Validate(); err != nil {
|
|
invalidParams.AddNested("Validity", err.(request.ErrInvalidParams))
|
|
}
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *IssueCertificateInput) SetCertificateAuthorityArn(v string) *IssueCertificateInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetCsr sets the Csr field's value.
|
|
func (s *IssueCertificateInput) SetCsr(v []byte) *IssueCertificateInput {
|
|
s.Csr = v
|
|
return s
|
|
}
|
|
|
|
// SetIdempotencyToken sets the IdempotencyToken field's value.
|
|
func (s *IssueCertificateInput) SetIdempotencyToken(v string) *IssueCertificateInput {
|
|
s.IdempotencyToken = &v
|
|
return s
|
|
}
|
|
|
|
// SetSigningAlgorithm sets the SigningAlgorithm field's value.
|
|
func (s *IssueCertificateInput) SetSigningAlgorithm(v string) *IssueCertificateInput {
|
|
s.SigningAlgorithm = &v
|
|
return s
|
|
}
|
|
|
|
// SetTemplateArn sets the TemplateArn field's value.
|
|
func (s *IssueCertificateInput) SetTemplateArn(v string) *IssueCertificateInput {
|
|
s.TemplateArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetValidity sets the Validity field's value.
|
|
func (s *IssueCertificateInput) SetValidity(v *Validity) *IssueCertificateInput {
|
|
s.Validity = v
|
|
return s
|
|
}
|
|
|
|
type IssueCertificateOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) of the issued certificate and the certificate
|
|
// serial number. This is of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012/certificate/286535153982981100925020015808220737245
|
|
CertificateArn *string `min:"5" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s IssueCertificateOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s IssueCertificateOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetCertificateArn sets the CertificateArn field's value.
|
|
func (s *IssueCertificateOutput) SetCertificateArn(v string) *IssueCertificateOutput {
|
|
s.CertificateArn = &v
|
|
return s
|
|
}
|
|
|
|
type ListCertificateAuthoritiesInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Use this parameter when paginating results to specify the maximum number
|
|
// of items to return in the response on each page. If additional items exist
|
|
// beyond the number you specify, the NextToken element is sent in the response.
|
|
// Use this NextToken value in a subsequent request to retrieve additional items.
|
|
MaxResults *int64 `min:"1" type:"integer"`
|
|
|
|
// Use this parameter when paginating results in a subsequent request after
|
|
// you receive a response with truncated results. Set it to the value of the
|
|
// NextToken parameter from the response you just received.
|
|
NextToken *string `min:"1" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ListCertificateAuthoritiesInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ListCertificateAuthoritiesInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *ListCertificateAuthoritiesInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "ListCertificateAuthoritiesInput"}
|
|
if s.MaxResults != nil && *s.MaxResults < 1 {
|
|
invalidParams.Add(request.NewErrParamMinValue("MaxResults", 1))
|
|
}
|
|
if s.NextToken != nil && len(*s.NextToken) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("NextToken", 1))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetMaxResults sets the MaxResults field's value.
|
|
func (s *ListCertificateAuthoritiesInput) SetMaxResults(v int64) *ListCertificateAuthoritiesInput {
|
|
s.MaxResults = &v
|
|
return s
|
|
}
|
|
|
|
// SetNextToken sets the NextToken field's value.
|
|
func (s *ListCertificateAuthoritiesInput) SetNextToken(v string) *ListCertificateAuthoritiesInput {
|
|
s.NextToken = &v
|
|
return s
|
|
}
|
|
|
|
type ListCertificateAuthoritiesOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Summary information about each certificate authority you have created.
|
|
CertificateAuthorities []*CertificateAuthority `type:"list"`
|
|
|
|
// When the list is truncated, this value is present and should be used for
|
|
// the NextToken parameter in a subsequent pagination request.
|
|
NextToken *string `min:"1" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ListCertificateAuthoritiesOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ListCertificateAuthoritiesOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetCertificateAuthorities sets the CertificateAuthorities field's value.
