import type { MetadataBearer as __MetadataBearer } from "@smithy/types"; import type { IssueCertificateRequest, IssueCertificateResponse } from "../models/models_0"; /** * @public */ export type { __MetadataBearer }; /** * @public * * The input for {@link IssueCertificateCommand}. */ export interface IssueCertificateCommandInput extends IssueCertificateRequest { } /** * @public * * The output of {@link IssueCertificateCommand}. */ export interface IssueCertificateCommandOutput extends IssueCertificateResponse, __MetadataBearer { } declare const IssueCertificateCommand_base: { new (input: IssueCertificateCommandInput): import("@smithy/core/client").CommandImpl; new (input: IssueCertificateCommandInput): import("@smithy/core/client").CommandImpl; getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions; }; /** *

Uses your private certificate authority (CA), or one that has been shared with you, to issue a client certificate. This action returns the Amazon Resource Name (ARN) of the certificate. You can retrieve the certificate by calling the GetCertificate action and specifying the ARN.

You cannot use the ACM ListCertificateAuthorities action to retrieve the ARNs of the certificates that you issue by using Amazon Web Services Private CA.

* @example * Use a bare-bones client and the command you need to make an API call. * ```javascript * import { ACMPCAClient, IssueCertificateCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import * // const { ACMPCAClient, IssueCertificateCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import * // import type { ACMPCAClientConfig } from "@aws-sdk/client-acm-pca"; * const config = {}; // type is ACMPCAClientConfig * const client = new ACMPCAClient(config); * const input = { // IssueCertificateRequest * ApiPassthrough: { // ApiPassthrough * Extensions: { // Extensions * CertificatePolicies: [ // CertificatePolicyList * { // PolicyInformation * CertPolicyId: "STRING_VALUE", // required * PolicyQualifiers: [ // PolicyQualifierInfoList * { // PolicyQualifierInfo * PolicyQualifierId: "CPS", // required * Qualifier: { // Qualifier * CpsUri: "STRING_VALUE", // required * }, * }, * ], * }, * ], * ExtendedKeyUsage: [ // ExtendedKeyUsageList * { // ExtendedKeyUsage * ExtendedKeyUsageType: "SERVER_AUTH" || "CLIENT_AUTH" || "CODE_SIGNING" || "EMAIL_PROTECTION" || "TIME_STAMPING" || "OCSP_SIGNING" || "SMART_CARD_LOGIN" || "DOCUMENT_SIGNING" || "CERTIFICATE_TRANSPARENCY", * ExtendedKeyUsageObjectIdentifier: "STRING_VALUE", * }, * ], * KeyUsage: { // KeyUsage * DigitalSignature: true || false, * NonRepudiation: true || false, * KeyEncipherment: true || false, * DataEncipherment: true || false, * KeyAgreement: true || false, * KeyCertSign: true || false, * CRLSign: true || false, * EncipherOnly: true || false, * DecipherOnly: true || false, * }, * SubjectAlternativeNames: [ // GeneralNameList * { // GeneralName * OtherName: { // OtherName * TypeId: "STRING_VALUE", // required * Value: "STRING_VALUE", // required * }, * Rfc822Name: "STRING_VALUE", * DnsName: "STRING_VALUE", * DirectoryName: { // ASN1Subject * Country: "STRING_VALUE", * Organization: "STRING_VALUE", * OrganizationalUnit: "STRING_VALUE", * DistinguishedNameQualifier: "STRING_VALUE", * State: "STRING_VALUE", * CommonName: "STRING_VALUE", * SerialNumber: "STRING_VALUE", * Locality: "STRING_VALUE", * Title: "STRING_VALUE", * Surname: "STRING_VALUE", * GivenName: "STRING_VALUE", * Initials: "STRING_VALUE", * Pseudonym: "STRING_VALUE", * GenerationQualifier: "STRING_VALUE", * CustomAttributes: [ // CustomAttributeList * { // CustomAttribute * ObjectIdentifier: "STRING_VALUE", // required * Value: "STRING_VALUE", // required * }, * ], * }, * EdiPartyName: { // EdiPartyName * PartyName: "STRING_VALUE", // required * NameAssigner: "STRING_VALUE", * }, * UniformResourceIdentifier: "STRING_VALUE", * IpAddress: "STRING_VALUE", * RegisteredId: "STRING_VALUE", * }, * ], * CustomExtensions: [ // CustomExtensionList * { // CustomExtension * ObjectIdentifier: "STRING_VALUE", // required * Value: "STRING_VALUE", // required * Critical: true || false, * }, * ], * }, * Subject: { * Country: "STRING_VALUE", * Organization: "STRING_VALUE", * OrganizationalUnit: "STRING_VALUE", * DistinguishedNameQualifier: "STRING_VALUE", * State: "STRING_VALUE", * CommonName: "STRING_VALUE", * SerialNumber: "STRING_VALUE", * Locality: "STRING_VALUE", * Title: "STRING_VALUE", * Surname: "STRING_VALUE", * GivenName: "STRING_VALUE", * Initials: "STRING_VALUE", * Pseudonym: "STRING_VALUE", * GenerationQualifier: "STRING_VALUE", * CustomAttributes: [ * { * ObjectIdentifier: "STRING_VALUE", // required * Value: "STRING_VALUE", // required * }, * ], * }, * }, * CertificateAuthorityArn: "STRING_VALUE", // required * Csr: new Uint8Array(), // e.g. Buffer.from("") or new TextEncoder().encode("") // required * SigningAlgorithm: "SHA256WITHECDSA" || "SHA384WITHECDSA" || "SHA512WITHECDSA" || "SHA256WITHRSA" || "SHA384WITHRSA" || "SHA512WITHRSA" || "SM3WITHSM2" || "ML_DSA_44" || "ML_DSA_65" || "ML_DSA_87", // required * TemplateArn: "STRING_VALUE", * Validity: { // Validity * Value: Number("long"), // required * Type: "END_DATE" || "ABSOLUTE" || "DAYS" || "MONTHS" || "YEARS", // required * }, * ValidityNotBefore: { * Value: Number("long"), // required * Type: "END_DATE" || "ABSOLUTE" || "DAYS" || "MONTHS" || "YEARS", // required * }, * IdempotencyToken: "STRING_VALUE", * }; * const command = new IssueCertificateCommand(input); * const response = await client.send(command); * // { // IssueCertificateResponse * // CertificateArn: "STRING_VALUE", * // }; * * ``` * * @param IssueCertificateCommandInput - {@link IssueCertificateCommandInput} * @returns {@link IssueCertificateCommandOutput} * @see {@link IssueCertificateCommandInput} for command's `input` shape. * @see {@link IssueCertificateCommandOutput} for command's `response` shape. * @see {@link ACMPCAClientResolvedConfig | config} for ACMPCAClient's `config` shape. * * @throws {@link InvalidArgsException} (client fault) *

One or more of the specified arguments was not valid.

* * @throws {@link InvalidArnException} (client fault) *

The requested Amazon Resource Name (ARN) does not refer to an existing resource.

* * @throws {@link InvalidStateException} (client fault) *

The state of the private CA does not allow this action to occur.

* * @throws {@link LimitExceededException} (client fault) *

An Amazon Web Services Private CA quota has been exceeded. See the exception message returned to determine the quota that was exceeded.

* * @throws {@link MalformedCSRException} (client fault) *

The certificate signing request is invalid.

* * @throws {@link ResourceNotFoundException} (client fault) *

A resource such as a private CA, S3 bucket, certificate, audit report, or policy cannot be found.

* * @throws {@link ACMPCAServiceException} *

Base exception class for all service exceptions from ACMPCA service.

* * * @public */ export declare class IssueCertificateCommand extends IssueCertificateCommand_base { /** @internal type navigation helper, not in runtime. */ protected static __types: { api: { input: IssueCertificateRequest; output: IssueCertificateResponse; }; sdk: { input: IssueCertificateCommandInput; output: IssueCertificateCommandOutput; }; }; }