amazonka-certificatemanager 1.6.1 → 2.0

raw patch · 89 files changed

+8765/−4076 lines, 89 filesdep +case-insensitivedep ~amazonka-coredep ~amazonka-testdep ~basesetup-changedPVP ok

version bump matches the API change (PVP)

Dependencies added: case-insensitive

Dependency ranges changed: amazonka-core, amazonka-test, base

API changes (from Hackage documentation)

Files

• README.md +3/−4
• Setup.hs +0/−2
• amazonka-certificatemanager.cabal +114/−86
• fixture/AddTagsToCertificate.yaml +10/−0
• fixture/DeleteCertificate.yaml +10/−0
• fixture/DescribeCertificate.yaml +10/−0
• fixture/GetAccountConfiguration.yaml +10/−0
• fixture/GetAccountConfigurationResponse.proto +0/−0
• fixture/GetCertificate.yaml +10/−0
• fixture/ImportCertificate.yaml +10/−0
• fixture/ListCertificates.yaml +10/−0
• fixture/ListTagsForCertificate.yaml +10/−0
• fixture/PutAccountConfiguration.yaml +10/−0
• fixture/PutAccountConfigurationResponse.proto +0/−0
• fixture/RemoveTagsFromCertificate.yaml +10/−0
• fixture/RenewCertificate.yaml +10/−0
• fixture/RenewCertificateResponse.proto +0/−0
• fixture/RequestCertificate.yaml +10/−0
• fixture/ResendValidationEmail.yaml +10/−0
• gen/Amazonka/CertificateManager.hs +315/−0
• gen/Amazonka/CertificateManager/AddTagsToCertificate.hs +191/−0
• gen/Amazonka/CertificateManager/DeleteCertificate.hs +165/−0
• gen/Amazonka/CertificateManager/DescribeCertificate.hs +196/−0
• gen/Amazonka/CertificateManager/ExportCertificate.hs +281/−0
• gen/Amazonka/CertificateManager/GetAccountConfiguration.hs +155/−0
• gen/Amazonka/CertificateManager/GetCertificate.hs +208/−0
• gen/Amazonka/CertificateManager/ImportCertificate.hs +340/−0
• gen/Amazonka/CertificateManager/Lens.hs +228/−0
• gen/Amazonka/CertificateManager/ListCertificates.hs +310/−0
• gen/Amazonka/CertificateManager/ListTagsForCertificate.hs +198/−0
• gen/Amazonka/CertificateManager/PutAccountConfiguration.hs +178/−0
• gen/Amazonka/CertificateManager/RemoveTagsFromCertificate.hs +185/−0
• gen/Amazonka/CertificateManager/RenewCertificate.hs +163/−0
• gen/Amazonka/CertificateManager/RequestCertificate.hs +531/−0
• gen/Amazonka/CertificateManager/ResendValidationEmail.hs +254/−0
• gen/Amazonka/CertificateManager/Types.hs +425/−0
• gen/Amazonka/CertificateManager/Types/CertificateDetail.hs +564/−0
• gen/Amazonka/CertificateManager/Types/CertificateOptions.hs +97/−0
• gen/Amazonka/CertificateManager/Types/CertificateStatus.hs +96/−0
• gen/Amazonka/CertificateManager/Types/CertificateSummary.hs +460/−0
• gen/Amazonka/CertificateManager/Types/CertificateTransparencyLoggingPreference.hs +71/−0
• gen/Amazonka/CertificateManager/Types/CertificateType.hs +76/−0
• gen/Amazonka/CertificateManager/Types/DomainStatus.hs +76/−0
• gen/Amazonka/CertificateManager/Types/DomainValidation.hs +192/−0
• gen/Amazonka/CertificateManager/Types/DomainValidationOption.hs +139/−0
• gen/Amazonka/CertificateManager/Types/ExpiryEventsConfiguration.hs +91/−0
• gen/Amazonka/CertificateManager/Types/ExtendedKeyUsage.hs +146/−0
• gen/Amazonka/CertificateManager/Types/ExtendedKeyUsageName.hs +121/−0
• gen/Amazonka/CertificateManager/Types/FailureReason.hs +146/−0
• gen/Amazonka/CertificateManager/Types/Filters.hs +118/−0
• gen/Amazonka/CertificateManager/Types/KeyAlgorithm.hs +96/−0
• gen/Amazonka/CertificateManager/Types/KeyUsage.hs +66/−0
• gen/Amazonka/CertificateManager/Types/KeyUsageName.hs +116/−0
• gen/Amazonka/CertificateManager/Types/RecordType.hs +66/−0
• gen/Amazonka/CertificateManager/Types/RenewalEligibility.hs +71/−0
• gen/Amazonka/CertificateManager/Types/RenewalStatus.hs +81/−0
• gen/Amazonka/CertificateManager/Types/RenewalSummary.hs +146/−0
• gen/Amazonka/CertificateManager/Types/ResourceRecord.hs +110/−0
• gen/Amazonka/CertificateManager/Types/RevocationReason.hs +111/−0
• gen/Amazonka/CertificateManager/Types/SortBy.hs +63/−0
• gen/Amazonka/CertificateManager/Types/SortOrder.hs +71/−0
• gen/Amazonka/CertificateManager/Types/Tag.hs +92/−0
• gen/Amazonka/CertificateManager/Types/ValidationMethod.hs +71/−0
• gen/Amazonka/CertificateManager/UpdateCertificateOptions.hs +185/−0
• gen/Amazonka/CertificateManager/Waiters.hs +80/−0
• gen/Network/AWS/CertificateManager.hs +0/−276
• gen/Network/AWS/CertificateManager/AddTagsToCertificate.hs +0/−126
• gen/Network/AWS/CertificateManager/DeleteCertificate.hs +0/−110
• gen/Network/AWS/CertificateManager/DescribeCertificate.hs +0/−135
• gen/Network/AWS/CertificateManager/ExportCertificate.hs +0/−171
• gen/Network/AWS/CertificateManager/GetCertificate.hs +0/−145
• gen/Network/AWS/CertificateManager/ImportCertificate.hs +0/−195
• gen/Network/AWS/CertificateManager/ListCertificates.hs +0/−189
• gen/Network/AWS/CertificateManager/ListTagsForCertificate.hs +0/−135
• gen/Network/AWS/CertificateManager/RemoveTagsFromCertificate.hs +0/−126
• gen/Network/AWS/CertificateManager/RequestCertificate.hs +0/−202
• gen/Network/AWS/CertificateManager/ResendValidationEmail.hs +0/−135
• gen/Network/AWS/CertificateManager/Types.hs +0/−280
• gen/Network/AWS/CertificateManager/Types/Product.hs +0/−777
• gen/Network/AWS/CertificateManager/Types/Sum.hs +0/−536
• gen/Network/AWS/CertificateManager/UpdateCertificateOptions.hs +0/−124
• gen/Network/AWS/CertificateManager/Waiters.hs +0/−21
• test/Main.hs +11/−9
• test/Test/AWS/CertificateManager.hs +0/−23
• test/Test/AWS/CertificateManager/Internal.hs +0/−14
• test/Test/AWS/Gen/CertificateManager.hs +0/−255
• test/Test/Amazonka/CertificateManager.hs +20/−0
• test/Test/Amazonka/CertificateManager/Internal.hs +8/−0
• test/Test/Amazonka/Gen/CertificateManager.hs +338/−0

@@ -7,9 +7,8 @@   ## Version--`1.6.1`-+ +`2.0` - Derived from API version @2015-12-08@ of the AWS service descriptions, licensed under Apache 2.0.  ## Description @@ -26,7 +25,7 @@ The provided lenses should be compatible with any of the major lens libraries [lens](http://hackage.haskell.org/package/lens) or [lens-family-core](http://hackage.haskell.org/package/lens-family-core). -See [Network.AWS.CertificateManager](http://hackage.haskell.org/package/amazonka-certificatemanager/docs/Network-AWS-CertificateManager.html)+See [Amazonka.CertificateManager](http://hackage.haskell.org/package/amazonka-certificatemanager/docs/Amazonka-CertificateManager.html) or [the AWS documentation](https://aws.amazon.com/documentation/) to get started.  

@@ -1,2 +0,0 @@-import           Distribution.Simple-main = defaultMain

@@ -1,97 +1,125 @@-name:                  amazonka-certificatemanager-version:               1.6.1-synopsis:              Amazon Certificate Manager SDK.-homepage:              https://github.com/brendanhay/amazonka-bug-reports:           https://github.com/brendanhay/amazonka/issues-license:               MPL-2.0-license-file:          LICENSE-author:                Brendan Hay-maintainer:            Brendan Hay <brendan.g.hay+amazonka@gmail.com>-copyright:             Copyright (c) 2013-2018 Brendan Hay-category:              Network, AWS, Cloud, Distributed Computing-build-type:            Simple-cabal-version:         >= 1.10-extra-source-files:    README.md fixture/*.yaml fixture/*.proto src/.gitkeep+cabal-version:      2.2+name:               amazonka-certificatemanager+version:            2.0+synopsis:           Amazon Certificate Manager SDK.+homepage:           https://github.com/brendanhay/amazonka+bug-reports:        https://github.com/brendanhay/amazonka/issues+license:            MPL-2.0+license-file:       LICENSE+author:             Brendan Hay+maintainer:+  Brendan Hay <brendan.g.hay+amazonka@gmail.com>, Jack Kelly <jack@jackkelly.name>++copyright:          Copyright (c) 2013-2023 Brendan Hay+category:           AWS+build-type:         Simple+extra-source-files:+  fixture/*.proto+  fixture/*.yaml+  README.md+  src/.gitkeep+ description:-    The types from this library are intended to be used with-    <http://hackage.haskell.org/package/amazonka amazonka>, which provides-    mechanisms for specifying AuthN/AuthZ information, sending requests,-    and receiving responses.-    .-    Lenses are used for constructing and manipulating types,-    due to the depth of nesting of AWS types and transparency regarding-    de/serialisation into more palatable Haskell values.-    The provided lenses should be compatible with any of the major lens libraries-    such as <http://hackage.haskell.org/package/lens lens> or-    <http://hackage.haskell.org/package/lens-family-core lens-family-core>.-    .-    See "Network.AWS.CertificateManager" or <https://aws.amazon.com/documentation/ the AWS documentation>-    to get started.+  Derived from API version @2015-12-08@ of the AWS service descriptions, licensed under Apache 2.0.+  .+  The types from this library are intended to be used with <http://hackage.haskell.org/package/amazonka amazonka>,+  which provides mechanisms for specifying AuthN/AuthZ information, sending requests, and receiving responses.+  .+  It is recommended to use generic lenses or optics from packages such as <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify optional fields and deconstruct responses.+  .+  Generated lenses can be found in "Amazonka.CertificateManager.Lens" and are+  suitable for use with a lens package such as <http://hackage.haskell.org/package/lens lens> or <http://hackage.haskell.org/package/lens-family-core lens-family-core>.+  .+  See "Amazonka.CertificateManager" and the <https://aws.amazon.com/documentation/ AWS documentation> to get started.  source-repository head-    type:              git-    location:          git://github.com/brendanhay/amazonka.git-    subdir:            amazonka-certificatemanager+  type:     git+  location: git://github.com/brendanhay/amazonka.git+  subdir:   amazonka-certificatemanager  library-    default-language:  Haskell2010-    hs-source-dirs:    src gen--    ghc-options:-        -Wall-        -fwarn-incomplete-uni-patterns-        -fwarn-incomplete-record-updates-        -funbox-strict-fields--    exposed-modules:-          Network.AWS.CertificateManager-        , Network.AWS.CertificateManager.AddTagsToCertificate-        , Network.AWS.CertificateManager.DeleteCertificate-        , Network.AWS.CertificateManager.DescribeCertificate-        , Network.AWS.CertificateManager.ExportCertificate-        , Network.AWS.CertificateManager.GetCertificate-        , Network.AWS.CertificateManager.ImportCertificate-        , Network.AWS.CertificateManager.ListCertificates-        , Network.AWS.CertificateManager.ListTagsForCertificate-        , Network.AWS.CertificateManager.RemoveTagsFromCertificate-        , Network.AWS.CertificateManager.RequestCertificate-        , Network.AWS.CertificateManager.ResendValidationEmail-        , Network.AWS.CertificateManager.Types-        , Network.AWS.CertificateManager.UpdateCertificateOptions-        , Network.AWS.CertificateManager.Waiters+  default-language: Haskell2010+  hs-source-dirs:   src gen+  ghc-options:+    -Wall -fwarn-incomplete-uni-patterns+    -fwarn-incomplete-record-updates -funbox-strict-fields -    other-modules:-          Network.AWS.CertificateManager.Types.Product-        , Network.AWS.CertificateManager.Types.Sum+  exposed-modules:+    Amazonka.CertificateManager+    Amazonka.CertificateManager.AddTagsToCertificate+    Amazonka.CertificateManager.DeleteCertificate+    Amazonka.CertificateManager.DescribeCertificate+    Amazonka.CertificateManager.ExportCertificate+    Amazonka.CertificateManager.GetAccountConfiguration+    Amazonka.CertificateManager.GetCertificate+    Amazonka.CertificateManager.ImportCertificate+    Amazonka.CertificateManager.Lens+    Amazonka.CertificateManager.ListCertificates+    Amazonka.CertificateManager.ListTagsForCertificate+    Amazonka.CertificateManager.PutAccountConfiguration+    Amazonka.CertificateManager.RemoveTagsFromCertificate+    Amazonka.CertificateManager.RenewCertificate+    Amazonka.CertificateManager.RequestCertificate+    Amazonka.CertificateManager.ResendValidationEmail+    Amazonka.CertificateManager.Types+    Amazonka.CertificateManager.Types.CertificateDetail+    Amazonka.CertificateManager.Types.CertificateOptions+    Amazonka.CertificateManager.Types.CertificateStatus+    Amazonka.CertificateManager.Types.CertificateSummary+    Amazonka.CertificateManager.Types.CertificateTransparencyLoggingPreference+    Amazonka.CertificateManager.Types.CertificateType+    Amazonka.CertificateManager.Types.DomainStatus+    Amazonka.CertificateManager.Types.DomainValidation+    Amazonka.CertificateManager.Types.DomainValidationOption+    Amazonka.CertificateManager.Types.ExpiryEventsConfiguration+    Amazonka.CertificateManager.Types.ExtendedKeyUsage+    Amazonka.CertificateManager.Types.ExtendedKeyUsageName+    Amazonka.CertificateManager.Types.FailureReason+    Amazonka.CertificateManager.Types.Filters+    Amazonka.CertificateManager.Types.KeyAlgorithm+    Amazonka.CertificateManager.Types.KeyUsage+    Amazonka.CertificateManager.Types.KeyUsageName+    Amazonka.CertificateManager.Types.RecordType+    Amazonka.CertificateManager.Types.RenewalEligibility+    Amazonka.CertificateManager.Types.RenewalStatus+    Amazonka.CertificateManager.Types.RenewalSummary+    Amazonka.CertificateManager.Types.ResourceRecord+    Amazonka.CertificateManager.Types.RevocationReason+    Amazonka.CertificateManager.Types.SortBy+    Amazonka.CertificateManager.Types.SortOrder+    Amazonka.CertificateManager.Types.Tag+    Amazonka.CertificateManager.Types.ValidationMethod+    Amazonka.CertificateManager.UpdateCertificateOptions+    Amazonka.CertificateManager.Waiters -    build-depends:-          amazonka-core == 1.6.1.*-        , base          >= 4.7     && < 5+  build-depends:+    , amazonka-core  >=2.0  && <2.1+    , base           >=4.12 && <5  test-suite amazonka-certificatemanager-test-    type:              exitcode-stdio-1.0-    default-language:  Haskell2010-    hs-source-dirs:    test-    main-is:           Main.hs--    ghc-options:       -Wall -threaded+  type:             exitcode-stdio-1.0+  default-language: Haskell2010+  hs-source-dirs:   test+  main-is:          Main.hs+  ghc-options:      -Wall -threaded -    -- This section is encoded by the template and any modules added by-    -- hand outside these namespaces will not correctly be added to the-    -- distribution package.-    other-modules:-          Test.AWS.CertificateManager-        , Test.AWS.Gen.CertificateManager-        , Test.AWS.CertificateManager.Internal+  -- This section is encoded by the template and any modules added by+  -- hand outside these namespaces will not correctly be added to the+  -- distribution package.+  other-modules:+    Test.Amazonka.CertificateManager+    Test.Amazonka.CertificateManager.Internal+    Test.Amazonka.Gen.CertificateManager -    build-depends:-          amazonka-core == 1.6.1.*-        , amazonka-test == 1.6.1.*-        , amazonka-certificatemanager-        , base-        , bytestring-        , tasty-        , tasty-hunit-        , text-        , time-        , unordered-containers+  build-depends:+    , amazonka-certificatemanager+    , amazonka-core                >=2.0 && <2.1+    , amazonka-test                >=2.0 && <2.1+    , base+    , bytestring+    , case-insensitive+    , tasty+    , tasty-hunit+    , text+    , time+    , unordered-containers