|
|
func (s *ListCertificateAuthoritiesOutput) SetCertificateAuthorities(v []*CertificateAuthority) *ListCertificateAuthoritiesOutput {
|
|
s.CertificateAuthorities = v
|
|
return s
|
|
}
|
|
|
|
// SetNextToken sets the NextToken field's value.
|
|
func (s *ListCertificateAuthoritiesOutput) SetNextToken(v string) *ListCertificateAuthoritiesOutput {
|
|
s.NextToken = &v
|
|
return s
|
|
}
|
|
|
|
type ListPermissionsInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Number (ARN) of the private CA to inspect. You can find
|
|
// the ARN by calling the ListCertificateAuthorities action. This must be of
|
|
// the form: arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
// You can get a private CA's ARN by running the ListCertificateAuthorities
|
|
// action.
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// When paginating results, use this parameter to specify the maximum number
|
|
// of items to return in the response. If additional items exist beyond the
|
|
// number you specify, the NextToken element is sent in the response. Use this
|
|
// NextToken value in a subsequent request to retrieve additional items.
|
|
MaxResults *int64 `min:"1" type:"integer"`
|
|
|
|
// When paginating results, use this parameter in a subsequent request after
|
|
// you receive a response with truncated results. Set it to the value of NextToken
|
|
// from the response you just received.
|
|
NextToken *string `min:"1" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ListPermissionsInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ListPermissionsInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *ListPermissionsInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "ListPermissionsInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.MaxResults != nil && *s.MaxResults < 1 {
|
|
invalidParams.Add(request.NewErrParamMinValue("MaxResults", 1))
|
|
}
|
|
if s.NextToken != nil && len(*s.NextToken) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("NextToken", 1))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *ListPermissionsInput) SetCertificateAuthorityArn(v string) *ListPermissionsInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetMaxResults sets the MaxResults field's value.
|
|
func (s *ListPermissionsInput) SetMaxResults(v int64) *ListPermissionsInput {
|
|
s.MaxResults = &v
|
|
return s
|
|
}
|
|
|
|
// SetNextToken sets the NextToken field's value.
|
|
func (s *ListPermissionsInput) SetNextToken(v string) *ListPermissionsInput {
|
|
s.NextToken = &v
|
|
return s
|
|
}
|
|
|
|
type ListPermissionsOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// When the list is truncated, this value is present and should be used for
|
|
// the NextToken parameter in a subsequent pagination request.
|
|
NextToken *string `min:"1" type:"string"`
|
|
|
|
// Summary information about each permission assigned by the specified private
|
|
// CA, including the action enabled, the policy provided, and the time of creation.
|
|
Permissions []*Permission `type:"list"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ListPermissionsOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ListPermissionsOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetNextToken sets the NextToken field's value.
|
|
func (s *ListPermissionsOutput) SetNextToken(v string) *ListPermissionsOutput {
|
|
s.NextToken = &v
|
|
return s
|
|
}
|
|
|
|
// SetPermissions sets the Permissions field's value.
|
|
func (s *ListPermissionsOutput) SetPermissions(v []*Permission) *ListPermissionsOutput {
|
|
s.Permissions = v
|
|
return s
|
|
}
|
|
|
|
type ListTagsInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called the CreateCertificateAuthority
|
|
// action. This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// Use this parameter when paginating results to specify the maximum number
|
|
// of items to return in the response. If additional items exist beyond the
|
|
// number you specify, the NextToken element is sent in the response. Use this
|
|
// NextToken value in a subsequent request to retrieve additional items.
|
|
MaxResults *int64 `min:"1" type:"integer"`
|
|
|
|
// Use this parameter when paginating results in a subsequent request after
|
|
// you receive a response with truncated results. Set it to the value of NextToken
|
|
// from the response you just received.
