import { Command as $Command } from "@smithy/smithy-client"; import type { MetadataBearer as __MetadataBearer } from "@smithy/types"; import type { CreateHsmClientCertificateMessage, CreateHsmClientCertificateResult } from "../models/models_0"; import type { RedshiftClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../RedshiftClient"; /** * @public */ export type { __MetadataBearer }; export { $Command }; /** * @public * * The input for {@link CreateHsmClientCertificateCommand}. */ export interface CreateHsmClientCertificateCommandInput extends CreateHsmClientCertificateMessage { } /** * @public * * The output of {@link CreateHsmClientCertificateCommand}. */ export interface CreateHsmClientCertificateCommandOutput extends CreateHsmClientCertificateResult, __MetadataBearer { } declare const CreateHsmClientCertificateCommand_base: { new (input: CreateHsmClientCertificateCommandInput): import("@smithy/smithy-client").CommandImpl; new (input: CreateHsmClientCertificateCommandInput): import("@smithy/smithy-client").CommandImpl; getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions; }; /** *

Creates an HSM client certificate that an Amazon Redshift cluster will use to connect to * the client's HSM in order to store and retrieve the keys used to encrypt the cluster * databases.

*

The command returns a public key, which you must store in the HSM. In addition to * creating the HSM certificate, you must create an Amazon Redshift HSM configuration that * provides a cluster the information needed to store and use encryption keys in the HSM. * For more information, go to Hardware Security Modules * in the Amazon Redshift Cluster Management Guide.

* @example * Use a bare-bones client and the command you need to make an API call. * ```javascript * import { RedshiftClient, CreateHsmClientCertificateCommand } from "@aws-sdk/client-redshift"; // ES Modules import * // const { RedshiftClient, CreateHsmClientCertificateCommand } = require("@aws-sdk/client-redshift"); // CommonJS import * // import type { RedshiftClientConfig } from "@aws-sdk/client-redshift"; * const config = {}; // type is RedshiftClientConfig * const client = new RedshiftClient(config); * const input = { // CreateHsmClientCertificateMessage * HsmClientCertificateIdentifier: "STRING_VALUE", // required * Tags: [ // TagList * { // Tag * Key: "STRING_VALUE", * Value: "STRING_VALUE", * }, * ], * }; * const command = new CreateHsmClientCertificateCommand(input); * const response = await client.send(command); * // { // CreateHsmClientCertificateResult * // HsmClientCertificate: { // HsmClientCertificate * // HsmClientCertificateIdentifier: "STRING_VALUE", * // HsmClientCertificatePublicKey: "STRING_VALUE", * // Tags: [ // TagList * // { // Tag * // Key: "STRING_VALUE", * // Value: "STRING_VALUE", * // }, * // ], * // }, * // }; * * ``` * * @param CreateHsmClientCertificateCommandInput - {@link CreateHsmClientCertificateCommandInput} * @returns {@link CreateHsmClientCertificateCommandOutput} * @see {@link CreateHsmClientCertificateCommandInput} for command's `input` shape. * @see {@link CreateHsmClientCertificateCommandOutput} for command's `response` shape. * @see {@link RedshiftClientResolvedConfig | config} for RedshiftClient's `config` shape. * * @throws {@link HsmClientCertificateAlreadyExistsFault} (client fault) *

There is already an existing Amazon Redshift HSM client certificate with the specified * identifier.

* * @throws {@link HsmClientCertificateQuotaExceededFault} (client fault) *

The quota for HSM client certificates has been reached. * For information about increasing your quota, go to Limits in Amazon Redshift * in the Amazon Redshift Cluster Management Guide. *

* * @throws {@link InvalidTagFault} (client fault) *

The tag is invalid.

* * @throws {@link TagLimitExceededFault} (client fault) *

You have exceeded the number of tags allowed.

* * @throws {@link RedshiftServiceException} *

Base exception class for all service exceptions from Redshift service.

* * * @public */ export declare class CreateHsmClientCertificateCommand extends CreateHsmClientCertificateCommand_base { /** @internal type navigation helper, not in runtime. */ protected static __types: { api: { input: CreateHsmClientCertificateMessage; output: CreateHsmClientCertificateResult; }; sdk: { input: CreateHsmClientCertificateCommandInput; output: CreateHsmClientCertificateCommandOutput; }; }; }