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/acm/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  acm.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,315 @@+{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- |+-- Module      : Amazonka.CertificateManager+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Derived from API version @2015-12-08@ of the AWS service descriptions, licensed under Apache 2.0.+--+-- Certificate Manager+--+-- You can use Certificate Manager (ACM) to manage SSL\/TLS certificates+-- for your Amazon Web Services-based websites and applications. For more+-- information about using ACM, see the+-- <https://docs.aws.amazon.com/acm/latest/userguide/ Certificate Manager User Guide>.+module Amazonka.CertificateManager+  ( -- * Service Configuration+    defaultService,++    -- * Errors+    -- $errors++    -- ** AccessDeniedException+    _AccessDeniedException,++    -- ** ConflictException+    _ConflictException,++    -- ** InvalidArgsException+    _InvalidArgsException,++    -- ** InvalidArnException+    _InvalidArnException,++    -- ** InvalidDomainValidationOptionsException+    _InvalidDomainValidationOptionsException,++    -- ** InvalidParameterException+    _InvalidParameterException,++    -- ** InvalidStateException+    _InvalidStateException,++    -- ** InvalidTagException+    _InvalidTagException,++    -- ** LimitExceededException+    _LimitExceededException,++    -- ** RequestInProgressException+    _RequestInProgressException,++    -- ** ResourceInUseException+    _ResourceInUseException,++    -- ** ResourceNotFoundException+    _ResourceNotFoundException,++    -- ** TagPolicyException+    _TagPolicyException,++    -- ** ThrottlingException+    _ThrottlingException,++    -- ** TooManyTagsException+    _TooManyTagsException,++    -- ** ValidationException+    _ValidationException,++    -- * Waiters+    -- $waiters++    -- ** CertificateValidated+    newCertificateValidated,++    -- * Operations+    -- $operations++    -- ** AddTagsToCertificate+    AddTagsToCertificate (AddTagsToCertificate'),+    newAddTagsToCertificate,+    AddTagsToCertificateResponse (AddTagsToCertificateResponse'),+    newAddTagsToCertificateResponse,++    -- ** DeleteCertificate+    DeleteCertificate (DeleteCertificate'),+    newDeleteCertificate,+    DeleteCertificateResponse (DeleteCertificateResponse'),+    newDeleteCertificateResponse,++    -- ** DescribeCertificate+    DescribeCertificate (DescribeCertificate'),+    newDescribeCertificate,+    DescribeCertificateResponse (DescribeCertificateResponse'),+    newDescribeCertificateResponse,++    -- ** ExportCertificate+    ExportCertificate (ExportCertificate'),+    newExportCertificate,+    ExportCertificateResponse (ExportCertificateResponse'),+    newExportCertificateResponse,++    -- ** GetAccountConfiguration+    GetAccountConfiguration (GetAccountConfiguration'),+    newGetAccountConfiguration,+    GetAccountConfigurationResponse (GetAccountConfigurationResponse'),+    newGetAccountConfigurationResponse,++    -- ** GetCertificate+    GetCertificate (GetCertificate'),+    newGetCertificate,+    GetCertificateResponse (GetCertificateResponse'),+    newGetCertificateResponse,++    -- ** ImportCertificate+    ImportCertificate (ImportCertificate'),+    newImportCertificate,+    ImportCertificateResponse (ImportCertificateResponse'),+    newImportCertificateResponse,++    -- ** ListCertificates (Paginated)+    ListCertificates (ListCertificates'),+    newListCertificates,+    ListCertificatesResponse (ListCertificatesResponse'),+    newListCertificatesResponse,++    -- ** ListTagsForCertificate+    ListTagsForCertificate (ListTagsForCertificate'),+    newListTagsForCertificate,+    ListTagsForCertificateResponse (ListTagsForCertificateResponse'),+    newListTagsForCertificateResponse,++    -- ** PutAccountConfiguration+    PutAccountConfiguration (PutAccountConfiguration'),+    newPutAccountConfiguration,+    PutAccountConfigurationResponse (PutAccountConfigurationResponse'),+    newPutAccountConfigurationResponse,++    -- ** RemoveTagsFromCertificate+    RemoveTagsFromCertificate (RemoveTagsFromCertificate'),+    newRemoveTagsFromCertificate,+    RemoveTagsFromCertificateResponse (RemoveTagsFromCertificateResponse'),+    newRemoveTagsFromCertificateResponse,++    -- ** RenewCertificate+    RenewCertificate (RenewCertificate'),+    newRenewCertificate,+    RenewCertificateResponse (RenewCertificateResponse'),+    newRenewCertificateResponse,++    -- ** RequestCertificate+    RequestCertificate (RequestCertificate'),+    newRequestCertificate,+    RequestCertificateResponse (RequestCertificateResponse'),+    newRequestCertificateResponse,++    -- ** ResendValidationEmail+    ResendValidationEmail (ResendValidationEmail'),+    newResendValidationEmail,+    ResendValidationEmailResponse (ResendValidationEmailResponse'),+    newResendValidationEmailResponse,++    -- ** UpdateCertificateOptions+    UpdateCertificateOptions (UpdateCertificateOptions'),+    newUpdateCertificateOptions,+    UpdateCertificateOptionsResponse (UpdateCertificateOptionsResponse'),+    newUpdateCertificateOptionsResponse,++    -- * Types++    -- ** CertificateStatus+    CertificateStatus (..),++    -- ** CertificateTransparencyLoggingPreference+    CertificateTransparencyLoggingPreference (..),++    -- ** CertificateType+    CertificateType (..),++    -- ** DomainStatus+    DomainStatus (..),++    -- ** ExtendedKeyUsageName+    ExtendedKeyUsageName (..),++    -- ** FailureReason+    FailureReason (..),++    -- ** KeyAlgorithm+    KeyAlgorithm (..),++    -- ** KeyUsageName+    KeyUsageName (..),++    -- ** RecordType+    RecordType (..),++    -- ** RenewalEligibility+    RenewalEligibility (..),++    -- ** RenewalStatus+    RenewalStatus (..),++    -- ** RevocationReason+    RevocationReason (..),++    -- ** SortBy+    SortBy (..),++    -- ** SortOrder+    SortOrder (..),++    -- ** ValidationMethod+    ValidationMethod (..),++    -- ** CertificateDetail+    CertificateDetail (CertificateDetail'),+    newCertificateDetail,++    -- ** CertificateOptions+    CertificateOptions (CertificateOptions'),+    newCertificateOptions,++    -- ** CertificateSummary+    CertificateSummary (CertificateSummary'),+    newCertificateSummary,++    -- ** DomainValidation+    DomainValidation (DomainValidation'),+    newDomainValidation,++    -- ** DomainValidationOption+    DomainValidationOption (DomainValidationOption'),+    newDomainValidationOption,++    -- ** ExpiryEventsConfiguration+    ExpiryEventsConfiguration (ExpiryEventsConfiguration'),+    newExpiryEventsConfiguration,++    -- ** ExtendedKeyUsage+    ExtendedKeyUsage (ExtendedKeyUsage'),+    newExtendedKeyUsage,++    -- ** Filters+    Filters (Filters'),+    newFilters,++    -- ** KeyUsage+    KeyUsage (KeyUsage'),+    newKeyUsage,++    -- ** RenewalSummary+    RenewalSummary (RenewalSummary'),+    newRenewalSummary,++    -- ** ResourceRecord+    ResourceRecord (ResourceRecord'),+    newResourceRecord,++    -- ** Tag+    Tag (Tag'),+    newTag,+  )+where++import Amazonka.CertificateManager.AddTagsToCertificate+import Amazonka.CertificateManager.DeleteCertificate+import Amazonka.CertificateManager.DescribeCertificate+import Amazonka.CertificateManager.ExportCertificate+import Amazonka.CertificateManager.GetAccountConfiguration+import Amazonka.CertificateManager.GetCertificate+import Amazonka.CertificateManager.ImportCertificate+import Amazonka.CertificateManager.Lens+import Amazonka.CertificateManager.ListCertificates+import Amazonka.CertificateManager.ListTagsForCertificate+import Amazonka.CertificateManager.PutAccountConfiguration+import Amazonka.CertificateManager.RemoveTagsFromCertificate+import Amazonka.CertificateManager.RenewCertificate+import Amazonka.CertificateManager.RequestCertificate+import Amazonka.CertificateManager.ResendValidationEmail+import Amazonka.CertificateManager.Types+import Amazonka.CertificateManager.UpdateCertificateOptions+import Amazonka.CertificateManager.Waiters++-- $errors+-- Error matchers are designed for use with the functions provided by+-- <http://hackage.haskell.org/package/lens/docs/Control-Exception-Lens.html Control.Exception.Lens>.+-- This allows catching (and rethrowing) service specific errors returned+-- by 'CertificateManager'.++-- $operations+-- Some AWS operations return results that are incomplete and require subsequent+-- requests in order to obtain the entire result set. The process of sending+-- subsequent requests to continue where a previous request left off is called+-- pagination. For example, the 'ListObjects' operation of Amazon S3 returns up to+-- 1000 objects at a time, and you must send subsequent requests with the+-- appropriate Marker in order to retrieve the next page of results.+--+-- Operations that have an 'AWSPager' instance can transparently perform subsequent+-- requests, correctly setting Markers and other request facets to iterate through+-- the entire result set of a truncated API operation. Operations which support+-- this have an additional note in the documentation.+--+-- Many operations have the ability to filter results on the server side. See the+-- individual operation parameters for details.++-- $waiters+-- Waiters poll by repeatedly sending a request until some remote success condition+-- configured by the 'Wait' specification is fulfilled. The 'Wait' specification+-- determines how many attempts should be made, in addition to delay and retry strategies.

@@ -0,0 +1,191 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.AddTagsToCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Adds one or more tags to an ACM certificate. Tags are labels that you+-- can use to identify and organize your Amazon Web Services resources.+-- Each tag consists of a @key@ and an optional @value@. You specify the+-- certificate on input by its Amazon Resource Name (ARN). You specify the+-- tag by using a key-value pair.+--+-- You can apply a tag to just one certificate if you want to identify a+-- specific characteristic of that certificate, or you can apply the same+-- tag to multiple certificates if you want to filter for a common+-- relationship among those certificates. Similarly, you can apply the same+-- tag to multiple resources if you want to specify a relationship among+-- those resources. For example, you can add the same tag to an ACM+-- certificate and an Elastic Load Balancing load balancer to indicate that+-- they are both used by the same website. For more information, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/tags.html Tagging ACM certificates>.+--+-- To remove one or more tags, use the RemoveTagsFromCertificate action. To+-- view all of the tags that have been applied to the certificate, use the+-- ListTagsForCertificate action.+module Amazonka.CertificateManager.AddTagsToCertificate+  ( -- * Creating a Request+    AddTagsToCertificate (..),+    newAddTagsToCertificate,++    -- * Request Lenses+    addTagsToCertificate_certificateArn,+    addTagsToCertificate_tags,++    -- * Destructuring the Response+    AddTagsToCertificateResponse (..),+    newAddTagsToCertificateResponse,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newAddTagsToCertificate' smart constructor.+data AddTagsToCertificate = AddTagsToCertificate'+  { -- | String that contains the ARN of the ACM certificate to which the tag is+    -- to be applied. This must be of the form:+    --+    -- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    --+    -- For more information about ARNs, see+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+    certificateArn :: Prelude.Text,+    -- | The key-value pair that defines the tag. The tag value is optional.+    tags :: Prelude.NonEmpty Tag+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'AddTagsToCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'addTagsToCertificate_certificateArn' - String that contains the ARN of the ACM certificate to which the tag is+-- to be applied. This must be of the form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+--+-- 'tags', 'addTagsToCertificate_tags' - The key-value pair that defines the tag. The tag value is optional.+newAddTagsToCertificate ::+  -- | 'certificateArn'+  Prelude.Text ->+  -- | 'tags'+  Prelude.NonEmpty Tag ->+  AddTagsToCertificate+newAddTagsToCertificate pCertificateArn_ pTags_ =+  AddTagsToCertificate'+    { certificateArn =+        pCertificateArn_,+      tags = Lens.coerced Lens.# pTags_+    }++-- | String that contains the ARN of the ACM certificate to which the tag is+-- to be applied. This must be of the form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+addTagsToCertificate_certificateArn :: Lens.Lens' AddTagsToCertificate Prelude.Text+addTagsToCertificate_certificateArn = Lens.lens (\AddTagsToCertificate' {certificateArn} -> certificateArn) (\s@AddTagsToCertificate' {} a -> s {certificateArn = a} :: AddTagsToCertificate)++-- | The key-value pair that defines the tag. The tag value is optional.+addTagsToCertificate_tags :: Lens.Lens' AddTagsToCertificate (Prelude.NonEmpty Tag)+addTagsToCertificate_tags = Lens.lens (\AddTagsToCertificate' {tags} -> tags) (\s@AddTagsToCertificate' {} a -> s {tags = a} :: AddTagsToCertificate) Prelude.. Lens.coerced++instance Core.AWSRequest AddTagsToCertificate where+  type+    AWSResponse AddTagsToCertificate =+      AddTagsToCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveNull AddTagsToCertificateResponse'++instance Prelude.Hashable AddTagsToCertificate where+  hashWithSalt _salt AddTagsToCertificate' {..} =+    _salt+      `Prelude.hashWithSalt` certificateArn+      `Prelude.hashWithSalt` tags++instance Prelude.NFData AddTagsToCertificate where+  rnf AddTagsToCertificate' {..} =+    Prelude.rnf certificateArn+      `Prelude.seq` Prelude.rnf tags++instance Data.ToHeaders AddTagsToCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.AddTagsToCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON AddTagsToCertificate where+  toJSON AddTagsToCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn),+            Prelude.Just ("Tags" Data..= tags)+          ]+      )++instance Data.ToPath AddTagsToCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery AddTagsToCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newAddTagsToCertificateResponse' smart constructor.+data AddTagsToCertificateResponse = AddTagsToCertificateResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'AddTagsToCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newAddTagsToCertificateResponse ::+  AddTagsToCertificateResponse+newAddTagsToCertificateResponse =+  AddTagsToCertificateResponse'++instance Prelude.NFData AddTagsToCertificateResponse where+  rnf _ = ()

@@ -0,0 +1,165 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.DeleteCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Deletes a certificate and its associated private key. If this action+-- succeeds, the certificate no longer appears in the list that can be+-- displayed by calling the ListCertificates action or be retrieved by+-- calling the GetCertificate action. The certificate will not be available+-- for use by Amazon Web Services services integrated with ACM.+--+-- You cannot delete an ACM certificate that is being used by another+-- Amazon Web Services service. To delete a certificate that is in use, the+-- certificate association must first be removed.+module Amazonka.CertificateManager.DeleteCertificate+  ( -- * Creating a Request+    DeleteCertificate (..),+    newDeleteCertificate,++    -- * Request Lenses+    deleteCertificate_certificateArn,++    -- * Destructuring the Response+    DeleteCertificateResponse (..),+    newDeleteCertificateResponse,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newDeleteCertificate' smart constructor.+data DeleteCertificate = DeleteCertificate'+  { -- | String that contains the ARN of the ACM certificate to be deleted. This+    -- must be of the form:+    --+    -- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    --+    -- For more information about ARNs, see+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+    certificateArn :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'deleteCertificate_certificateArn' - String that contains the ARN of the ACM certificate to be deleted. This+-- must be of the form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+newDeleteCertificate ::+  -- | 'certificateArn'+  Prelude.Text ->+  DeleteCertificate+newDeleteCertificate pCertificateArn_ =+  DeleteCertificate'+    { certificateArn =+        pCertificateArn_+    }++-- | String that contains the ARN of the ACM certificate to be deleted. This+-- must be of the form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+deleteCertificate_certificateArn :: Lens.Lens' DeleteCertificate Prelude.Text+deleteCertificate_certificateArn = Lens.lens (\DeleteCertificate' {certificateArn} -> certificateArn) (\s@DeleteCertificate' {} a -> s {certificateArn = a} :: DeleteCertificate)++instance Core.AWSRequest DeleteCertificate where+  type+    AWSResponse DeleteCertificate =+      DeleteCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveNull DeleteCertificateResponse'++instance Prelude.Hashable DeleteCertificate where+  hashWithSalt _salt DeleteCertificate' {..} =+    _salt `Prelude.hashWithSalt` certificateArn++instance Prelude.NFData DeleteCertificate where+  rnf DeleteCertificate' {..} =+    Prelude.rnf certificateArn++instance Data.ToHeaders DeleteCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.DeleteCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DeleteCertificate where+  toJSON DeleteCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn)+          ]+      )++instance Data.ToPath DeleteCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery DeleteCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newDeleteCertificateResponse' smart constructor.+data DeleteCertificateResponse = DeleteCertificateResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newDeleteCertificateResponse ::+  DeleteCertificateResponse+newDeleteCertificateResponse =+  DeleteCertificateResponse'++instance Prelude.NFData DeleteCertificateResponse where+  rnf _ = ()