|
|
NextToken *string `min:"1" type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ListTagsInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ListTagsInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *ListTagsInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "ListTagsInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.MaxResults != nil && *s.MaxResults < 1 {
|
|
invalidParams.Add(request.NewErrParamMinValue("MaxResults", 1))
|
|
}
|
|
if s.NextToken != nil && len(*s.NextToken) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("NextToken", 1))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *ListTagsInput) SetCertificateAuthorityArn(v string) *ListTagsInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetMaxResults sets the MaxResults field's value.
|
|
func (s *ListTagsInput) SetMaxResults(v int64) *ListTagsInput {
|
|
s.MaxResults = &v
|
|
return s
|
|
}
|
|
|
|
// SetNextToken sets the NextToken field's value.
|
|
func (s *ListTagsInput) SetNextToken(v string) *ListTagsInput {
|
|
s.NextToken = &v
|
|
return s
|
|
}
|
|
|
|
type ListTagsOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// When the list is truncated, this value is present and should be used for
|
|
// the NextToken parameter in a subsequent pagination request.
|
|
NextToken *string `min:"1" type:"string"`
|
|
|
|
// The tags associated with your private CA.
|
|
Tags []*Tag `min:"1" type:"list"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s ListTagsOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s ListTagsOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetNextToken sets the NextToken field's value.
|
|
func (s *ListTagsOutput) SetNextToken(v string) *ListTagsOutput {
|
|
s.NextToken = &v
|
|
return s
|
|
}
|
|
|
|
// SetTags sets the Tags field's value.
|
|
func (s *ListTagsOutput) SetTags(v []*Tag) *ListTagsOutput {
|
|
s.Tags = v
|
|
return s
|
|
}
|
|
|
|
// Permissions designate which private CA actions can be performed by an AWS
|
|
// service or entity. In order for ACM to automatically renew private certificates,
|
|
// you must give the ACM service principal all available permissions (IssueCertificate,
|
|
// GetCertificate, and ListPermissions). Permissions can be assigned with the
|
|
// CreatePermission action, removed with the DeletePermission action, and listed
|
|
// with the ListPermissions action.
|
|
type Permission struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The private CA actions that can be performed by the designated AWS service.
|
|
Actions []*string `min:"1" type:"list"`
|
|
|
|
// The Amazon Resource Number (ARN) of the private CA from which the permission
|
|
// was issued.
|
|
CertificateAuthorityArn *string `min:"5" type:"string"`
|
|
|
|
// The time at which the permission was created.
|
|
CreatedAt *time.Time `type:"timestamp"`
|
|
|
|
// The name of the policy that is associated with the permission.
|
|
Policy *string `type:"string"`
|
|
|
|
// The AWS service or entity that holds the permission. At this time, the only
|
|
// valid principal is acm.amazonaws.com.
|
|
Principal *string `type:"string"`
|
|
|
|
// The ID of the account that assigned the permission.
|
|
SourceAccount *string `type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s Permission) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s Permission) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// SetActions sets the Actions field's value.
|
|
func (s *Permission) SetActions(v []*string) *Permission {
|
|
s.Actions = v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *Permission) SetCertificateAuthorityArn(v string) *Permission {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetCreatedAt sets the CreatedAt field's value.
|
|
func (s *Permission) SetCreatedAt(v time.Time) *Permission {
|
|
s.CreatedAt = &v
|
|
return s
|
|
}
|
|
|
|
// SetPolicy sets the Policy field's value.
|
|
func (s *Permission) SetPolicy(v string) *Permission {
|
|
s.Policy = &v
|
|
return s
|
|
}
|
|
|
|
// SetPrincipal sets the Principal field's value.
|
|
func (s *Permission) SetPrincipal(v string) *Permission {
|
|
s.Principal = &v
|
|
return s
|
|
}
|
|
|
|
// SetSourceAccount sets the SourceAccount field's value.
|
|
func (s *Permission) SetSourceAccount(v string) *Permission {
|
|
s.SourceAccount = &v
|
|
return s
|
|
}
|
|
|
|
type RestoreCertificateAuthorityInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called the CreateCertificateAuthority
|
|
// action. This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s RestoreCertificateAuthorityInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s RestoreCertificateAuthorityInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *RestoreCertificateAuthorityInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "RestoreCertificateAuthorityInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *RestoreCertificateAuthorityInput) SetCertificateAuthorityArn(v string) *RestoreCertificateAuthorityInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
type RestoreCertificateAuthorityOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s RestoreCertificateAuthorityOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s RestoreCertificateAuthorityOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Certificate revocation information used by the CreateCertificateAuthority
|
|
// and UpdateCertificateAuthority actions. Your private certificate authority
|
|
// (CA) can create and maintain a certificate revocation list (CRL). A CRL contains
|
|
// information about certificates revoked by your CA. For more information,
|
|
// see RevokeCertificate.
|
|
type RevocationConfiguration struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Configuration of the certificate revocation list (CRL), if any, maintained
|
|
// by your private CA.
|
|
CrlConfiguration *CrlConfiguration `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s RevocationConfiguration) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s RevocationConfiguration) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *RevocationConfiguration) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "RevocationConfiguration"}
|
|
if s.CrlConfiguration != nil {
|
|
if err := s.CrlConfiguration.Validate(); err != nil {
|
|
invalidParams.AddNested("CrlConfiguration", err.(request.ErrInvalidParams))
|
|
}
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCrlConfiguration sets the CrlConfiguration field's value.
|
|
func (s *RevocationConfiguration) SetCrlConfiguration(v *CrlConfiguration) *RevocationConfiguration {
|
|
s.CrlConfiguration = v
|
|
return s
|
|
}
|
|
|
|
type RevokeCertificateInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Amazon Resource Name (ARN) of the private CA that issued the certificate
|
|
// to be revoked. This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// Serial number of the certificate to be revoked. This must be in hexadecimal
|
|
// format. You can retrieve the serial number by calling GetCertificate with
|
|
// the Amazon Resource Name (ARN) of the certificate you want and the ARN of
|
|
// your private CA. The GetCertificate action retrieves the certificate in the
|
|
// PEM format. You can use the following OpenSSL command to list the certificate
|
|
// in text format and copy the hexadecimal serial number.
|
|
//
|
|
// openssl x509 -in file_path -text -noout
|
|
//
|
|
// You can also copy the serial number from the console or use the DescribeCertificate
|
|
// (https://docs.aws.amazon.com/acm/latest/APIReference/API_DescribeCertificate.html)
|
|
// action in the AWS Certificate Manager API Reference.
|
|
//
|
|
// CertificateSerial is a required field
|
|
CertificateSerial *string `type:"string" required:"true"`
|
|
|
|
// Specifies why you revoked the certificate.
|
|
//
|
|
// RevocationReason is a required field
|
|
RevocationReason *string `type:"string" required:"true" enum:"RevocationReason"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s RevokeCertificateInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s RevokeCertificateInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *RevokeCertificateInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "RevokeCertificateInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.CertificateSerial == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateSerial"))
|
|
}
|
|
if s.RevocationReason == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("RevocationReason"))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *RevokeCertificateInput) SetCertificateAuthorityArn(v string) *RevokeCertificateInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetCertificateSerial sets the CertificateSerial field's value.
|
|
func (s *RevokeCertificateInput) SetCertificateSerial(v string) *RevokeCertificateInput {
|
|
s.CertificateSerial = &v
|
|
return s
|
|
}
|
|
|
|
// SetRevocationReason sets the RevocationReason field's value.
|
|
func (s *RevokeCertificateInput) SetRevocationReason(v string) *RevokeCertificateInput {
|
|
s.RevocationReason = &v
|
|
return s
|
|
}
|
|
|
|
type RevokeCertificateOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s RevokeCertificateOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s RevokeCertificateOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Tags are labels that you can use to identify and organize your private CAs.
|
|
// Each tag consists of a key and an optional value. You can associate up to
|
|
// 50 tags with a private CA. To add one or more tags to a private CA, call
|
|
// the TagCertificateAuthority action. To remove a tag, call the UntagCertificateAuthority
|
|
// action.