@@ -0,0 +1,196 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.DescribeCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Returns detailed metadata about the specified ACM certificate.+--+-- If you have just created a certificate using the @RequestCertificate@+-- action, there is a delay of several seconds before you can retrieve+-- information about it.+module Amazonka.CertificateManager.DescribeCertificate+  ( -- * Creating a Request+    DescribeCertificate (..),+    newDescribeCertificate,++    -- * Request Lenses+    describeCertificate_certificateArn,++    -- * Destructuring the Response+    DescribeCertificateResponse (..),+    newDescribeCertificateResponse,++    -- * Response Lenses+    describeCertificateResponse_certificate,+    describeCertificateResponse_httpStatus,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newDescribeCertificate' smart constructor.+data DescribeCertificate = DescribeCertificate'+  { -- | The Amazon Resource Name (ARN) of the ACM certificate. The ARN must have+    -- the following form:+    --+    -- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    --+    -- For more information about ARNs, see+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+    certificateArn :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DescribeCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'describeCertificate_certificateArn' - The Amazon Resource Name (ARN) of the ACM certificate. The ARN must have+-- the following form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+newDescribeCertificate ::+  -- | 'certificateArn'+  Prelude.Text ->+  DescribeCertificate+newDescribeCertificate pCertificateArn_ =+  DescribeCertificate'+    { certificateArn =+        pCertificateArn_+    }++-- | The Amazon Resource Name (ARN) of the ACM certificate. The ARN must have+-- the following form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+describeCertificate_certificateArn :: Lens.Lens' DescribeCertificate Prelude.Text+describeCertificate_certificateArn = Lens.lens (\DescribeCertificate' {certificateArn} -> certificateArn) (\s@DescribeCertificate' {} a -> s {certificateArn = a} :: DescribeCertificate)++instance Core.AWSRequest DescribeCertificate where+  type+    AWSResponse DescribeCertificate =+      DescribeCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          DescribeCertificateResponse'+            Prelude.<$> (x Data..?> "Certificate")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable DescribeCertificate where+  hashWithSalt _salt DescribeCertificate' {..} =+    _salt `Prelude.hashWithSalt` certificateArn++instance Prelude.NFData DescribeCertificate where+  rnf DescribeCertificate' {..} =+    Prelude.rnf certificateArn++instance Data.ToHeaders DescribeCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.DescribeCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DescribeCertificate where+  toJSON DescribeCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn)+          ]+      )++instance Data.ToPath DescribeCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery DescribeCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newDescribeCertificateResponse' smart constructor.+data DescribeCertificateResponse = DescribeCertificateResponse'+  { -- | Metadata about an ACM certificate.+    certificate :: Prelude.Maybe CertificateDetail,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DescribeCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificate', 'describeCertificateResponse_certificate' - Metadata about an ACM certificate.+--+-- 'httpStatus', 'describeCertificateResponse_httpStatus' - The response's http status code.+newDescribeCertificateResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  DescribeCertificateResponse+newDescribeCertificateResponse pHttpStatus_ =+  DescribeCertificateResponse'+    { certificate =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | Metadata about an ACM certificate.+describeCertificateResponse_certificate :: Lens.Lens' DescribeCertificateResponse (Prelude.Maybe CertificateDetail)+describeCertificateResponse_certificate = Lens.lens (\DescribeCertificateResponse' {certificate} -> certificate) (\s@DescribeCertificateResponse' {} a -> s {certificate = a} :: DescribeCertificateResponse)++-- | The response's http status code.+describeCertificateResponse_httpStatus :: Lens.Lens' DescribeCertificateResponse Prelude.Int+describeCertificateResponse_httpStatus = Lens.lens (\DescribeCertificateResponse' {httpStatus} -> httpStatus) (\s@DescribeCertificateResponse' {} a -> s {httpStatus = a} :: DescribeCertificateResponse)++instance Prelude.NFData DescribeCertificateResponse where+  rnf DescribeCertificateResponse' {..} =+    Prelude.rnf certificate+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,281 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.ExportCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Exports a private certificate issued by a private certificate authority+-- (CA) for use anywhere. The exported file contains the certificate, the+-- certificate chain, and the encrypted private 2048-bit RSA key associated+-- with the public key that is embedded in the certificate. For security,+-- you must assign a passphrase for the private key when exporting it.+--+-- For information about exporting and formatting a certificate using the+-- ACM console or CLI, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-export-private.html Export a Private Certificate>.+module Amazonka.CertificateManager.ExportCertificate+  ( -- * Creating a Request+    ExportCertificate (..),+    newExportCertificate,++    -- * Request Lenses+    exportCertificate_certificateArn,+    exportCertificate_passphrase,++    -- * Destructuring the Response+    ExportCertificateResponse (..),+    newExportCertificateResponse,++    -- * Response Lenses+    exportCertificateResponse_certificate,+    exportCertificateResponse_certificateChain,+    exportCertificateResponse_privateKey,+    exportCertificateResponse_httpStatus,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newExportCertificate' smart constructor.+data ExportCertificate = ExportCertificate'+  { -- | An Amazon Resource Name (ARN) of the issued certificate. This must be of+    -- the form:+    --+    -- @arn:aws:acm:region:account:certificate\/12345678-1234-1234-1234-123456789012@+    certificateArn :: Prelude.Text,+    -- | Passphrase to associate with the encrypted exported private key.+    --+    -- When creating your passphrase, you can use any ASCII character except #,+    -- \$, or %.+    --+    -- If you want to later decrypt the private key, you must have the+    -- passphrase. You can use the following OpenSSL command to decrypt a+    -- private key. After entering the command, you are prompted for the+    -- passphrase.+    --+    -- @openssl rsa -in encrypted_key.pem -out decrypted_key.pem@+    passphrase :: Data.Sensitive Data.Base64+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ExportCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'exportCertificate_certificateArn' - An Amazon Resource Name (ARN) of the issued certificate. This must be of+-- the form:+--+-- @arn:aws:acm:region:account:certificate\/12345678-1234-1234-1234-123456789012@+--+-- 'passphrase', 'exportCertificate_passphrase' - Passphrase to associate with the encrypted exported private key.+--+-- When creating your passphrase, you can use any ASCII character except #,+-- \$, or %.+--+-- If you want to later decrypt the private key, you must have the+-- passphrase. You can use the following OpenSSL command to decrypt a+-- private key. After entering the command, you are prompted for the+-- passphrase.+--+-- @openssl rsa -in encrypted_key.pem -out decrypted_key.pem@--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+newExportCertificate ::+  -- | 'certificateArn'+  Prelude.Text ->+  -- | 'passphrase'+  Prelude.ByteString ->+  ExportCertificate+newExportCertificate pCertificateArn_ pPassphrase_ =+  ExportCertificate'+    { certificateArn =+        pCertificateArn_,+      passphrase =+        Data._Sensitive+          Prelude.. Data._Base64+          Lens.# pPassphrase_+    }++-- | An Amazon Resource Name (ARN) of the issued certificate. This must be of+-- the form:+--+-- @arn:aws:acm:region:account:certificate\/12345678-1234-1234-1234-123456789012@+exportCertificate_certificateArn :: Lens.Lens' ExportCertificate Prelude.Text+exportCertificate_certificateArn = Lens.lens (\ExportCertificate' {certificateArn} -> certificateArn) (\s@ExportCertificate' {} a -> s {certificateArn = a} :: ExportCertificate)++-- | Passphrase to associate with the encrypted exported private key.+--+-- When creating your passphrase, you can use any ASCII character except #,+-- \$, or %.+--+-- If you want to later decrypt the private key, you must have the+-- passphrase. You can use the following OpenSSL command to decrypt a+-- private key. After entering the command, you are prompted for the+-- passphrase.+--+-- @openssl rsa -in encrypted_key.pem -out decrypted_key.pem@--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+exportCertificate_passphrase :: Lens.Lens' ExportCertificate Prelude.ByteString+exportCertificate_passphrase = Lens.lens (\ExportCertificate' {passphrase} -> passphrase) (\s@ExportCertificate' {} a -> s {passphrase = a} :: ExportCertificate) Prelude.. Data._Sensitive Prelude.. Data._Base64++instance Core.AWSRequest ExportCertificate where+  type+    AWSResponse ExportCertificate =+      ExportCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ExportCertificateResponse'+            Prelude.<$> (x Data..?> "Certificate")+            Prelude.<*> (x Data..?> "CertificateChain")+            Prelude.<*> (x Data..?> "PrivateKey")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ExportCertificate where+  hashWithSalt _salt ExportCertificate' {..} =+    _salt+      `Prelude.hashWithSalt` certificateArn+      `Prelude.hashWithSalt` passphrase++instance Prelude.NFData ExportCertificate where+  rnf ExportCertificate' {..} =+    Prelude.rnf certificateArn+      `Prelude.seq` Prelude.rnf passphrase++instance Data.ToHeaders ExportCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.ExportCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ExportCertificate where+  toJSON ExportCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn),+            Prelude.Just ("Passphrase" Data..= passphrase)+          ]+      )++instance Data.ToPath ExportCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery ExportCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newExportCertificateResponse' smart constructor.+data ExportCertificateResponse = ExportCertificateResponse'+  { -- | The base64 PEM-encoded certificate.+    certificate :: Prelude.Maybe Prelude.Text,+    -- | The base64 PEM-encoded certificate chain. This does not include the+    -- certificate that you are exporting.+    certificateChain :: Prelude.Maybe Prelude.Text,+    -- | The encrypted private key associated with the public key in the+    -- certificate. The key is output in PKCS #8 format and is base64+    -- PEM-encoded.+    privateKey :: Prelude.Maybe (Data.Sensitive Prelude.Text),+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ExportCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificate', 'exportCertificateResponse_certificate' - The base64 PEM-encoded certificate.+--+-- 'certificateChain', 'exportCertificateResponse_certificateChain' - The base64 PEM-encoded certificate chain. This does not include the+-- certificate that you are exporting.+--+-- 'privateKey', 'exportCertificateResponse_privateKey' - The encrypted private key associated with the public key in the+-- certificate. The key is output in PKCS #8 format and is base64+-- PEM-encoded.+--+-- 'httpStatus', 'exportCertificateResponse_httpStatus' - The response's http status code.+newExportCertificateResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ExportCertificateResponse+newExportCertificateResponse pHttpStatus_ =+  ExportCertificateResponse'+    { certificate =+        Prelude.Nothing,+      certificateChain = Prelude.Nothing,+      privateKey = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The base64 PEM-encoded certificate.+exportCertificateResponse_certificate :: Lens.Lens' ExportCertificateResponse (Prelude.Maybe Prelude.Text)+exportCertificateResponse_certificate = Lens.lens (\ExportCertificateResponse' {certificate} -> certificate) (\s@ExportCertificateResponse' {} a -> s {certificate = a} :: ExportCertificateResponse)++-- | The base64 PEM-encoded certificate chain. This does not include the+-- certificate that you are exporting.+exportCertificateResponse_certificateChain :: Lens.Lens' ExportCertificateResponse (Prelude.Maybe Prelude.Text)+exportCertificateResponse_certificateChain = Lens.lens (\ExportCertificateResponse' {certificateChain} -> certificateChain) (\s@ExportCertificateResponse' {} a -> s {certificateChain = a} :: ExportCertificateResponse)++-- | The encrypted private key associated with the public key in the+-- certificate. The key is output in PKCS #8 format and is base64+-- PEM-encoded.+exportCertificateResponse_privateKey :: Lens.Lens' ExportCertificateResponse (Prelude.Maybe Prelude.Text)+exportCertificateResponse_privateKey = Lens.lens (\ExportCertificateResponse' {privateKey} -> privateKey) (\s@ExportCertificateResponse' {} a -> s {privateKey = a} :: ExportCertificateResponse) Prelude.. Lens.mapping Data._Sensitive++-- | The response's http status code.+exportCertificateResponse_httpStatus :: Lens.Lens' ExportCertificateResponse Prelude.Int+exportCertificateResponse_httpStatus = Lens.lens (\ExportCertificateResponse' {httpStatus} -> httpStatus) (\s@ExportCertificateResponse' {} a -> s {httpStatus = a} :: ExportCertificateResponse)++instance Prelude.NFData ExportCertificateResponse where+  rnf ExportCertificateResponse' {..} =+    Prelude.rnf certificate+      `Prelude.seq` Prelude.rnf certificateChain+      `Prelude.seq` Prelude.rnf privateKey+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,155 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.GetAccountConfiguration+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Returns the account configuration options associated with an Amazon Web+-- Services account.+module Amazonka.CertificateManager.GetAccountConfiguration+  ( -- * Creating a Request+    GetAccountConfiguration (..),+    newGetAccountConfiguration,++    -- * Destructuring the Response+    GetAccountConfigurationResponse (..),+    newGetAccountConfigurationResponse,++    -- * Response Lenses+    getAccountConfigurationResponse_expiryEvents,+    getAccountConfigurationResponse_httpStatus,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newGetAccountConfiguration' smart constructor.+data GetAccountConfiguration = GetAccountConfiguration'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetAccountConfiguration' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newGetAccountConfiguration ::+  GetAccountConfiguration+newGetAccountConfiguration = GetAccountConfiguration'++instance Core.AWSRequest GetAccountConfiguration where+  type+    AWSResponse GetAccountConfiguration =+      GetAccountConfigurationResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetAccountConfigurationResponse'+            Prelude.<$> (x Data..?> "ExpiryEvents")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetAccountConfiguration where+  hashWithSalt _salt _ =+    _salt `Prelude.hashWithSalt` ()++instance Prelude.NFData GetAccountConfiguration where+  rnf _ = ()++instance Data.ToHeaders GetAccountConfiguration where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.GetAccountConfiguration" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetAccountConfiguration where+  toJSON = Prelude.const (Data.Object Prelude.mempty)++instance Data.ToPath GetAccountConfiguration where+  toPath = Prelude.const "/"++instance Data.ToQuery GetAccountConfiguration where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newGetAccountConfigurationResponse' smart constructor.+data GetAccountConfigurationResponse = GetAccountConfigurationResponse'+  { -- | Expiration events configuration options associated with the Amazon Web+    -- Services account.+    expiryEvents :: Prelude.Maybe ExpiryEventsConfiguration,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetAccountConfigurationResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'expiryEvents', 'getAccountConfigurationResponse_expiryEvents' - Expiration events configuration options associated with the Amazon Web+-- Services account.+--+-- 'httpStatus', 'getAccountConfigurationResponse_httpStatus' - The response's http status code.+newGetAccountConfigurationResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetAccountConfigurationResponse+newGetAccountConfigurationResponse pHttpStatus_ =+  GetAccountConfigurationResponse'+    { expiryEvents =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | Expiration events configuration options associated with the Amazon Web+-- Services account.+getAccountConfigurationResponse_expiryEvents :: Lens.Lens' GetAccountConfigurationResponse (Prelude.Maybe ExpiryEventsConfiguration)+getAccountConfigurationResponse_expiryEvents = Lens.lens (\GetAccountConfigurationResponse' {expiryEvents} -> expiryEvents) (\s@GetAccountConfigurationResponse' {} a -> s {expiryEvents = a} :: GetAccountConfigurationResponse)++-- | The response's http status code.+getAccountConfigurationResponse_httpStatus :: Lens.Lens' GetAccountConfigurationResponse Prelude.Int+getAccountConfigurationResponse_httpStatus = Lens.lens (\GetAccountConfigurationResponse' {httpStatus} -> httpStatus) (\s@GetAccountConfigurationResponse' {} a -> s {httpStatus = a} :: GetAccountConfigurationResponse)++instance+  Prelude.NFData+    GetAccountConfigurationResponse+  where+  rnf GetAccountConfigurationResponse' {..} =+    Prelude.rnf expiryEvents+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,208 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.GetCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Retrieves an Amazon-issued certificate and its certificate chain. The+-- chain consists of the certificate of the issuing CA and the intermediate+-- certificates of any other subordinate CAs. All of the certificates are+-- base64 encoded. You can use+-- <https://wiki.openssl.org/index.php/Command_Line_Utilities OpenSSL> to+-- decode the certificates and inspect individual fields.+module Amazonka.CertificateManager.GetCertificate+  ( -- * Creating a Request+    GetCertificate (..),+    newGetCertificate,++    -- * Request Lenses+    getCertificate_certificateArn,++    -- * Destructuring the Response+    GetCertificateResponse (..),+    newGetCertificateResponse,++    -- * Response Lenses+    getCertificateResponse_certificate,+    getCertificateResponse_certificateChain,+    getCertificateResponse_httpStatus,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newGetCertificate' smart constructor.+data GetCertificate = GetCertificate'+  { -- | String that contains a certificate ARN in the following format:+    --+    -- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    --+    -- For more information about ARNs, see+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+    certificateArn :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'getCertificate_certificateArn' - String that contains a certificate ARN in the following format:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+newGetCertificate ::+  -- | 'certificateArn'+  Prelude.Text ->+  GetCertificate+newGetCertificate pCertificateArn_ =+  GetCertificate' {certificateArn = pCertificateArn_}++-- | String that contains a certificate ARN in the following format:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+getCertificate_certificateArn :: Lens.Lens' GetCertificate Prelude.Text+getCertificate_certificateArn = Lens.lens (\GetCertificate' {certificateArn} -> certificateArn) (\s@GetCertificate' {} a -> s {certificateArn = a} :: GetCertificate)++instance Core.AWSRequest GetCertificate where+  type+    AWSResponse GetCertificate =+      GetCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetCertificateResponse'+            Prelude.<$> (x Data..?> "Certificate")+            Prelude.<*> (x Data..?> "CertificateChain")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetCertificate where+  hashWithSalt _salt GetCertificate' {..} =+    _salt `Prelude.hashWithSalt` certificateArn++instance Prelude.NFData GetCertificate where+  rnf GetCertificate' {..} = Prelude.rnf certificateArn++instance Data.ToHeaders GetCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.GetCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetCertificate where+  toJSON GetCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn)+          ]+      )++instance Data.ToPath GetCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery GetCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newGetCertificateResponse' smart constructor.+data GetCertificateResponse = GetCertificateResponse'+  { -- | The ACM-issued certificate corresponding to the ARN specified as input.+    certificate :: Prelude.Maybe Prelude.Text,+    -- | Certificates forming the requested certificate\'s chain of trust. The+    -- chain consists of the certificate of the issuing CA and the intermediate+    -- certificates of any other subordinate CAs.+    certificateChain :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificate', 'getCertificateResponse_certificate' - The ACM-issued certificate corresponding to the ARN specified as input.+--+-- 'certificateChain', 'getCertificateResponse_certificateChain' - Certificates forming the requested certificate\'s chain of trust. The+-- chain consists of the certificate of the issuing CA and the intermediate+-- certificates of any other subordinate CAs.+--+-- 'httpStatus', 'getCertificateResponse_httpStatus' - The response's http status code.+newGetCertificateResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetCertificateResponse+newGetCertificateResponse pHttpStatus_ =+  GetCertificateResponse'+    { certificate =+        Prelude.Nothing,+      certificateChain = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ACM-issued certificate corresponding to the ARN specified as input.+getCertificateResponse_certificate :: Lens.Lens' GetCertificateResponse (Prelude.Maybe Prelude.Text)+getCertificateResponse_certificate = Lens.lens (\GetCertificateResponse' {certificate} -> certificate) (\s@GetCertificateResponse' {} a -> s {certificate = a} :: GetCertificateResponse)++-- | Certificates forming the requested certificate\'s chain of trust. The+-- chain consists of the certificate of the issuing CA and the intermediate+-- certificates of any other subordinate CAs.+getCertificateResponse_certificateChain :: Lens.Lens' GetCertificateResponse (Prelude.Maybe Prelude.Text)+getCertificateResponse_certificateChain = Lens.lens (\GetCertificateResponse' {certificateChain} -> certificateChain) (\s@GetCertificateResponse' {} a -> s {certificateChain = a} :: GetCertificateResponse)++-- | The response's http status code.+getCertificateResponse_httpStatus :: Lens.Lens' GetCertificateResponse Prelude.Int+getCertificateResponse_httpStatus = Lens.lens (\GetCertificateResponse' {httpStatus} -> httpStatus) (\s@GetCertificateResponse' {} a -> s {httpStatus = a} :: GetCertificateResponse)++instance Prelude.NFData GetCertificateResponse where+  rnf GetCertificateResponse' {..} =+    Prelude.rnf certificate+      `Prelude.seq` Prelude.rnf certificateChain+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,340 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.ImportCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Imports a certificate into Certificate Manager (ACM) to use with+-- services that are integrated with ACM. Note that+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-services.html integrated services>+-- allow only certificate types and keys they support to be associated with+-- their resources. Further, their support differs depending on whether the+-- certificate is imported into IAM or into ACM. For more information, see+-- the documentation for each service. For more information about importing+-- certificates into ACM, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html Importing Certificates>+-- in the /Certificate Manager User Guide/.+--+-- ACM does not provide+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html managed renewal>+-- for certificates that you import.+--+-- Note the following guidelines when importing third party certificates:+--+-- -   You must enter the private key that matches the certificate you are+--     importing.+--+-- -   The private key must be unencrypted. You cannot import a private key+--     that is protected by a password or a passphrase.+--+-- -   The private key must be no larger than 5 KB (5,120 bytes).+--+-- -   If the certificate you are importing is not self-signed, you must+--     enter its certificate chain.+--+-- -   If a certificate chain is included, the issuer must be the subject+--     of one of the certificates in the chain.+--+-- -   The certificate, private key, and certificate chain must be+--     PEM-encoded.+--+-- -   The current time must be between the @Not Before@ and @Not After@+--     certificate fields.+--+-- -   The @Issuer@ field must not be empty.+--+-- -   The OCSP authority URL, if present, must not exceed 1000 characters.+--+-- -   To import a new certificate, omit the @CertificateArn@ argument.+--     Include this argument only when you want to replace a previously+--     imported certificate.+--+-- -   When you import a certificate by using the CLI, you must specify the+--     certificate, the certificate chain, and the private key by their+--     file names preceded by @fileb:\/\/@. For example, you can specify a+--     certificate saved in the @C:\\temp@ folder as+--     @fileb:\/\/C:\\temp\\certificate_to_import.pem@. If you are making+--     an HTTP or HTTPS Query request, include these arguments as BLOBs.+--+-- -   When you import a certificate by using an SDK, you must specify the+--     certificate, the certificate chain, and the private key files in the+--     manner required by the programming language you\'re using.+--+-- -   The cryptographic algorithm of an imported certificate must match+--     the algorithm of the signing CA. For example, if the signing CA key+--     type is RSA, then the certificate key type must also be RSA.+--+-- This operation returns the+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Name (ARN)>+-- of the imported certificate.+module Amazonka.CertificateManager.ImportCertificate+  ( -- * Creating a Request+    ImportCertificate (..),+    newImportCertificate,++    -- * Request Lenses+    importCertificate_certificateArn,+    importCertificate_certificateChain,+    importCertificate_tags,+    importCertificate_certificate,+    importCertificate_privateKey,++    -- * Destructuring the Response+    ImportCertificateResponse (..),+    newImportCertificateResponse,++    -- * Response Lenses+    importCertificateResponse_certificateArn,+    importCertificateResponse_httpStatus,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newImportCertificate' smart constructor.+data ImportCertificate = ImportCertificate'+  { -- | The+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Name (ARN)>+    -- of an imported certificate to replace. To import a new certificate, omit+    -- this field.+    certificateArn :: Prelude.Maybe Prelude.Text,+    -- | The PEM encoded certificate chain.+    certificateChain :: Prelude.Maybe Data.Base64,+    -- | One or more resource tags to associate with the imported certificate.+    --+    -- Note: You cannot apply tags when reimporting a certificate.+    tags :: Prelude.Maybe (Prelude.NonEmpty Tag),+    -- | The certificate to import.+    certificate :: Data.Base64,+    -- | The private key that matches the public key in the certificate.+    privateKey :: Data.Sensitive Data.Base64+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ImportCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'importCertificate_certificateArn' - The+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Name (ARN)>+-- of an imported certificate to replace. To import a new certificate, omit+-- this field.+--+-- 'certificateChain', 'importCertificate_certificateChain' - The PEM encoded certificate chain.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+--+-- 'tags', 'importCertificate_tags' - One or more resource tags to associate with the imported certificate.+--+-- Note: You cannot apply tags when reimporting a certificate.+--+-- 'certificate', 'importCertificate_certificate' - The certificate to import.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+--+-- 'privateKey', 'importCertificate_privateKey' - The private key that matches the public key in the certificate.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+newImportCertificate ::+  -- | 'certificate'+  Prelude.ByteString ->+  -- | 'privateKey'+  Prelude.ByteString ->+  ImportCertificate+newImportCertificate pCertificate_ pPrivateKey_ =+  ImportCertificate'+    { certificateArn =+        Prelude.Nothing,+      certificateChain = Prelude.Nothing,+      tags = Prelude.Nothing,+      certificate = Data._Base64 Lens.# pCertificate_,+      privateKey =+        Data._Sensitive+          Prelude.. Data._Base64+          Lens.# pPrivateKey_+    }++-- | The+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Name (ARN)>+-- of an imported certificate to replace. To import a new certificate, omit+-- this field.+importCertificate_certificateArn :: Lens.Lens' ImportCertificate (Prelude.Maybe Prelude.Text)+importCertificate_certificateArn = Lens.lens (\ImportCertificate' {certificateArn} -> certificateArn) (\s@ImportCertificate' {} a -> s {certificateArn = a} :: ImportCertificate)++-- | The PEM encoded certificate chain.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+importCertificate_certificateChain :: Lens.Lens' ImportCertificate (Prelude.Maybe Prelude.ByteString)+importCertificate_certificateChain = Lens.lens (\ImportCertificate' {certificateChain} -> certificateChain) (\s@ImportCertificate' {} a -> s {certificateChain = a} :: ImportCertificate) Prelude.. Lens.mapping Data._Base64++-- | One or more resource tags to associate with the imported certificate.+--+-- Note: You cannot apply tags when reimporting a certificate.+importCertificate_tags :: Lens.Lens' ImportCertificate (Prelude.Maybe (Prelude.NonEmpty Tag))+importCertificate_tags = Lens.lens (\ImportCertificate' {tags} -> tags) (\s@ImportCertificate' {} a -> s {tags = a} :: ImportCertificate) Prelude.. Lens.mapping Lens.coerced++-- | The certificate to import.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+importCertificate_certificate :: Lens.Lens' ImportCertificate Prelude.ByteString+importCertificate_certificate = Lens.lens (\ImportCertificate' {certificate} -> certificate) (\s@ImportCertificate' {} a -> s {certificate = a} :: ImportCertificate) Prelude.. Data._Base64++-- | The private key that matches the public key in the certificate.--+-- -- /Note:/ This 'Lens' automatically encodes and decodes Base64 data.+-- -- The underlying isomorphism will encode to Base64 representation during+-- -- serialisation, and decode from Base64 representation during deserialisation.+-- -- This 'Lens' accepts and returns only raw unencoded data.+importCertificate_privateKey :: Lens.Lens' ImportCertificate Prelude.ByteString+importCertificate_privateKey = Lens.lens (\ImportCertificate' {privateKey} -> privateKey) (\s@ImportCertificate' {} a -> s {privateKey = a} :: ImportCertificate) Prelude.. Data._Sensitive Prelude.. Data._Base64++instance Core.AWSRequest ImportCertificate where+  type+    AWSResponse ImportCertificate =+      ImportCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ImportCertificateResponse'+            Prelude.<$> (x Data..?> "CertificateArn")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ImportCertificate where+  hashWithSalt _salt ImportCertificate' {..} =+    _salt+      `Prelude.hashWithSalt` certificateArn+      `Prelude.hashWithSalt` certificateChain+      `Prelude.hashWithSalt` tags+      `Prelude.hashWithSalt` certificate+      `Prelude.hashWithSalt` privateKey++instance Prelude.NFData ImportCertificate where+  rnf ImportCertificate' {..} =+    Prelude.rnf certificateArn+      `Prelude.seq` Prelude.rnf certificateChain+      `Prelude.seq` Prelude.rnf tags+      `Prelude.seq` Prelude.rnf certificate+      `Prelude.seq` Prelude.rnf privateKey++instance Data.ToHeaders ImportCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.ImportCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ImportCertificate where+  toJSON ImportCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("CertificateArn" Data..=)+              Prelude.<$> certificateArn,+            ("CertificateChain" Data..=)+              Prelude.<$> certificateChain,+            ("Tags" Data..=) Prelude.<$> tags,+            Prelude.Just ("Certificate" Data..= certificate),+            Prelude.Just ("PrivateKey" Data..= privateKey)+          ]+      )++instance Data.ToPath ImportCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery ImportCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newImportCertificateResponse' smart constructor.+data ImportCertificateResponse = ImportCertificateResponse'+  { -- | The+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Name (ARN)>+    -- of the imported certificate.+    certificateArn :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ImportCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'importCertificateResponse_certificateArn' - The+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Name (ARN)>+-- of the imported certificate.+--+-- 'httpStatus', 'importCertificateResponse_httpStatus' - The response's http status code.+newImportCertificateResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ImportCertificateResponse+newImportCertificateResponse pHttpStatus_ =+  ImportCertificateResponse'+    { certificateArn =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Name (ARN)>+-- of the imported certificate.+importCertificateResponse_certificateArn :: Lens.Lens' ImportCertificateResponse (Prelude.Maybe Prelude.Text)+importCertificateResponse_certificateArn = Lens.lens (\ImportCertificateResponse' {certificateArn} -> certificateArn) (\s@ImportCertificateResponse' {} a -> s {certificateArn = a} :: ImportCertificateResponse)++-- | The response's http status code.+importCertificateResponse_httpStatus :: Lens.Lens' ImportCertificateResponse Prelude.Int+importCertificateResponse_httpStatus = Lens.lens (\ImportCertificateResponse' {httpStatus} -> httpStatus) (\s@ImportCertificateResponse' {} a -> s {httpStatus = a} :: ImportCertificateResponse)++instance Prelude.NFData ImportCertificateResponse where+  rnf ImportCertificateResponse' {..} =+    Prelude.rnf certificateArn+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,228 @@+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.Lens+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+module Amazonka.CertificateManager.Lens+  ( -- * Operations++    -- ** AddTagsToCertificate+    addTagsToCertificate_certificateArn,+    addTagsToCertificate_tags,++    -- ** DeleteCertificate+    deleteCertificate_certificateArn,++    -- ** DescribeCertificate+    describeCertificate_certificateArn,+    describeCertificateResponse_certificate,+    describeCertificateResponse_httpStatus,++    -- ** ExportCertificate+    exportCertificate_certificateArn,+    exportCertificate_passphrase,+    exportCertificateResponse_certificate,+    exportCertificateResponse_certificateChain,+    exportCertificateResponse_privateKey,+    exportCertificateResponse_httpStatus,++    -- ** GetAccountConfiguration+    getAccountConfigurationResponse_expiryEvents,+    getAccountConfigurationResponse_httpStatus,++    -- ** GetCertificate+    getCertificate_certificateArn,+    getCertificateResponse_certificate,+    getCertificateResponse_certificateChain,+    getCertificateResponse_httpStatus,++    -- ** ImportCertificate+    importCertificate_certificateArn,+    importCertificate_certificateChain,+    importCertificate_tags,+    importCertificate_certificate,+    importCertificate_privateKey,+    importCertificateResponse_certificateArn,+    importCertificateResponse_httpStatus,++    -- ** ListCertificates+    listCertificates_certificateStatuses,+    listCertificates_includes,+    listCertificates_maxItems,+    listCertificates_nextToken,+    listCertificates_sortBy,+    listCertificates_sortOrder,+    listCertificatesResponse_certificateSummaryList,+    listCertificatesResponse_nextToken,+    listCertificatesResponse_httpStatus,++    -- ** ListTagsForCertificate+    listTagsForCertificate_certificateArn,+    listTagsForCertificateResponse_tags,+    listTagsForCertificateResponse_httpStatus,++    -- ** PutAccountConfiguration+    putAccountConfiguration_expiryEvents,+    putAccountConfiguration_idempotencyToken,++    -- ** RemoveTagsFromCertificate+    removeTagsFromCertificate_certificateArn,+    removeTagsFromCertificate_tags,++    -- ** RenewCertificate+    renewCertificate_certificateArn,++    -- ** RequestCertificate+    requestCertificate_certificateAuthorityArn,+    requestCertificate_domainValidationOptions,+    requestCertificate_idempotencyToken,+    requestCertificate_keyAlgorithm,+    requestCertificate_options,+    requestCertificate_subjectAlternativeNames,+    requestCertificate_tags,+    requestCertificate_validationMethod,+    requestCertificate_domainName,+    requestCertificateResponse_certificateArn,+    requestCertificateResponse_httpStatus,++    -- ** ResendValidationEmail+    resendValidationEmail_certificateArn,+    resendValidationEmail_domain,+    resendValidationEmail_validationDomain,++    -- ** UpdateCertificateOptions+    updateCertificateOptions_certificateArn,+    updateCertificateOptions_options,++    -- * Types++    -- ** CertificateDetail+    certificateDetail_certificateArn,+    certificateDetail_certificateAuthorityArn,+    certificateDetail_createdAt,+    certificateDetail_domainName,+    certificateDetail_domainValidationOptions,+    certificateDetail_extendedKeyUsages,+    certificateDetail_failureReason,+    certificateDetail_importedAt,+    certificateDetail_inUseBy,+    certificateDetail_issuedAt,+    certificateDetail_issuer,+    certificateDetail_keyAlgorithm,+    certificateDetail_keyUsages,+    certificateDetail_notAfter,+    certificateDetail_notBefore,+    certificateDetail_options,+    certificateDetail_renewalEligibility,+    certificateDetail_renewalSummary,+    certificateDetail_revocationReason,+    certificateDetail_revokedAt,+    certificateDetail_serial,+    certificateDetail_signatureAlgorithm,+    certificateDetail_status,+    certificateDetail_subject,+    certificateDetail_subjectAlternativeNames,+    certificateDetail_type,++    -- ** CertificateOptions+    certificateOptions_certificateTransparencyLoggingPreference,++    -- ** CertificateSummary+    certificateSummary_certificateArn,+    certificateSummary_createdAt,+    certificateSummary_domainName,+    certificateSummary_exported,+    certificateSummary_extendedKeyUsages,+    certificateSummary_hasAdditionalSubjectAlternativeNames,+    certificateSummary_importedAt,+    certificateSummary_inUse,+    certificateSummary_issuedAt,+    certificateSummary_keyAlgorithm,+    certificateSummary_keyUsages,+    certificateSummary_notAfter,+    certificateSummary_notBefore,+    certificateSummary_renewalEligibility,+    certificateSummary_revokedAt,+    certificateSummary_status,+    certificateSummary_subjectAlternativeNameSummaries,+    certificateSummary_type,++    -- ** DomainValidation+    domainValidation_resourceRecord,+    domainValidation_validationDomain,+    domainValidation_validationEmails,+    domainValidation_validationMethod,+    domainValidation_validationStatus,+    domainValidation_domainName,++    -- ** DomainValidationOption+    domainValidationOption_domainName,+    domainValidationOption_validationDomain,++    -- ** ExpiryEventsConfiguration+    expiryEventsConfiguration_daysBeforeExpiry,++    -- ** ExtendedKeyUsage+    extendedKeyUsage_name,+    extendedKeyUsage_oid,++    -- ** Filters+    filters_extendedKeyUsage,+    filters_keyTypes,+    filters_keyUsage,++    -- ** KeyUsage+    keyUsage_name,++    -- ** RenewalSummary+    renewalSummary_renewalStatusReason,+    renewalSummary_renewalStatus,+    renewalSummary_domainValidationOptions,+    renewalSummary_updatedAt,++    -- ** ResourceRecord+    resourceRecord_name,+    resourceRecord_type,+    resourceRecord_value,++    -- ** Tag+    tag_value,+    tag_key,+  )+where++import Amazonka.CertificateManager.AddTagsToCertificate+import Amazonka.CertificateManager.DeleteCertificate+import Amazonka.CertificateManager.DescribeCertificate+import Amazonka.CertificateManager.ExportCertificate+import Amazonka.CertificateManager.GetAccountConfiguration+import Amazonka.CertificateManager.GetCertificate+import Amazonka.CertificateManager.ImportCertificate+import Amazonka.CertificateManager.ListCertificates+import Amazonka.CertificateManager.ListTagsForCertificate+import Amazonka.CertificateManager.PutAccountConfiguration+import Amazonka.CertificateManager.RemoveTagsFromCertificate+import Amazonka.CertificateManager.RenewCertificate+import Amazonka.CertificateManager.RequestCertificate+import Amazonka.CertificateManager.ResendValidationEmail+import Amazonka.CertificateManager.Types.CertificateDetail+import Amazonka.CertificateManager.Types.CertificateOptions+import Amazonka.CertificateManager.Types.CertificateSummary+import Amazonka.CertificateManager.Types.DomainValidation+import Amazonka.CertificateManager.Types.DomainValidationOption+import Amazonka.CertificateManager.Types.ExpiryEventsConfiguration+import Amazonka.CertificateManager.Types.ExtendedKeyUsage+import Amazonka.CertificateManager.Types.Filters+import Amazonka.CertificateManager.Types.KeyUsage+import Amazonka.CertificateManager.Types.RenewalSummary+import Amazonka.CertificateManager.Types.ResourceRecord+import Amazonka.CertificateManager.Types.Tag+import Amazonka.CertificateManager.UpdateCertificateOptions