|
|
type Tag struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Key (name) of the tag.
|
|
//
|
|
// Key is a required field
|
|
Key *string `min:"1" type:"string" required:"true"`
|
|
|
|
// Value of the tag.
|
|
Value *string `type:"string"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s Tag) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s Tag) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *Tag) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "Tag"}
|
|
if s.Key == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Key"))
|
|
}
|
|
if s.Key != nil && len(*s.Key) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("Key", 1))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetKey sets the Key field's value.
|
|
func (s *Tag) SetKey(v string) *Tag {
|
|
s.Key = &v
|
|
return s
|
|
}
|
|
|
|
// SetValue sets the Value field's value.
|
|
func (s *Tag) SetValue(v string) *Tag {
|
|
s.Value = &v
|
|
return s
|
|
}
|
|
|
|
type TagCertificateAuthorityInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority.
|
|
// This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// List of tags to be associated with the CA.
|
|
//
|
|
// Tags is a required field
|
|
Tags []*Tag `min:"1" type:"list" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s TagCertificateAuthorityInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s TagCertificateAuthorityInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *TagCertificateAuthorityInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "TagCertificateAuthorityInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.Tags == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Tags"))
|
|
}
|
|
if s.Tags != nil && len(s.Tags) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("Tags", 1))
|
|
}
|
|
if s.Tags != nil {
|
|
for i, v := range s.Tags {
|
|
if v == nil {
|
|
continue
|
|
}
|
|
if err := v.Validate(); err != nil {
|
|
invalidParams.AddNested(fmt.Sprintf("%s[%v]", "Tags", i), err.(request.ErrInvalidParams))
|
|
}
|
|
}
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *TagCertificateAuthorityInput) SetCertificateAuthorityArn(v string) *TagCertificateAuthorityInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetTags sets the Tags field's value.
|
|
func (s *TagCertificateAuthorityInput) SetTags(v []*Tag) *TagCertificateAuthorityInput {
|
|
s.Tags = v
|
|
return s
|
|
}
|
|
|
|
type TagCertificateAuthorityOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s TagCertificateAuthorityOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s TagCertificateAuthorityOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
type UntagCertificateAuthorityInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority.
|
|
// This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// List of tags to be removed from the CA.
|
|
//
|
|
// Tags is a required field
|
|
Tags []*Tag `min:"1" type:"list" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s UntagCertificateAuthorityInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s UntagCertificateAuthorityInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *UntagCertificateAuthorityInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "UntagCertificateAuthorityInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.Tags == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Tags"))
|
|
}
|
|
if s.Tags != nil && len(s.Tags) < 1 {
|
|
invalidParams.Add(request.NewErrParamMinLen("Tags", 1))
|
|
}
|
|
if s.Tags != nil {
|
|
for i, v := range s.Tags {
|
|
if v == nil {
|
|
continue
|
|
}
|
|
if err := v.Validate(); err != nil {
|
|
invalidParams.AddNested(fmt.Sprintf("%s[%v]", "Tags", i), err.(request.ErrInvalidParams))
|
|
}
|
|
}
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *UntagCertificateAuthorityInput) SetCertificateAuthorityArn(v string) *UntagCertificateAuthorityInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetTags sets the Tags field's value.
|
|
func (s *UntagCertificateAuthorityInput) SetTags(v []*Tag) *UntagCertificateAuthorityInput {
|
|
s.Tags = v
|
|
return s
|
|
}
|
|
|
|
type UntagCertificateAuthorityOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s UntagCertificateAuthorityOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s UntagCertificateAuthorityOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
type UpdateCertificateAuthorityInput struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Amazon Resource Name (ARN) of the private CA that issued the certificate
|
|
// to be revoked. This must be of the form:
|
|
//
|
|
// arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012
|
|
//
|
|
// CertificateAuthorityArn is a required field
|
|
CertificateAuthorityArn *string `min:"5" type:"string" required:"true"`
|
|
|
|
// Revocation information for your private CA.