@@ -0,0 +1,310 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.ListCertificates+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Retrieves a list of certificate ARNs and domain names. You can request+-- that only certificates that match a specific status be listed. You can+-- also filter by specific attributes of the certificate. Default filtering+-- returns only @RSA_2048@ certificates. For more information, see Filters.+--+-- This operation returns paginated results.+module Amazonka.CertificateManager.ListCertificates+  ( -- * Creating a Request+    ListCertificates (..),+    newListCertificates,++    -- * Request Lenses+    listCertificates_certificateStatuses,+    listCertificates_includes,+    listCertificates_maxItems,+    listCertificates_nextToken,+    listCertificates_sortBy,+    listCertificates_sortOrder,++    -- * Destructuring the Response+    ListCertificatesResponse (..),+    newListCertificatesResponse,++    -- * Response Lenses+    listCertificatesResponse_certificateSummaryList,+    listCertificatesResponse_nextToken,+    listCertificatesResponse_httpStatus,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newListCertificates' smart constructor.+data ListCertificates = ListCertificates'+  { -- | Filter the certificate list by status value.+    certificateStatuses :: Prelude.Maybe [CertificateStatus],+    -- | Filter the certificate list. For more information, see the Filters+    -- structure.+    includes :: Prelude.Maybe Filters,+    -- | Use this parameter when paginating results to specify the maximum number+    -- of items to return in the response. If additional items exist beyond the+    -- number you specify, the @NextToken@ element is sent in the response. Use+    -- this @NextToken@ value in a subsequent request to retrieve additional+    -- items.+    maxItems :: Prelude.Maybe Prelude.Natural,+    -- | Use this parameter only when paginating results and only in a subsequent+    -- request after you receive a response with truncated results. Set it to+    -- the value of @NextToken@ from the response you just received.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | Specifies the field to sort results by. If you specify @SortBy@, you+    -- must also specify @SortOrder@.+    sortBy :: Prelude.Maybe SortBy,+    -- | Specifies the order of sorted results. If you specify @SortOrder@, you+    -- must also specify @SortBy@.+    sortOrder :: Prelude.Maybe SortOrder+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListCertificates' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateStatuses', 'listCertificates_certificateStatuses' - Filter the certificate list by status value.+--+-- 'includes', 'listCertificates_includes' - Filter the certificate list. For more information, see the Filters+-- structure.+--+-- 'maxItems', 'listCertificates_maxItems' - Use this parameter when paginating results to specify the maximum number+-- of items to return in the response. If additional items exist beyond the+-- number you specify, the @NextToken@ element is sent in the response. Use+-- this @NextToken@ value in a subsequent request to retrieve additional+-- items.+--+-- 'nextToken', 'listCertificates_nextToken' - Use this parameter only when paginating results and only in a subsequent+-- request after you receive a response with truncated results. Set it to+-- the value of @NextToken@ from the response you just received.+--+-- 'sortBy', 'listCertificates_sortBy' - Specifies the field to sort results by. If you specify @SortBy@, you+-- must also specify @SortOrder@.+--+-- 'sortOrder', 'listCertificates_sortOrder' - Specifies the order of sorted results. If you specify @SortOrder@, you+-- must also specify @SortBy@.+newListCertificates ::+  ListCertificates+newListCertificates =+  ListCertificates'+    { certificateStatuses =+        Prelude.Nothing,+      includes = Prelude.Nothing,+      maxItems = Prelude.Nothing,+      nextToken = Prelude.Nothing,+      sortBy = Prelude.Nothing,+      sortOrder = Prelude.Nothing+    }++-- | Filter the certificate list by status value.+listCertificates_certificateStatuses :: Lens.Lens' ListCertificates (Prelude.Maybe [CertificateStatus])+listCertificates_certificateStatuses = Lens.lens (\ListCertificates' {certificateStatuses} -> certificateStatuses) (\s@ListCertificates' {} a -> s {certificateStatuses = a} :: ListCertificates) Prelude.. Lens.mapping Lens.coerced++-- | Filter the certificate list. For more information, see the Filters+-- structure.+listCertificates_includes :: Lens.Lens' ListCertificates (Prelude.Maybe Filters)+listCertificates_includes = Lens.lens (\ListCertificates' {includes} -> includes) (\s@ListCertificates' {} a -> s {includes = a} :: ListCertificates)++-- | Use this parameter when paginating results to specify the maximum number+-- of items to return in the response. If additional items exist beyond the+-- number you specify, the @NextToken@ element is sent in the response. Use+-- this @NextToken@ value in a subsequent request to retrieve additional+-- items.+listCertificates_maxItems :: Lens.Lens' ListCertificates (Prelude.Maybe Prelude.Natural)+listCertificates_maxItems = Lens.lens (\ListCertificates' {maxItems} -> maxItems) (\s@ListCertificates' {} a -> s {maxItems = a} :: ListCertificates)++-- | Use this parameter only when paginating results and only in a subsequent+-- request after you receive a response with truncated results. Set it to+-- the value of @NextToken@ from the response you just received.+listCertificates_nextToken :: Lens.Lens' ListCertificates (Prelude.Maybe Prelude.Text)+listCertificates_nextToken = Lens.lens (\ListCertificates' {nextToken} -> nextToken) (\s@ListCertificates' {} a -> s {nextToken = a} :: ListCertificates)++-- | Specifies the field to sort results by. If you specify @SortBy@, you+-- must also specify @SortOrder@.+listCertificates_sortBy :: Lens.Lens' ListCertificates (Prelude.Maybe SortBy)+listCertificates_sortBy = Lens.lens (\ListCertificates' {sortBy} -> sortBy) (\s@ListCertificates' {} a -> s {sortBy = a} :: ListCertificates)++-- | Specifies the order of sorted results. If you specify @SortOrder@, you+-- must also specify @SortBy@.+listCertificates_sortOrder :: Lens.Lens' ListCertificates (Prelude.Maybe SortOrder)+listCertificates_sortOrder = Lens.lens (\ListCertificates' {sortOrder} -> sortOrder) (\s@ListCertificates' {} a -> s {sortOrder = a} :: ListCertificates)++instance Core.AWSPager ListCertificates where+  page rq rs+    | Core.stop+        ( rs+            Lens.^? listCertificatesResponse_nextToken+            Prelude.. Lens._Just+        ) =+        Prelude.Nothing+    | Core.stop+        ( rs+            Lens.^? listCertificatesResponse_certificateSummaryList+            Prelude.. Lens._Just+        ) =+        Prelude.Nothing+    | Prelude.otherwise =+        Prelude.Just+          Prelude.$ rq+          Prelude.& listCertificates_nextToken+          Lens..~ rs+          Lens.^? listCertificatesResponse_nextToken+          Prelude.. Lens._Just++instance Core.AWSRequest ListCertificates where+  type+    AWSResponse ListCertificates =+      ListCertificatesResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ListCertificatesResponse'+            Prelude.<$> ( x+                            Data..?> "CertificateSummaryList"+                            Core..!@ Prelude.mempty+                        )+            Prelude.<*> (x Data..?> "NextToken")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ListCertificates where+  hashWithSalt _salt ListCertificates' {..} =+    _salt+      `Prelude.hashWithSalt` certificateStatuses+      `Prelude.hashWithSalt` includes+      `Prelude.hashWithSalt` maxItems+      `Prelude.hashWithSalt` nextToken+      `Prelude.hashWithSalt` sortBy+      `Prelude.hashWithSalt` sortOrder++instance Prelude.NFData ListCertificates where+  rnf ListCertificates' {..} =+    Prelude.rnf certificateStatuses+      `Prelude.seq` Prelude.rnf includes+      `Prelude.seq` Prelude.rnf maxItems+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf sortBy+      `Prelude.seq` Prelude.rnf sortOrder++instance Data.ToHeaders ListCertificates where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.ListCertificates" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ListCertificates where+  toJSON ListCertificates' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("CertificateStatuses" Data..=)+              Prelude.<$> certificateStatuses,+            ("Includes" Data..=) Prelude.<$> includes,+            ("MaxItems" Data..=) Prelude.<$> maxItems,+            ("NextToken" Data..=) Prelude.<$> nextToken,+            ("SortBy" Data..=) Prelude.<$> sortBy,+            ("SortOrder" Data..=) Prelude.<$> sortOrder+          ]+      )++instance Data.ToPath ListCertificates where+  toPath = Prelude.const "/"++instance Data.ToQuery ListCertificates where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newListCertificatesResponse' smart constructor.+data ListCertificatesResponse = ListCertificatesResponse'+  { -- | A list of ACM certificates.+    certificateSummaryList :: Prelude.Maybe [CertificateSummary],+    -- | When the list is truncated, this value is present and contains the value+    -- to use for the @NextToken@ parameter in a subsequent pagination request.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListCertificatesResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateSummaryList', 'listCertificatesResponse_certificateSummaryList' - A list of ACM certificates.+--+-- 'nextToken', 'listCertificatesResponse_nextToken' - When the list is truncated, this value is present and contains the value+-- to use for the @NextToken@ parameter in a subsequent pagination request.+--+-- 'httpStatus', 'listCertificatesResponse_httpStatus' - The response's http status code.+newListCertificatesResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ListCertificatesResponse+newListCertificatesResponse pHttpStatus_ =+  ListCertificatesResponse'+    { certificateSummaryList =+        Prelude.Nothing,+      nextToken = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | A list of ACM certificates.+listCertificatesResponse_certificateSummaryList :: Lens.Lens' ListCertificatesResponse (Prelude.Maybe [CertificateSummary])+listCertificatesResponse_certificateSummaryList = Lens.lens (\ListCertificatesResponse' {certificateSummaryList} -> certificateSummaryList) (\s@ListCertificatesResponse' {} a -> s {certificateSummaryList = a} :: ListCertificatesResponse) Prelude.. Lens.mapping Lens.coerced++-- | When the list is truncated, this value is present and contains the value+-- to use for the @NextToken@ parameter in a subsequent pagination request.+listCertificatesResponse_nextToken :: Lens.Lens' ListCertificatesResponse (Prelude.Maybe Prelude.Text)+listCertificatesResponse_nextToken = Lens.lens (\ListCertificatesResponse' {nextToken} -> nextToken) (\s@ListCertificatesResponse' {} a -> s {nextToken = a} :: ListCertificatesResponse)++-- | The response's http status code.+listCertificatesResponse_httpStatus :: Lens.Lens' ListCertificatesResponse Prelude.Int+listCertificatesResponse_httpStatus = Lens.lens (\ListCertificatesResponse' {httpStatus} -> httpStatus) (\s@ListCertificatesResponse' {} a -> s {httpStatus = a} :: ListCertificatesResponse)++instance Prelude.NFData ListCertificatesResponse where+  rnf ListCertificatesResponse' {..} =+    Prelude.rnf certificateSummaryList+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,198 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.ListTagsForCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Lists the tags that have been applied to the ACM certificate. Use the+-- certificate\'s Amazon Resource Name (ARN) to specify the certificate. To+-- add a tag to an ACM certificate, use the AddTagsToCertificate action. To+-- delete a tag, use the RemoveTagsFromCertificate action.+module Amazonka.CertificateManager.ListTagsForCertificate+  ( -- * Creating a Request+    ListTagsForCertificate (..),+    newListTagsForCertificate,++    -- * Request Lenses+    listTagsForCertificate_certificateArn,++    -- * Destructuring the Response+    ListTagsForCertificateResponse (..),+    newListTagsForCertificateResponse,++    -- * Response Lenses+    listTagsForCertificateResponse_tags,+    listTagsForCertificateResponse_httpStatus,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newListTagsForCertificate' smart constructor.+data ListTagsForCertificate = ListTagsForCertificate'+  { -- | String that contains the ARN of the ACM certificate for which you want+    -- to list the tags. This must have the following form:+    --+    -- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    --+    -- For more information about ARNs, see+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+    certificateArn :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListTagsForCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'listTagsForCertificate_certificateArn' - String that contains the ARN of the ACM certificate for which you want+-- to list the tags. This must have the following form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+newListTagsForCertificate ::+  -- | 'certificateArn'+  Prelude.Text ->+  ListTagsForCertificate+newListTagsForCertificate pCertificateArn_ =+  ListTagsForCertificate'+    { certificateArn =+        pCertificateArn_+    }++-- | String that contains the ARN of the ACM certificate for which you want+-- to list the tags. This must have the following form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+listTagsForCertificate_certificateArn :: Lens.Lens' ListTagsForCertificate Prelude.Text+listTagsForCertificate_certificateArn = Lens.lens (\ListTagsForCertificate' {certificateArn} -> certificateArn) (\s@ListTagsForCertificate' {} a -> s {certificateArn = a} :: ListTagsForCertificate)++instance Core.AWSRequest ListTagsForCertificate where+  type+    AWSResponse ListTagsForCertificate =+      ListTagsForCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ListTagsForCertificateResponse'+            Prelude.<$> (x Data..?> "Tags")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ListTagsForCertificate where+  hashWithSalt _salt ListTagsForCertificate' {..} =+    _salt `Prelude.hashWithSalt` certificateArn++instance Prelude.NFData ListTagsForCertificate where+  rnf ListTagsForCertificate' {..} =+    Prelude.rnf certificateArn++instance Data.ToHeaders ListTagsForCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.ListTagsForCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ListTagsForCertificate where+  toJSON ListTagsForCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn)+          ]+      )++instance Data.ToPath ListTagsForCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery ListTagsForCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newListTagsForCertificateResponse' smart constructor.+data ListTagsForCertificateResponse = ListTagsForCertificateResponse'+  { -- | The key-value pairs that define the applied tags.+    tags :: Prelude.Maybe (Prelude.NonEmpty Tag),+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListTagsForCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'tags', 'listTagsForCertificateResponse_tags' - The key-value pairs that define the applied tags.+--+-- 'httpStatus', 'listTagsForCertificateResponse_httpStatus' - The response's http status code.+newListTagsForCertificateResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ListTagsForCertificateResponse+newListTagsForCertificateResponse pHttpStatus_ =+  ListTagsForCertificateResponse'+    { tags =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The key-value pairs that define the applied tags.+listTagsForCertificateResponse_tags :: Lens.Lens' ListTagsForCertificateResponse (Prelude.Maybe (Prelude.NonEmpty Tag))+listTagsForCertificateResponse_tags = Lens.lens (\ListTagsForCertificateResponse' {tags} -> tags) (\s@ListTagsForCertificateResponse' {} a -> s {tags = a} :: ListTagsForCertificateResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+listTagsForCertificateResponse_httpStatus :: Lens.Lens' ListTagsForCertificateResponse Prelude.Int+listTagsForCertificateResponse_httpStatus = Lens.lens (\ListTagsForCertificateResponse' {httpStatus} -> httpStatus) (\s@ListTagsForCertificateResponse' {} a -> s {httpStatus = a} :: ListTagsForCertificateResponse)++instance+  Prelude.NFData+    ListTagsForCertificateResponse+  where+  rnf ListTagsForCertificateResponse' {..} =+    Prelude.rnf tags+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,178 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.PutAccountConfiguration+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Adds or modifies account-level configurations in ACM.+--+-- The supported configuration option is @DaysBeforeExpiry@. This option+-- specifies the number of days prior to certificate expiration when ACM+-- starts generating @EventBridge@ events. ACM sends one event per day per+-- certificate until the certificate expires. By default, accounts receive+-- events starting 45 days before certificate expiration.+module Amazonka.CertificateManager.PutAccountConfiguration+  ( -- * Creating a Request+    PutAccountConfiguration (..),+    newPutAccountConfiguration,++    -- * Request Lenses+    putAccountConfiguration_expiryEvents,+    putAccountConfiguration_idempotencyToken,++    -- * Destructuring the Response+    PutAccountConfigurationResponse (..),+    newPutAccountConfigurationResponse,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newPutAccountConfiguration' smart constructor.+data PutAccountConfiguration = PutAccountConfiguration'+  { -- | Specifies expiration events associated with an account.+    expiryEvents :: Prelude.Maybe ExpiryEventsConfiguration,+    -- | Customer-chosen string used to distinguish between calls to+    -- @PutAccountConfiguration@. Idempotency tokens time out after one hour.+    -- If you call @PutAccountConfiguration@ multiple times with the same+    -- unexpired idempotency token, ACM treats it as the same request and+    -- returns the original result. If you change the idempotency token for+    -- each call, ACM treats each call as a new request.+    idempotencyToken :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'PutAccountConfiguration' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'expiryEvents', 'putAccountConfiguration_expiryEvents' - Specifies expiration events associated with an account.+--+-- 'idempotencyToken', 'putAccountConfiguration_idempotencyToken' - Customer-chosen string used to distinguish between calls to+-- @PutAccountConfiguration@. Idempotency tokens time out after one hour.+-- If you call @PutAccountConfiguration@ multiple times with the same+-- unexpired idempotency token, ACM treats it as the same request and+-- returns the original result. If you change the idempotency token for+-- each call, ACM treats each call as a new request.+newPutAccountConfiguration ::+  -- | 'idempotencyToken'+  Prelude.Text ->+  PutAccountConfiguration+newPutAccountConfiguration pIdempotencyToken_ =+  PutAccountConfiguration'+    { expiryEvents =+        Prelude.Nothing,+      idempotencyToken = pIdempotencyToken_+    }++-- | Specifies expiration events associated with an account.+putAccountConfiguration_expiryEvents :: Lens.Lens' PutAccountConfiguration (Prelude.Maybe ExpiryEventsConfiguration)+putAccountConfiguration_expiryEvents = Lens.lens (\PutAccountConfiguration' {expiryEvents} -> expiryEvents) (\s@PutAccountConfiguration' {} a -> s {expiryEvents = a} :: PutAccountConfiguration)++-- | Customer-chosen string used to distinguish between calls to+-- @PutAccountConfiguration@. Idempotency tokens time out after one hour.+-- If you call @PutAccountConfiguration@ multiple times with the same+-- unexpired idempotency token, ACM treats it as the same request and+-- returns the original result. If you change the idempotency token for+-- each call, ACM treats each call as a new request.+putAccountConfiguration_idempotencyToken :: Lens.Lens' PutAccountConfiguration Prelude.Text+putAccountConfiguration_idempotencyToken = Lens.lens (\PutAccountConfiguration' {idempotencyToken} -> idempotencyToken) (\s@PutAccountConfiguration' {} a -> s {idempotencyToken = a} :: PutAccountConfiguration)++instance Core.AWSRequest PutAccountConfiguration where+  type+    AWSResponse PutAccountConfiguration =+      PutAccountConfigurationResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveNull+      PutAccountConfigurationResponse'++instance Prelude.Hashable PutAccountConfiguration where+  hashWithSalt _salt PutAccountConfiguration' {..} =+    _salt+      `Prelude.hashWithSalt` expiryEvents+      `Prelude.hashWithSalt` idempotencyToken++instance Prelude.NFData PutAccountConfiguration where+  rnf PutAccountConfiguration' {..} =+    Prelude.rnf expiryEvents+      `Prelude.seq` Prelude.rnf idempotencyToken++instance Data.ToHeaders PutAccountConfiguration where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.PutAccountConfiguration" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON PutAccountConfiguration where+  toJSON PutAccountConfiguration' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("ExpiryEvents" Data..=) Prelude.<$> expiryEvents,+            Prelude.Just+              ("IdempotencyToken" Data..= idempotencyToken)+          ]+      )++instance Data.ToPath PutAccountConfiguration where+  toPath = Prelude.const "/"++instance Data.ToQuery PutAccountConfiguration where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newPutAccountConfigurationResponse' smart constructor.+data PutAccountConfigurationResponse = PutAccountConfigurationResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'PutAccountConfigurationResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newPutAccountConfigurationResponse ::+  PutAccountConfigurationResponse+newPutAccountConfigurationResponse =+  PutAccountConfigurationResponse'++instance+  Prelude.NFData+    PutAccountConfigurationResponse+  where+  rnf _ = ()