|
|
RevocationConfiguration *RevocationConfiguration `type:"structure"`
|
|
|
|
// Status of your private CA.
|
|
Status *string `type:"string" enum:"CertificateAuthorityStatus"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s UpdateCertificateAuthorityInput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s UpdateCertificateAuthorityInput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *UpdateCertificateAuthorityInput) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "UpdateCertificateAuthorityInput"}
|
|
if s.CertificateAuthorityArn == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("CertificateAuthorityArn"))
|
|
}
|
|
if s.CertificateAuthorityArn != nil && len(*s.CertificateAuthorityArn) < 5 {
|
|
invalidParams.Add(request.NewErrParamMinLen("CertificateAuthorityArn", 5))
|
|
}
|
|
if s.RevocationConfiguration != nil {
|
|
if err := s.RevocationConfiguration.Validate(); err != nil {
|
|
invalidParams.AddNested("RevocationConfiguration", err.(request.ErrInvalidParams))
|
|
}
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetCertificateAuthorityArn sets the CertificateAuthorityArn field's value.
|
|
func (s *UpdateCertificateAuthorityInput) SetCertificateAuthorityArn(v string) *UpdateCertificateAuthorityInput {
|
|
s.CertificateAuthorityArn = &v
|
|
return s
|
|
}
|
|
|
|
// SetRevocationConfiguration sets the RevocationConfiguration field's value.
|
|
func (s *UpdateCertificateAuthorityInput) SetRevocationConfiguration(v *RevocationConfiguration) *UpdateCertificateAuthorityInput {
|
|
s.RevocationConfiguration = v
|
|
return s
|
|
}
|
|
|
|
// SetStatus sets the Status field's value.
|
|
func (s *UpdateCertificateAuthorityInput) SetStatus(v string) *UpdateCertificateAuthorityInput {
|
|
s.Status = &v
|
|
return s
|
|
}
|
|
|
|
type UpdateCertificateAuthorityOutput struct {
|
|
_ struct{} `type:"structure"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s UpdateCertificateAuthorityOutput) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s UpdateCertificateAuthorityOutput) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Length of time for which the certificate issued by your private certificate
|
|
// authority (CA), or by the private CA itself, is valid in days, months, or
|
|
// years. You can issue a certificate by calling the IssueCertificate action.
|
|
type Validity struct {
|
|
_ struct{} `type:"structure"`
|
|
|
|
// Specifies whether the Value parameter represents days, months, or years.
|
|
//
|
|
// Type is a required field
|
|
Type *string `type:"string" required:"true" enum:"ValidityPeriodType"`
|
|
|
|
// Time period.
|
|
//
|
|
// Value is a required field
|
|
Value *int64 `min:"1" type:"long" required:"true"`
|
|
}
|
|
|
|
// String returns the string representation
|
|
func (s Validity) String() string {
|
|
return awsutil.Prettify(s)
|
|
}
|
|
|
|
// GoString returns the string representation
|
|
func (s Validity) GoString() string {
|
|
return s.String()
|
|
}
|
|
|
|
// Validate inspects the fields of the type to determine if they are valid.
|
|
func (s *Validity) Validate() error {
|
|
invalidParams := request.ErrInvalidParams{Context: "Validity"}
|
|
if s.Type == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Type"))
|
|
}
|
|
if s.Value == nil {
|
|
invalidParams.Add(request.NewErrParamRequired("Value"))
|
|
}
|
|
if s.Value != nil && *s.Value < 1 {
|
|
invalidParams.Add(request.NewErrParamMinValue("Value", 1))
|
|
}
|
|
|
|
if invalidParams.Len() > 0 {
|
|
return invalidParams
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SetType sets the Type field's value.
|
|
func (s *Validity) SetType(v string) *Validity {
|
|
s.Type = &v
|
|
return s
|
|
}
|
|
|
|
// SetValue sets the Value field's value.