@@ -0,0 +1,185 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.RemoveTagsFromCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Remove one or more tags from an ACM certificate. A tag consists of a+-- key-value pair. If you do not specify the value portion of the tag when+-- calling this function, the tag will be removed regardless of value. If+-- you specify a value, the tag is removed only if it is associated with+-- the specified value.+--+-- To add tags to a certificate, use the AddTagsToCertificate action. To+-- view all of the tags that have been applied to a specific ACM+-- certificate, use the ListTagsForCertificate action.+module Amazonka.CertificateManager.RemoveTagsFromCertificate+  ( -- * Creating a Request+    RemoveTagsFromCertificate (..),+    newRemoveTagsFromCertificate,++    -- * Request Lenses+    removeTagsFromCertificate_certificateArn,+    removeTagsFromCertificate_tags,++    -- * Destructuring the Response+    RemoveTagsFromCertificateResponse (..),+    newRemoveTagsFromCertificateResponse,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newRemoveTagsFromCertificate' smart constructor.+data RemoveTagsFromCertificate = RemoveTagsFromCertificate'+  { -- | String that contains the ARN of the ACM Certificate with one or more+    -- tags that you want to remove. This must be of the form:+    --+    -- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    --+    -- For more information about ARNs, see+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+    certificateArn :: Prelude.Text,+    -- | The key-value pair that defines the tag to remove.+    tags :: Prelude.NonEmpty Tag+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'RemoveTagsFromCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'removeTagsFromCertificate_certificateArn' - String that contains the ARN of the ACM Certificate with one or more+-- tags that you want to remove. This must be of the form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+--+-- 'tags', 'removeTagsFromCertificate_tags' - The key-value pair that defines the tag to remove.+newRemoveTagsFromCertificate ::+  -- | 'certificateArn'+  Prelude.Text ->+  -- | 'tags'+  Prelude.NonEmpty Tag ->+  RemoveTagsFromCertificate+newRemoveTagsFromCertificate pCertificateArn_ pTags_ =+  RemoveTagsFromCertificate'+    { certificateArn =+        pCertificateArn_,+      tags = Lens.coerced Lens.# pTags_+    }++-- | String that contains the ARN of the ACM Certificate with one or more+-- tags that you want to remove. This must be of the form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+removeTagsFromCertificate_certificateArn :: Lens.Lens' RemoveTagsFromCertificate Prelude.Text+removeTagsFromCertificate_certificateArn = Lens.lens (\RemoveTagsFromCertificate' {certificateArn} -> certificateArn) (\s@RemoveTagsFromCertificate' {} a -> s {certificateArn = a} :: RemoveTagsFromCertificate)++-- | The key-value pair that defines the tag to remove.+removeTagsFromCertificate_tags :: Lens.Lens' RemoveTagsFromCertificate (Prelude.NonEmpty Tag)+removeTagsFromCertificate_tags = Lens.lens (\RemoveTagsFromCertificate' {tags} -> tags) (\s@RemoveTagsFromCertificate' {} a -> s {tags = a} :: RemoveTagsFromCertificate) Prelude.. Lens.coerced++instance Core.AWSRequest RemoveTagsFromCertificate where+  type+    AWSResponse RemoveTagsFromCertificate =+      RemoveTagsFromCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveNull+      RemoveTagsFromCertificateResponse'++instance Prelude.Hashable RemoveTagsFromCertificate where+  hashWithSalt _salt RemoveTagsFromCertificate' {..} =+    _salt+      `Prelude.hashWithSalt` certificateArn+      `Prelude.hashWithSalt` tags++instance Prelude.NFData RemoveTagsFromCertificate where+  rnf RemoveTagsFromCertificate' {..} =+    Prelude.rnf certificateArn+      `Prelude.seq` Prelude.rnf tags++instance Data.ToHeaders RemoveTagsFromCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.RemoveTagsFromCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON RemoveTagsFromCertificate where+  toJSON RemoveTagsFromCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn),+            Prelude.Just ("Tags" Data..= tags)+          ]+      )++instance Data.ToPath RemoveTagsFromCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery RemoveTagsFromCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newRemoveTagsFromCertificateResponse' smart constructor.+data RemoveTagsFromCertificateResponse = RemoveTagsFromCertificateResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'RemoveTagsFromCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newRemoveTagsFromCertificateResponse ::+  RemoveTagsFromCertificateResponse+newRemoveTagsFromCertificateResponse =+  RemoveTagsFromCertificateResponse'++instance+  Prelude.NFData+    RemoveTagsFromCertificateResponse+  where+  rnf _ = ()

@@ -0,0 +1,163 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.RenewCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Renews an eligible ACM certificate. At this time, only exported private+-- certificates can be renewed with this operation. In order to renew your+-- Amazon Web Services Private CA certificates with ACM, you must first+-- <https://docs.aws.amazon.com/privateca/latest/userguide/PcaPermissions.html grant the ACM service principal permission to do so>.+-- For more information, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/manual-renewal.html Testing Managed Renewal>+-- in the ACM User Guide.+module Amazonka.CertificateManager.RenewCertificate+  ( -- * Creating a Request+    RenewCertificate (..),+    newRenewCertificate,++    -- * Request Lenses+    renewCertificate_certificateArn,++    -- * Destructuring the Response+    RenewCertificateResponse (..),+    newRenewCertificateResponse,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newRenewCertificate' smart constructor.+data RenewCertificate = RenewCertificate'+  { -- | String that contains the ARN of the ACM certificate to be renewed. This+    -- must be of the form:+    --+    -- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    --+    -- For more information about ARNs, see+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+    certificateArn :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'RenewCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'renewCertificate_certificateArn' - String that contains the ARN of the ACM certificate to be renewed. This+-- must be of the form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+newRenewCertificate ::+  -- | 'certificateArn'+  Prelude.Text ->+  RenewCertificate+newRenewCertificate pCertificateArn_ =+  RenewCertificate'+    { certificateArn =+        pCertificateArn_+    }++-- | String that contains the ARN of the ACM certificate to be renewed. This+-- must be of the form:+--+-- @arn:aws:acm:region:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- For more information about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>.+renewCertificate_certificateArn :: Lens.Lens' RenewCertificate Prelude.Text+renewCertificate_certificateArn = Lens.lens (\RenewCertificate' {certificateArn} -> certificateArn) (\s@RenewCertificate' {} a -> s {certificateArn = a} :: RenewCertificate)++instance Core.AWSRequest RenewCertificate where+  type+    AWSResponse RenewCertificate =+      RenewCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveNull RenewCertificateResponse'++instance Prelude.Hashable RenewCertificate where+  hashWithSalt _salt RenewCertificate' {..} =+    _salt `Prelude.hashWithSalt` certificateArn++instance Prelude.NFData RenewCertificate where+  rnf RenewCertificate' {..} =+    Prelude.rnf certificateArn++instance Data.ToHeaders RenewCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.RenewCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON RenewCertificate where+  toJSON RenewCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn)+          ]+      )++instance Data.ToPath RenewCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery RenewCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newRenewCertificateResponse' smart constructor.+data RenewCertificateResponse = RenewCertificateResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'RenewCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newRenewCertificateResponse ::+  RenewCertificateResponse+newRenewCertificateResponse =+  RenewCertificateResponse'++instance Prelude.NFData RenewCertificateResponse where+  rnf _ = ()