|
|
func (s *Validity) SetValue(v int64) *Validity {
|
|
s.Value = &v
|
|
return s
|
|
}
|
|
|
|
const (
|
|
// ActionTypeIssueCertificate is a ActionType enum value
|
|
ActionTypeIssueCertificate = "IssueCertificate"
|
|
|
|
// ActionTypeGetCertificate is a ActionType enum value
|
|
ActionTypeGetCertificate = "GetCertificate"
|
|
|
|
// ActionTypeListPermissions is a ActionType enum value
|
|
ActionTypeListPermissions = "ListPermissions"
|
|
)
|
|
|
|
const (
|
|
// AuditReportResponseFormatJson is a AuditReportResponseFormat enum value
|
|
AuditReportResponseFormatJson = "JSON"
|
|
|
|
// AuditReportResponseFormatCsv is a AuditReportResponseFormat enum value
|
|
AuditReportResponseFormatCsv = "CSV"
|
|
)
|
|
|
|
const (
|
|
// AuditReportStatusCreating is a AuditReportStatus enum value
|
|
AuditReportStatusCreating = "CREATING"
|
|
|
|
// AuditReportStatusSuccess is a AuditReportStatus enum value
|
|
AuditReportStatusSuccess = "SUCCESS"
|
|
|
|
// AuditReportStatusFailed is a AuditReportStatus enum value
|
|
AuditReportStatusFailed = "FAILED"
|
|
)
|
|
|
|
const (
|
|
// CertificateAuthorityStatusCreating is a CertificateAuthorityStatus enum value
|
|
CertificateAuthorityStatusCreating = "CREATING"
|
|
|
|
// CertificateAuthorityStatusPendingCertificate is a CertificateAuthorityStatus enum value
|
|
CertificateAuthorityStatusPendingCertificate = "PENDING_CERTIFICATE"
|
|
|
|
// CertificateAuthorityStatusActive is a CertificateAuthorityStatus enum value
|
|
CertificateAuthorityStatusActive = "ACTIVE"
|
|
|
|
// CertificateAuthorityStatusDeleted is a CertificateAuthorityStatus enum value
|
|
CertificateAuthorityStatusDeleted = "DELETED"
|
|
|
|
// CertificateAuthorityStatusDisabled is a CertificateAuthorityStatus enum value
|
|
CertificateAuthorityStatusDisabled = "DISABLED"
|
|
|
|
// CertificateAuthorityStatusExpired is a CertificateAuthorityStatus enum value
|
|
CertificateAuthorityStatusExpired = "EXPIRED"
|
|
|
|
// CertificateAuthorityStatusFailed is a CertificateAuthorityStatus enum value
|
|
CertificateAuthorityStatusFailed = "FAILED"
|
|
)
|
|
|
|
const (
|
|
// CertificateAuthorityTypeRoot is a CertificateAuthorityType enum value
|
|
CertificateAuthorityTypeRoot = "ROOT"
|
|
|
|
// CertificateAuthorityTypeSubordinate is a CertificateAuthorityType enum value
|
|
CertificateAuthorityTypeSubordinate = "SUBORDINATE"
|
|
)
|
|
|
|
const (
|
|
// FailureReasonRequestTimedOut is a FailureReason enum value
|
|
FailureReasonRequestTimedOut = "REQUEST_TIMED_OUT"
|
|
|
|
// FailureReasonUnsupportedAlgorithm is a FailureReason enum value
|
|
FailureReasonUnsupportedAlgorithm = "UNSUPPORTED_ALGORITHM"
|
|
|
|
// FailureReasonOther is a FailureReason enum value
|
|
FailureReasonOther = "OTHER"
|
|
)
|
|
|
|
const (
|
|
// KeyAlgorithmRsa2048 is a KeyAlgorithm enum value
|
|
KeyAlgorithmRsa2048 = "RSA_2048"
|
|
|
|
// KeyAlgorithmRsa4096 is a KeyAlgorithm enum value
|
|
KeyAlgorithmRsa4096 = "RSA_4096"
|
|
|
|
// KeyAlgorithmEcPrime256v1 is a KeyAlgorithm enum value
|
|
KeyAlgorithmEcPrime256v1 = "EC_prime256v1"
|
|
|
|
// KeyAlgorithmEcSecp384r1 is a KeyAlgorithm enum value
|
|
KeyAlgorithmEcSecp384r1 = "EC_secp384r1"
|
|
)
|
|
|
|
const (
|
|
// RevocationReasonUnspecified is a RevocationReason enum value
|
|
RevocationReasonUnspecified = "UNSPECIFIED"
|
|
|
|
// RevocationReasonKeyCompromise is a RevocationReason enum value
|
|
RevocationReasonKeyCompromise = "KEY_COMPROMISE"
|
|
|
|
// RevocationReasonCertificateAuthorityCompromise is a RevocationReason enum value
|
|
RevocationReasonCertificateAuthorityCompromise = "CERTIFICATE_AUTHORITY_COMPROMISE"
|
|
|
|
// RevocationReasonAffiliationChanged is a RevocationReason enum value
|
|
RevocationReasonAffiliationChanged = "AFFILIATION_CHANGED"
|
|
|
|
// RevocationReasonSuperseded is a RevocationReason enum value
|
|
RevocationReasonSuperseded = "SUPERSEDED"
|
|
|
|
// RevocationReasonCessationOfOperation is a RevocationReason enum value
|
|
RevocationReasonCessationOfOperation = "CESSATION_OF_OPERATION"
|
|
|
|
// RevocationReasonPrivilegeWithdrawn is a RevocationReason enum value
|
|
RevocationReasonPrivilegeWithdrawn = "PRIVILEGE_WITHDRAWN"
|
|
|
|
// RevocationReasonAACompromise is a RevocationReason enum value
|
|
RevocationReasonAACompromise = "A_A_COMPROMISE"
|
|
)
|
|
|
|
const (
|
|
// SigningAlgorithmSha256withecdsa is a SigningAlgorithm enum value
|
|
SigningAlgorithmSha256withecdsa = "SHA256WITHECDSA"
|
|
|
|
// SigningAlgorithmSha384withecdsa is a SigningAlgorithm enum value
|
|
SigningAlgorithmSha384withecdsa = "SHA384WITHECDSA"
|
|
|
|
// SigningAlgorithmSha512withecdsa is a SigningAlgorithm enum value
|
|
SigningAlgorithmSha512withecdsa = "SHA512WITHECDSA"
|
|
|
|
// SigningAlgorithmSha256withrsa is a SigningAlgorithm enum value
|
|
SigningAlgorithmSha256withrsa = "SHA256WITHRSA"
|
|
|
|
// SigningAlgorithmSha384withrsa is a SigningAlgorithm enum value
|
|
SigningAlgorithmSha384withrsa = "SHA384WITHRSA"
|
|
|
|
// SigningAlgorithmSha512withrsa is a SigningAlgorithm enum value
|
|
SigningAlgorithmSha512withrsa = "SHA512WITHRSA"
|
|
)
|
|
|
|
const (
|
|
// ValidityPeriodTypeEndDate is a ValidityPeriodType enum value
|
|
ValidityPeriodTypeEndDate = "END_DATE"
|
|
|
|
// ValidityPeriodTypeAbsolute is a ValidityPeriodType enum value
|
|
ValidityPeriodTypeAbsolute = "ABSOLUTE"
|
|
|
|
// ValidityPeriodTypeDays is a ValidityPeriodType enum value
|
|
ValidityPeriodTypeDays = "DAYS"
|
|
|
|
// ValidityPeriodTypeMonths is a ValidityPeriodType enum value
|
|
ValidityPeriodTypeMonths = "MONTHS"
|
|
|
|
// ValidityPeriodTypeYears is a ValidityPeriodType enum value
|
|
ValidityPeriodTypeYears = "YEARS"
|
|
)
|