@@ -0,0 +1,531 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.RequestCertificate+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Requests an ACM certificate for use with other Amazon Web Services+-- services. To request an ACM certificate, you must specify a fully+-- qualified domain name (FQDN) in the @DomainName@ parameter. You can also+-- specify additional FQDNs in the @SubjectAlternativeNames@ parameter.+--+-- If you are requesting a private certificate, domain validation is not+-- required. If you are requesting a public certificate, each domain name+-- that you specify must be validated to verify that you own or control the+-- domain. You can use+-- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html DNS validation>+-- or+-- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html email validation>.+-- We recommend that you use DNS validation. ACM issues public certificates+-- after receiving approval from the domain owner.+--+-- ACM behavior differs from the+-- <https://datatracker.ietf.org/doc/html/rfc6125#appendix-B.2 RFC 6125>+-- specification of the certificate validation process. ACM first checks+-- for a Subject Alternative Name, and, if it finds one, ignores the common+-- name (CN).+--+-- After successful completion of the @RequestCertificate@ action, there is+-- a delay of several seconds before you can retrieve information about the+-- new certificate.+module Amazonka.CertificateManager.RequestCertificate+  ( -- * Creating a Request+    RequestCertificate (..),+    newRequestCertificate,++    -- * Request Lenses+    requestCertificate_certificateAuthorityArn,+    requestCertificate_domainValidationOptions,+    requestCertificate_idempotencyToken,+    requestCertificate_keyAlgorithm,+    requestCertificate_options,+    requestCertificate_subjectAlternativeNames,+    requestCertificate_tags,+    requestCertificate_validationMethod,+    requestCertificate_domainName,++    -- * Destructuring the Response+    RequestCertificateResponse (..),+    newRequestCertificateResponse,++    -- * Response Lenses+    requestCertificateResponse_certificateArn,+    requestCertificateResponse_httpStatus,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newRequestCertificate' smart constructor.+data RequestCertificate = RequestCertificate'+  { -- | The Amazon Resource Name (ARN) of the private certificate authority (CA)+    -- that will be used to issue the certificate. If you do not provide an ARN+    -- and you are trying to request a private certificate, ACM will attempt to+    -- issue a public certificate. For more information about private CAs, see+    -- the+    -- <https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html Amazon Web Services Private Certificate Authority>+    -- user guide. The ARN must have the following form:+    --+    -- @arn:aws:acm-pca:region:account:certificate-authority\/12345678-1234-1234-1234-123456789012@+    certificateAuthorityArn :: Prelude.Maybe Prelude.Text,+    -- | The domain name that you want ACM to use to send you emails so that you+    -- can validate domain ownership.+    domainValidationOptions :: Prelude.Maybe (Prelude.NonEmpty DomainValidationOption),+    -- | Customer chosen string that can be used to distinguish between calls to+    -- @RequestCertificate@. Idempotency tokens time out after one hour.+    -- Therefore, if you call @RequestCertificate@ multiple times with the same+    -- idempotency token within one hour, ACM recognizes that you are+    -- requesting only one certificate and will issue only one. If you change+    -- the idempotency token for each call, ACM recognizes that you are+    -- requesting multiple certificates.+    idempotencyToken :: Prelude.Maybe Prelude.Text,+    -- | Specifies the algorithm of the public and private key pair that your+    -- certificate uses to encrypt data. RSA is the default key algorithm for+    -- ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA)+    -- keys are smaller, offering security comparable to RSA keys but with+    -- greater computing efficiency. However, ECDSA is not supported by all+    -- network clients. Some AWS services may require RSA keys, or only support+    -- ECDSA keys of a particular size, while others allow the use of either+    -- RSA and ECDSA keys to ensure that compatibility is not broken. Check the+    -- requirements for the AWS service where you plan to deploy your+    -- certificate.+    --+    -- Default: RSA_2048+    keyAlgorithm :: Prelude.Maybe KeyAlgorithm,+    -- | Currently, you can use this parameter to specify whether to add the+    -- certificate to a certificate transparency log. Certificate transparency+    -- makes it possible to detect SSL\/TLS certificates that have been+    -- mistakenly or maliciously issued. Certificates that have not been logged+    -- typically produce an error message in a browser. For more information,+    -- see+    -- <https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency Opting Out of Certificate Transparency Logging>.+    options :: Prelude.Maybe CertificateOptions,+    -- | Additional FQDNs to be included in the Subject Alternative Name+    -- extension of the ACM certificate. For example, add the name+    -- www.example.net to a certificate for which the @DomainName@ field is+    -- www.example.com if users can reach your site by using either name. The+    -- maximum number of domain names that you can add to an ACM certificate is+    -- 100. However, the initial quota is 10 domain names. If you need more+    -- than 10 names, you must request a quota increase. For more information,+    -- see+    -- <https://docs.aws.amazon.com/acm/latest/userguide/acm-limits.html Quotas>.+    --+    -- The maximum length of a SAN DNS name is 253 octets. The name is made up+    -- of multiple labels separated by periods. No label can be longer than 63+    -- octets. Consider the following examples:+    --+    -- -   @(63 octets).(63 octets).(63 octets).(61 octets)@ is legal because+    --     the total length is 253 octets (63+1+63+1+63+1+61) and no label+    --     exceeds 63 octets.+    --+    -- -   @(64 octets).(63 octets).(63 octets).(61 octets)@ is not legal+    --     because the total length exceeds 253 octets (64+1+63+1+63+1+61) and+    --     the first label exceeds 63 octets.+    --+    -- -   @(63 octets).(63 octets).(63 octets).(62 octets)@ is not legal+    --     because the total length of the DNS name (63+1+63+1+63+1+62) exceeds+    --     253 octets.+    subjectAlternativeNames :: Prelude.Maybe (Prelude.NonEmpty Prelude.Text),+    -- | One or more resource tags to associate with the certificate.+    tags :: Prelude.Maybe (Prelude.NonEmpty Tag),+    -- | The method you want to use if you are requesting a public certificate to+    -- validate that you own or control domain. You can+    -- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html validate with DNS>+    -- or+    -- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html validate with email>.+    -- We recommend that you use DNS validation.+    validationMethod :: Prelude.Maybe ValidationMethod,+    -- | Fully qualified domain name (FQDN), such as www.example.com, that you+    -- want to secure with an ACM certificate. Use an asterisk (*) to create a+    -- wildcard certificate that protects several sites in the same domain. For+    -- example, *.example.com protects www.example.com, site.example.com, and+    -- images.example.com.+    --+    -- In compliance with+    -- <https://datatracker.ietf.org/doc/html/rfc5280 RFC 5280>, the length of+    -- the domain name (technically, the Common Name) that you provide cannot+    -- exceed 64 octets (characters), including periods. To add a longer domain+    -- name, specify it in the Subject Alternative Name field, which supports+    -- names up to 253 octets in length.+    domainName :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'RequestCertificate' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateAuthorityArn', 'requestCertificate_certificateAuthorityArn' - The Amazon Resource Name (ARN) of the private certificate authority (CA)+-- that will be used to issue the certificate. If you do not provide an ARN+-- and you are trying to request a private certificate, ACM will attempt to+-- issue a public certificate. For more information about private CAs, see+-- the+-- <https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html Amazon Web Services Private Certificate Authority>+-- user guide. The ARN must have the following form:+--+-- @arn:aws:acm-pca:region:account:certificate-authority\/12345678-1234-1234-1234-123456789012@+--+-- 'domainValidationOptions', 'requestCertificate_domainValidationOptions' - The domain name that you want ACM to use to send you emails so that you+-- can validate domain ownership.+--+-- 'idempotencyToken', 'requestCertificate_idempotencyToken' - Customer chosen string that can be used to distinguish between calls to+-- @RequestCertificate@. Idempotency tokens time out after one hour.+-- Therefore, if you call @RequestCertificate@ multiple times with the same+-- idempotency token within one hour, ACM recognizes that you are+-- requesting only one certificate and will issue only one. If you change+-- the idempotency token for each call, ACM recognizes that you are+-- requesting multiple certificates.+--+-- 'keyAlgorithm', 'requestCertificate_keyAlgorithm' - Specifies the algorithm of the public and private key pair that your+-- certificate uses to encrypt data. RSA is the default key algorithm for+-- ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA)+-- keys are smaller, offering security comparable to RSA keys but with+-- greater computing efficiency. However, ECDSA is not supported by all+-- network clients. Some AWS services may require RSA keys, or only support+-- ECDSA keys of a particular size, while others allow the use of either+-- RSA and ECDSA keys to ensure that compatibility is not broken. Check the+-- requirements for the AWS service where you plan to deploy your+-- certificate.+--+-- Default: RSA_2048+--+-- 'options', 'requestCertificate_options' - Currently, you can use this parameter to specify whether to add the+-- certificate to a certificate transparency log. Certificate transparency+-- makes it possible to detect SSL\/TLS certificates that have been+-- mistakenly or maliciously issued. Certificates that have not been logged+-- typically produce an error message in a browser. For more information,+-- see+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency Opting Out of Certificate Transparency Logging>.+--+-- 'subjectAlternativeNames', 'requestCertificate_subjectAlternativeNames' - Additional FQDNs to be included in the Subject Alternative Name+-- extension of the ACM certificate. For example, add the name+-- www.example.net to a certificate for which the @DomainName@ field is+-- www.example.com if users can reach your site by using either name. The+-- maximum number of domain names that you can add to an ACM certificate is+-- 100. However, the initial quota is 10 domain names. If you need more+-- than 10 names, you must request a quota increase. For more information,+-- see+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-limits.html Quotas>.+--+-- The maximum length of a SAN DNS name is 253 octets. The name is made up+-- of multiple labels separated by periods. No label can be longer than 63+-- octets. Consider the following examples:+--+-- -   @(63 octets).(63 octets).(63 octets).(61 octets)@ is legal because+--     the total length is 253 octets (63+1+63+1+63+1+61) and no label+--     exceeds 63 octets.+--+-- -   @(64 octets).(63 octets).(63 octets).(61 octets)@ is not legal+--     because the total length exceeds 253 octets (64+1+63+1+63+1+61) and+--     the first label exceeds 63 octets.+--+-- -   @(63 octets).(63 octets).(63 octets).(62 octets)@ is not legal+--     because the total length of the DNS name (63+1+63+1+63+1+62) exceeds+--     253 octets.+--+-- 'tags', 'requestCertificate_tags' - One or more resource tags to associate with the certificate.+--+-- 'validationMethod', 'requestCertificate_validationMethod' - The method you want to use if you are requesting a public certificate to+-- validate that you own or control domain. You can+-- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html validate with DNS>+-- or+-- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html validate with email>.+-- We recommend that you use DNS validation.+--+-- 'domainName', 'requestCertificate_domainName' - Fully qualified domain name (FQDN), such as www.example.com, that you+-- want to secure with an ACM certificate. Use an asterisk (*) to create a+-- wildcard certificate that protects several sites in the same domain. For+-- example, *.example.com protects www.example.com, site.example.com, and+-- images.example.com.+--+-- In compliance with+-- <https://datatracker.ietf.org/doc/html/rfc5280 RFC 5280>, the length of+-- the domain name (technically, the Common Name) that you provide cannot+-- exceed 64 octets (characters), including periods. To add a longer domain+-- name, specify it in the Subject Alternative Name field, which supports+-- names up to 253 octets in length.+newRequestCertificate ::+  -- | 'domainName'+  Prelude.Text ->+  RequestCertificate+newRequestCertificate pDomainName_ =+  RequestCertificate'+    { certificateAuthorityArn =+        Prelude.Nothing,+      domainValidationOptions = Prelude.Nothing,+      idempotencyToken = Prelude.Nothing,+      keyAlgorithm = Prelude.Nothing,+      options = Prelude.Nothing,+      subjectAlternativeNames = Prelude.Nothing,+      tags = Prelude.Nothing,+      validationMethod = Prelude.Nothing,+      domainName = pDomainName_+    }++-- | The Amazon Resource Name (ARN) of the private certificate authority (CA)+-- that will be used to issue the certificate. If you do not provide an ARN+-- and you are trying to request a private certificate, ACM will attempt to+-- issue a public certificate. For more information about private CAs, see+-- the+-- <https://docs.aws.amazon.com/privateca/latest/userguide/PcaWelcome.html Amazon Web Services Private Certificate Authority>+-- user guide. The ARN must have the following form:+--+-- @arn:aws:acm-pca:region:account:certificate-authority\/12345678-1234-1234-1234-123456789012@+requestCertificate_certificateAuthorityArn :: Lens.Lens' RequestCertificate (Prelude.Maybe Prelude.Text)+requestCertificate_certificateAuthorityArn = Lens.lens (\RequestCertificate' {certificateAuthorityArn} -> certificateAuthorityArn) (\s@RequestCertificate' {} a -> s {certificateAuthorityArn = a} :: RequestCertificate)++-- | The domain name that you want ACM to use to send you emails so that you+-- can validate domain ownership.+requestCertificate_domainValidationOptions :: Lens.Lens' RequestCertificate (Prelude.Maybe (Prelude.NonEmpty DomainValidationOption))+requestCertificate_domainValidationOptions = Lens.lens (\RequestCertificate' {domainValidationOptions} -> domainValidationOptions) (\s@RequestCertificate' {} a -> s {domainValidationOptions = a} :: RequestCertificate) Prelude.. Lens.mapping Lens.coerced++-- | Customer chosen string that can be used to distinguish between calls to+-- @RequestCertificate@. Idempotency tokens time out after one hour.+-- Therefore, if you call @RequestCertificate@ multiple times with the same+-- idempotency token within one hour, ACM recognizes that you are+-- requesting only one certificate and will issue only one. If you change+-- the idempotency token for each call, ACM recognizes that you are+-- requesting multiple certificates.+requestCertificate_idempotencyToken :: Lens.Lens' RequestCertificate (Prelude.Maybe Prelude.Text)+requestCertificate_idempotencyToken = Lens.lens (\RequestCertificate' {idempotencyToken} -> idempotencyToken) (\s@RequestCertificate' {} a -> s {idempotencyToken = a} :: RequestCertificate)++-- | Specifies the algorithm of the public and private key pair that your+-- certificate uses to encrypt data. RSA is the default key algorithm for+-- ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA)+-- keys are smaller, offering security comparable to RSA keys but with+-- greater computing efficiency. However, ECDSA is not supported by all+-- network clients. Some AWS services may require RSA keys, or only support+-- ECDSA keys of a particular size, while others allow the use of either+-- RSA and ECDSA keys to ensure that compatibility is not broken. Check the+-- requirements for the AWS service where you plan to deploy your+-- certificate.+--+-- Default: RSA_2048+requestCertificate_keyAlgorithm :: Lens.Lens' RequestCertificate (Prelude.Maybe KeyAlgorithm)+requestCertificate_keyAlgorithm = Lens.lens (\RequestCertificate' {keyAlgorithm} -> keyAlgorithm) (\s@RequestCertificate' {} a -> s {keyAlgorithm = a} :: RequestCertificate)++-- | Currently, you can use this parameter to specify whether to add the+-- certificate to a certificate transparency log. Certificate transparency+-- makes it possible to detect SSL\/TLS certificates that have been+-- mistakenly or maliciously issued. Certificates that have not been logged+-- typically produce an error message in a browser. For more information,+-- see+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-bestpractices.html#best-practices-transparency Opting Out of Certificate Transparency Logging>.+requestCertificate_options :: Lens.Lens' RequestCertificate (Prelude.Maybe CertificateOptions)+requestCertificate_options = Lens.lens (\RequestCertificate' {options} -> options) (\s@RequestCertificate' {} a -> s {options = a} :: RequestCertificate)++-- | Additional FQDNs to be included in the Subject Alternative Name+-- extension of the ACM certificate. For example, add the name+-- www.example.net to a certificate for which the @DomainName@ field is+-- www.example.com if users can reach your site by using either name. The+-- maximum number of domain names that you can add to an ACM certificate is+-- 100. However, the initial quota is 10 domain names. If you need more+-- than 10 names, you must request a quota increase. For more information,+-- see+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-limits.html Quotas>.+--+-- The maximum length of a SAN DNS name is 253 octets. The name is made up+-- of multiple labels separated by periods. No label can be longer than 63+-- octets. Consider the following examples:+--+-- -   @(63 octets).(63 octets).(63 octets).(61 octets)@ is legal because+--     the total length is 253 octets (63+1+63+1+63+1+61) and no label+--     exceeds 63 octets.+--+-- -   @(64 octets).(63 octets).(63 octets).(61 octets)@ is not legal+--     because the total length exceeds 253 octets (64+1+63+1+63+1+61) and+--     the first label exceeds 63 octets.+--+-- -   @(63 octets).(63 octets).(63 octets).(62 octets)@ is not legal+--     because the total length of the DNS name (63+1+63+1+63+1+62) exceeds+--     253 octets.+requestCertificate_subjectAlternativeNames :: Lens.Lens' RequestCertificate (Prelude.Maybe (Prelude.NonEmpty Prelude.Text))+requestCertificate_subjectAlternativeNames = Lens.lens (\RequestCertificate' {subjectAlternativeNames} -> subjectAlternativeNames) (\s@RequestCertificate' {} a -> s {subjectAlternativeNames = a} :: RequestCertificate) Prelude.. Lens.mapping Lens.coerced++-- | One or more resource tags to associate with the certificate.+requestCertificate_tags :: Lens.Lens' RequestCertificate (Prelude.Maybe (Prelude.NonEmpty Tag))+requestCertificate_tags = Lens.lens (\RequestCertificate' {tags} -> tags) (\s@RequestCertificate' {} a -> s {tags = a} :: RequestCertificate) Prelude.. Lens.mapping Lens.coerced++-- | The method you want to use if you are requesting a public certificate to+-- validate that you own or control domain. You can+-- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html validate with DNS>+-- or+-- <https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html validate with email>.+-- We recommend that you use DNS validation.+requestCertificate_validationMethod :: Lens.Lens' RequestCertificate (Prelude.Maybe ValidationMethod)+requestCertificate_validationMethod = Lens.lens (\RequestCertificate' {validationMethod} -> validationMethod) (\s@RequestCertificate' {} a -> s {validationMethod = a} :: RequestCertificate)++-- | Fully qualified domain name (FQDN), such as www.example.com, that you+-- want to secure with an ACM certificate. Use an asterisk (*) to create a+-- wildcard certificate that protects several sites in the same domain. For+-- example, *.example.com protects www.example.com, site.example.com, and+-- images.example.com.+--+-- In compliance with+-- <https://datatracker.ietf.org/doc/html/rfc5280 RFC 5280>, the length of+-- the domain name (technically, the Common Name) that you provide cannot+-- exceed 64 octets (characters), including periods. To add a longer domain+-- name, specify it in the Subject Alternative Name field, which supports+-- names up to 253 octets in length.+requestCertificate_domainName :: Lens.Lens' RequestCertificate Prelude.Text+requestCertificate_domainName = Lens.lens (\RequestCertificate' {domainName} -> domainName) (\s@RequestCertificate' {} a -> s {domainName = a} :: RequestCertificate)++instance Core.AWSRequest RequestCertificate where+  type+    AWSResponse RequestCertificate =+      RequestCertificateResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          RequestCertificateResponse'+            Prelude.<$> (x Data..?> "CertificateArn")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable RequestCertificate where+  hashWithSalt _salt RequestCertificate' {..} =+    _salt+      `Prelude.hashWithSalt` certificateAuthorityArn+      `Prelude.hashWithSalt` domainValidationOptions+      `Prelude.hashWithSalt` idempotencyToken+      `Prelude.hashWithSalt` keyAlgorithm+      `Prelude.hashWithSalt` options+      `Prelude.hashWithSalt` subjectAlternativeNames+      `Prelude.hashWithSalt` tags+      `Prelude.hashWithSalt` validationMethod+      `Prelude.hashWithSalt` domainName++instance Prelude.NFData RequestCertificate where+  rnf RequestCertificate' {..} =+    Prelude.rnf certificateAuthorityArn+      `Prelude.seq` Prelude.rnf domainValidationOptions+      `Prelude.seq` Prelude.rnf idempotencyToken+      `Prelude.seq` Prelude.rnf keyAlgorithm+      `Prelude.seq` Prelude.rnf options+      `Prelude.seq` Prelude.rnf subjectAlternativeNames+      `Prelude.seq` Prelude.rnf tags+      `Prelude.seq` Prelude.rnf validationMethod+      `Prelude.seq` Prelude.rnf domainName++instance Data.ToHeaders RequestCertificate where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.RequestCertificate" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON RequestCertificate where+  toJSON RequestCertificate' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("CertificateAuthorityArn" Data..=)+              Prelude.<$> certificateAuthorityArn,+            ("DomainValidationOptions" Data..=)+              Prelude.<$> domainValidationOptions,+            ("IdempotencyToken" Data..=)+              Prelude.<$> idempotencyToken,+            ("KeyAlgorithm" Data..=) Prelude.<$> keyAlgorithm,+            ("Options" Data..=) Prelude.<$> options,+            ("SubjectAlternativeNames" Data..=)+              Prelude.<$> subjectAlternativeNames,+            ("Tags" Data..=) Prelude.<$> tags,+            ("ValidationMethod" Data..=)+              Prelude.<$> validationMethod,+            Prelude.Just ("DomainName" Data..= domainName)+          ]+      )++instance Data.ToPath RequestCertificate where+  toPath = Prelude.const "/"++instance Data.ToQuery RequestCertificate where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newRequestCertificateResponse' smart constructor.+data RequestCertificateResponse = RequestCertificateResponse'+  { -- | String that contains the ARN of the issued certificate. This must be of+    -- the form:+    --+    -- @arn:aws:acm:us-east-1:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    certificateArn :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'RequestCertificateResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'requestCertificateResponse_certificateArn' - String that contains the ARN of the issued certificate. This must be of+-- the form:+--+-- @arn:aws:acm:us-east-1:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- 'httpStatus', 'requestCertificateResponse_httpStatus' - The response's http status code.+newRequestCertificateResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  RequestCertificateResponse+newRequestCertificateResponse pHttpStatus_ =+  RequestCertificateResponse'+    { certificateArn =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | String that contains the ARN of the issued certificate. This must be of+-- the form:+--+-- @arn:aws:acm:us-east-1:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+requestCertificateResponse_certificateArn :: Lens.Lens' RequestCertificateResponse (Prelude.Maybe Prelude.Text)+requestCertificateResponse_certificateArn = Lens.lens (\RequestCertificateResponse' {certificateArn} -> certificateArn) (\s@RequestCertificateResponse' {} a -> s {certificateArn = a} :: RequestCertificateResponse)++-- | The response's http status code.+requestCertificateResponse_httpStatus :: Lens.Lens' RequestCertificateResponse Prelude.Int+requestCertificateResponse_httpStatus = Lens.lens (\RequestCertificateResponse' {httpStatus} -> httpStatus) (\s@RequestCertificateResponse' {} a -> s {httpStatus = a} :: RequestCertificateResponse)++instance Prelude.NFData RequestCertificateResponse where+  rnf RequestCertificateResponse' {..} =+    Prelude.rnf certificateArn+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,254 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.ResendValidationEmail+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Resends the email that requests domain ownership validation. The domain+-- owner or an authorized representative must approve the ACM certificate+-- before it can be issued. The certificate can be approved by clicking a+-- link in the mail to navigate to the Amazon certificate approval website+-- and then clicking __I Approve__. However, the validation email can be+-- blocked by spam filters. Therefore, if you do not receive the original+-- mail, you can request that the mail be resent within 72 hours of+-- requesting the ACM certificate. If more than 72 hours have elapsed since+-- your original request or since your last attempt to resend validation+-- mail, you must request a new certificate. For more information about+-- setting up your contact email addresses, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/setup-email.html Configure Email for your Domain>.+module Amazonka.CertificateManager.ResendValidationEmail+  ( -- * Creating a Request+    ResendValidationEmail (..),+    newResendValidationEmail,++    -- * Request Lenses+    resendValidationEmail_certificateArn,+    resendValidationEmail_domain,+    resendValidationEmail_validationDomain,++    -- * Destructuring the Response+    ResendValidationEmailResponse (..),+    newResendValidationEmailResponse,+  )+where++import Amazonka.CertificateManager.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newResendValidationEmail' smart constructor.+data ResendValidationEmail = ResendValidationEmail'+  { -- | String that contains the ARN of the requested certificate. The+    -- certificate ARN is generated and returned by the RequestCertificate+    -- action as soon as the request is made. By default, using this parameter+    -- causes email to be sent to all top-level domains you specified in the+    -- certificate request. The ARN must be of the form:+    --+    -- @arn:aws:acm:us-east-1:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+    certificateArn :: Prelude.Text,+    -- | The fully qualified domain name (FQDN) of the certificate that needs to+    -- be validated.+    domain :: Prelude.Text,+    -- | The base validation domain that will act as the suffix of the email+    -- addresses that are used to send the emails. This must be the same as the+    -- @Domain@ value or a superdomain of the @Domain@ value. For example, if+    -- you requested a certificate for @site.subdomain.example.com@ and specify+    -- a __ValidationDomain__ of @subdomain.example.com@, ACM sends email to+    -- the domain registrant, technical contact, and administrative contact in+    -- WHOIS and the following five addresses:+    --+    -- -   admin\@subdomain.example.com+    --+    -- -   administrator\@subdomain.example.com+    --+    -- -   hostmaster\@subdomain.example.com+    --+    -- -   postmaster\@subdomain.example.com+    --+    -- -   webmaster\@subdomain.example.com+    validationDomain :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ResendValidationEmail' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'resendValidationEmail_certificateArn' - String that contains the ARN of the requested certificate. The+-- certificate ARN is generated and returned by the RequestCertificate+-- action as soon as the request is made. By default, using this parameter+-- causes email to be sent to all top-level domains you specified in the+-- certificate request. The ARN must be of the form:+--+-- @arn:aws:acm:us-east-1:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+--+-- 'domain', 'resendValidationEmail_domain' - The fully qualified domain name (FQDN) of the certificate that needs to+-- be validated.+--+-- 'validationDomain', 'resendValidationEmail_validationDomain' - The base validation domain that will act as the suffix of the email+-- addresses that are used to send the emails. This must be the same as the+-- @Domain@ value or a superdomain of the @Domain@ value. For example, if+-- you requested a certificate for @site.subdomain.example.com@ and specify+-- a __ValidationDomain__ of @subdomain.example.com@, ACM sends email to+-- the domain registrant, technical contact, and administrative contact in+-- WHOIS and the following five addresses:+--+-- -   admin\@subdomain.example.com+--+-- -   administrator\@subdomain.example.com+--+-- -   hostmaster\@subdomain.example.com+--+-- -   postmaster\@subdomain.example.com+--+-- -   webmaster\@subdomain.example.com+newResendValidationEmail ::+  -- | 'certificateArn'+  Prelude.Text ->+  -- | 'domain'+  Prelude.Text ->+  -- | 'validationDomain'+  Prelude.Text ->+  ResendValidationEmail+newResendValidationEmail+  pCertificateArn_+  pDomain_+  pValidationDomain_ =+    ResendValidationEmail'+      { certificateArn =+          pCertificateArn_,+        domain = pDomain_,+        validationDomain = pValidationDomain_+      }++-- | String that contains the ARN of the requested certificate. The+-- certificate ARN is generated and returned by the RequestCertificate+-- action as soon as the request is made. By default, using this parameter+-- causes email to be sent to all top-level domains you specified in the+-- certificate request. The ARN must be of the form:+--+-- @arn:aws:acm:us-east-1:123456789012:certificate\/12345678-1234-1234-1234-123456789012@+resendValidationEmail_certificateArn :: Lens.Lens' ResendValidationEmail Prelude.Text+resendValidationEmail_certificateArn = Lens.lens (\ResendValidationEmail' {certificateArn} -> certificateArn) (\s@ResendValidationEmail' {} a -> s {certificateArn = a} :: ResendValidationEmail)++-- | The fully qualified domain name (FQDN) of the certificate that needs to+-- be validated.+resendValidationEmail_domain :: Lens.Lens' ResendValidationEmail Prelude.Text+resendValidationEmail_domain = Lens.lens (\ResendValidationEmail' {domain} -> domain) (\s@ResendValidationEmail' {} a -> s {domain = a} :: ResendValidationEmail)++-- | The base validation domain that will act as the suffix of the email+-- addresses that are used to send the emails. This must be the same as the+-- @Domain@ value or a superdomain of the @Domain@ value. For example, if+-- you requested a certificate for @site.subdomain.example.com@ and specify+-- a __ValidationDomain__ of @subdomain.example.com@, ACM sends email to+-- the domain registrant, technical contact, and administrative contact in+-- WHOIS and the following five addresses:+--+-- -   admin\@subdomain.example.com+--+-- -   administrator\@subdomain.example.com+--+-- -   hostmaster\@subdomain.example.com+--+-- -   postmaster\@subdomain.example.com+--+-- -   webmaster\@subdomain.example.com+resendValidationEmail_validationDomain :: Lens.Lens' ResendValidationEmail Prelude.Text+resendValidationEmail_validationDomain = Lens.lens (\ResendValidationEmail' {validationDomain} -> validationDomain) (\s@ResendValidationEmail' {} a -> s {validationDomain = a} :: ResendValidationEmail)++instance Core.AWSRequest ResendValidationEmail where+  type+    AWSResponse ResendValidationEmail =+      ResendValidationEmailResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveNull ResendValidationEmailResponse'++instance Prelude.Hashable ResendValidationEmail where+  hashWithSalt _salt ResendValidationEmail' {..} =+    _salt+      `Prelude.hashWithSalt` certificateArn+      `Prelude.hashWithSalt` domain+      `Prelude.hashWithSalt` validationDomain++instance Prelude.NFData ResendValidationEmail where+  rnf ResendValidationEmail' {..} =+    Prelude.rnf certificateArn+      `Prelude.seq` Prelude.rnf domain+      `Prelude.seq` Prelude.rnf validationDomain++instance Data.ToHeaders ResendValidationEmail where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "CertificateManager.ResendValidationEmail" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ResendValidationEmail where+  toJSON ResendValidationEmail' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("CertificateArn" Data..= certificateArn),+            Prelude.Just ("Domain" Data..= domain),+            Prelude.Just+              ("ValidationDomain" Data..= validationDomain)+          ]+      )++instance Data.ToPath ResendValidationEmail where+  toPath = Prelude.const "/"++instance Data.ToQuery ResendValidationEmail where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newResendValidationEmailResponse' smart constructor.+data ResendValidationEmailResponse = ResendValidationEmailResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ResendValidationEmailResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newResendValidationEmailResponse ::+  ResendValidationEmailResponse+newResendValidationEmailResponse =+  ResendValidationEmailResponse'++instance Prelude.NFData ResendValidationEmailResponse where+  rnf _ = ()

@@ -0,0 +1,425 @@+{-# LANGUAGE DisambiguateRecordFields #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.Types+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+module Amazonka.CertificateManager.Types+  ( -- * Service Configuration+    defaultService,++    -- * Errors+    _AccessDeniedException,+    _ConflictException,+    _InvalidArgsException,+    _InvalidArnException,+    _InvalidDomainValidationOptionsException,+    _InvalidParameterException,+    _InvalidStateException,+    _InvalidTagException,+    _LimitExceededException,+    _RequestInProgressException,+    _ResourceInUseException,+    _ResourceNotFoundException,+    _TagPolicyException,+    _ThrottlingException,+    _TooManyTagsException,+    _ValidationException,++    -- * CertificateStatus+    CertificateStatus (..),++    -- * CertificateTransparencyLoggingPreference+    CertificateTransparencyLoggingPreference (..),++    -- * CertificateType+    CertificateType (..),++    -- * DomainStatus+    DomainStatus (..),++    -- * ExtendedKeyUsageName+    ExtendedKeyUsageName (..),++    -- * FailureReason+    FailureReason (..),++    -- * KeyAlgorithm+    KeyAlgorithm (..),++    -- * KeyUsageName+    KeyUsageName (..),++    -- * RecordType+    RecordType (..),++    -- * RenewalEligibility+    RenewalEligibility (..),++    -- * RenewalStatus+    RenewalStatus (..),++    -- * RevocationReason+    RevocationReason (..),++    -- * SortBy+    SortBy (..),++    -- * SortOrder+    SortOrder (..),++    -- * ValidationMethod+    ValidationMethod (..),++    -- * CertificateDetail+    CertificateDetail (..),+    newCertificateDetail,+    certificateDetail_certificateArn,+    certificateDetail_certificateAuthorityArn,+    certificateDetail_createdAt,+    certificateDetail_domainName,+    certificateDetail_domainValidationOptions,+    certificateDetail_extendedKeyUsages,+    certificateDetail_failureReason,+    certificateDetail_importedAt,+    certificateDetail_inUseBy,+    certificateDetail_issuedAt,+    certificateDetail_issuer,+    certificateDetail_keyAlgorithm,+    certificateDetail_keyUsages,+    certificateDetail_notAfter,+    certificateDetail_notBefore,+    certificateDetail_options,+    certificateDetail_renewalEligibility,+    certificateDetail_renewalSummary,+    certificateDetail_revocationReason,+    certificateDetail_revokedAt,+    certificateDetail_serial,+    certificateDetail_signatureAlgorithm,+    certificateDetail_status,+    certificateDetail_subject,+    certificateDetail_subjectAlternativeNames,+    certificateDetail_type,++    -- * CertificateOptions+    CertificateOptions (..),+    newCertificateOptions,+    certificateOptions_certificateTransparencyLoggingPreference,++    -- * CertificateSummary+    CertificateSummary (..),+    newCertificateSummary,+    certificateSummary_certificateArn,+    certificateSummary_createdAt,+    certificateSummary_domainName,+    certificateSummary_exported,+    certificateSummary_extendedKeyUsages,+    certificateSummary_hasAdditionalSubjectAlternativeNames,+    certificateSummary_importedAt,+    certificateSummary_inUse,+    certificateSummary_issuedAt,+    certificateSummary_keyAlgorithm,+    certificateSummary_keyUsages,+    certificateSummary_notAfter,+    certificateSummary_notBefore,+    certificateSummary_renewalEligibility,+    certificateSummary_revokedAt,+    certificateSummary_status,+    certificateSummary_subjectAlternativeNameSummaries,+    certificateSummary_type,++    -- * DomainValidation+    DomainValidation (..),+    newDomainValidation,+    domainValidation_resourceRecord,+    domainValidation_validationDomain,+    domainValidation_validationEmails,+    domainValidation_validationMethod,+    domainValidation_validationStatus,+    domainValidation_domainName,++    -- * DomainValidationOption+    DomainValidationOption (..),+    newDomainValidationOption,+    domainValidationOption_domainName,+    domainValidationOption_validationDomain,++    -- * ExpiryEventsConfiguration+    ExpiryEventsConfiguration (..),+    newExpiryEventsConfiguration,+    expiryEventsConfiguration_daysBeforeExpiry,++    -- * ExtendedKeyUsage+    ExtendedKeyUsage (..),+    newExtendedKeyUsage,+    extendedKeyUsage_name,+    extendedKeyUsage_oid,++    -- * Filters+    Filters (..),+    newFilters,+    filters_extendedKeyUsage,+    filters_keyTypes,+    filters_keyUsage,++    -- * KeyUsage+    KeyUsage (..),+    newKeyUsage,+    keyUsage_name,++    -- * RenewalSummary+    RenewalSummary (..),+    newRenewalSummary,+    renewalSummary_renewalStatusReason,+    renewalSummary_renewalStatus,+    renewalSummary_domainValidationOptions,+    renewalSummary_updatedAt,++    -- * ResourceRecord+    ResourceRecord (..),+    newResourceRecord,+    resourceRecord_name,+    resourceRecord_type,+    resourceRecord_value,++    -- * Tag+    Tag (..),+    newTag,+    tag_value,+    tag_key,+  )+where++import Amazonka.CertificateManager.Types.CertificateDetail+import Amazonka.CertificateManager.Types.CertificateOptions+import Amazonka.CertificateManager.Types.CertificateStatus+import Amazonka.CertificateManager.Types.CertificateSummary+import Amazonka.CertificateManager.Types.CertificateTransparencyLoggingPreference+import Amazonka.CertificateManager.Types.CertificateType+import Amazonka.CertificateManager.Types.DomainStatus+import Amazonka.CertificateManager.Types.DomainValidation+import Amazonka.CertificateManager.Types.DomainValidationOption+import Amazonka.CertificateManager.Types.ExpiryEventsConfiguration+import Amazonka.CertificateManager.Types.ExtendedKeyUsage+import Amazonka.CertificateManager.Types.ExtendedKeyUsageName+import Amazonka.CertificateManager.Types.FailureReason+import Amazonka.CertificateManager.Types.Filters+import Amazonka.CertificateManager.Types.KeyAlgorithm+import Amazonka.CertificateManager.Types.KeyUsage+import Amazonka.CertificateManager.Types.KeyUsageName+import Amazonka.CertificateManager.Types.RecordType+import Amazonka.CertificateManager.Types.RenewalEligibility+import Amazonka.CertificateManager.Types.RenewalStatus+import Amazonka.CertificateManager.Types.RenewalSummary+import Amazonka.CertificateManager.Types.ResourceRecord+import Amazonka.CertificateManager.Types.RevocationReason+import Amazonka.CertificateManager.Types.SortBy+import Amazonka.CertificateManager.Types.SortOrder+import Amazonka.CertificateManager.Types.Tag+import Amazonka.CertificateManager.Types.ValidationMethod+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Sign.V4 as Sign++-- | API version @2015-12-08@ of the Amazon Certificate Manager SDK configuration.+defaultService :: Core.Service+defaultService =+  Core.Service+    { Core.abbrev = "CertificateManager",+      Core.signer = Sign.v4,+      Core.endpointPrefix = "acm",+      Core.signingName = "acm",+      Core.version = "2015-12-08",+      Core.s3AddressingStyle = Core.S3AddressingStyleAuto,+      Core.endpoint = Core.defaultEndpoint defaultService,+      Core.timeout = Prelude.Just 70,+      Core.check = Core.statusSuccess,+      Core.error =+        Core.parseJSONError "CertificateManager",+      Core.retry = retry+    }+  where+    retry =+      Core.Exponential+        { Core.base = 5.0e-2,+          Core.growth = 2,+          Core.attempts = 5,+          Core.check = check+        }+    check e+      | Lens.has (Core.hasStatus 502) e =+          Prelude.Just "bad_gateway"+      | Lens.has (Core.hasStatus 504) e =+          Prelude.Just "gateway_timeout"+      | Lens.has (Core.hasStatus 500) e =+          Prelude.Just "general_server_error"+      | Lens.has (Core.hasStatus 509) e =+          Prelude.Just "limit_exceeded"+      | Lens.has+          ( Core.hasCode "RequestThrottledException"+              Prelude.. Core.hasStatus 400+          )+          e =+          Prelude.Just "request_throttled_exception"+      | Lens.has (Core.hasStatus 503) e =+          Prelude.Just "service_unavailable"+      | Lens.has+          ( Core.hasCode "ThrottledException"+              Prelude.. Core.hasStatus 400+          )+          e =+          Prelude.Just "throttled_exception"+      | Lens.has+          ( Core.hasCode "Throttling"+              Prelude.. Core.hasStatus 400+          )+          e =+          Prelude.Just "throttling"+      | Lens.has+          ( Core.hasCode "ThrottlingException"+              Prelude.. Core.hasStatus 400+          )+          e =+          Prelude.Just "throttling_exception"+      | Lens.has+          ( Core.hasCode+              "ProvisionedThroughputExceededException"+              Prelude.. Core.hasStatus 400+          )+          e =+          Prelude.Just "throughput_exceeded"+      | Lens.has (Core.hasStatus 429) e =+          Prelude.Just "too_many_requests"+      | Prelude.otherwise = Prelude.Nothing++-- | You do not have access required to perform this action.+_AccessDeniedException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_AccessDeniedException =+  Core._MatchServiceError+    defaultService+    "AccessDeniedException"++-- | You are trying to update a resource or configuration that is already+-- being created or updated. Wait for the previous operation to finish and+-- try again.+_ConflictException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_ConflictException =+  Core._MatchServiceError+    defaultService+    "ConflictException"++-- | One or more of of request parameters specified is not valid.+_InvalidArgsException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_InvalidArgsException =+  Core._MatchServiceError+    defaultService+    "InvalidArgsException"++-- | The requested Amazon Resource Name (ARN) does not refer to an existing+-- resource.+_InvalidArnException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_InvalidArnException =+  Core._MatchServiceError+    defaultService+    "InvalidArnException"++-- | One or more values in the DomainValidationOption structure is incorrect.+_InvalidDomainValidationOptionsException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_InvalidDomainValidationOptionsException =+  Core._MatchServiceError+    defaultService+    "InvalidDomainValidationOptionsException"++-- | An input parameter was invalid.+_InvalidParameterException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_InvalidParameterException =+  Core._MatchServiceError+    defaultService+    "InvalidParameterException"++-- | Processing has reached an invalid state.+_InvalidStateException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_InvalidStateException =+  Core._MatchServiceError+    defaultService+    "InvalidStateException"++-- | One or both of the values that make up the key-value pair is not valid.+-- For example, you cannot specify a tag value that begins with @aws:@.+_InvalidTagException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_InvalidTagException =+  Core._MatchServiceError+    defaultService+    "InvalidTagException"++-- | An ACM quota has been exceeded.+_LimitExceededException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_LimitExceededException =+  Core._MatchServiceError+    defaultService+    "LimitExceededException"++-- | The certificate request is in process and the certificate in your+-- account has not yet been issued.+_RequestInProgressException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_RequestInProgressException =+  Core._MatchServiceError+    defaultService+    "RequestInProgressException"++-- | The certificate is in use by another Amazon Web Services service in the+-- caller\'s account. Remove the association and try again.+_ResourceInUseException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_ResourceInUseException =+  Core._MatchServiceError+    defaultService+    "ResourceInUseException"++-- | The specified certificate cannot be found in the caller\'s account or+-- the caller\'s account cannot be found.+_ResourceNotFoundException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_ResourceNotFoundException =+  Core._MatchServiceError+    defaultService+    "ResourceNotFoundException"++-- | A specified tag did not comply with an existing tag policy and was+-- rejected.+_TagPolicyException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_TagPolicyException =+  Core._MatchServiceError+    defaultService+    "TagPolicyException"++-- | The request was denied because it exceeded a quota.+_ThrottlingException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_ThrottlingException =+  Core._MatchServiceError+    defaultService+    "ThrottlingException"++-- | The request contains too many tags. Try the request again with fewer+-- tags.+_TooManyTagsException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_TooManyTagsException =+  Core._MatchServiceError+    defaultService+    "TooManyTagsException"++-- | The supplied input failed to satisfy constraints of an Amazon Web+-- Services service.+_ValidationException :: (Core.AsError a) => Lens.Fold a Core.ServiceError+_ValidationException =+  Core._MatchServiceError+    defaultService+    "ValidationException"

@@ -0,0 +1,564 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CertificateManager.Types.CertificateDetail+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+module Amazonka.CertificateManager.Types.CertificateDetail where++import Amazonka.CertificateManager.Types.CertificateOptions+import Amazonka.CertificateManager.Types.CertificateStatus+import Amazonka.CertificateManager.Types.CertificateType+import Amazonka.CertificateManager.Types.DomainValidation+import Amazonka.CertificateManager.Types.ExtendedKeyUsage+import Amazonka.CertificateManager.Types.FailureReason+import Amazonka.CertificateManager.Types.KeyAlgorithm+import Amazonka.CertificateManager.Types.KeyUsage+import Amazonka.CertificateManager.Types.RenewalEligibility+import Amazonka.CertificateManager.Types.RenewalSummary+import Amazonka.CertificateManager.Types.RevocationReason+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude++-- | Contains metadata about an ACM certificate. This structure is returned+-- in the response to a DescribeCertificate request.+--+-- /See:/ 'newCertificateDetail' smart constructor.+data CertificateDetail = CertificateDetail'+  { -- | The Amazon Resource Name (ARN) of the certificate. For more information+    -- about ARNs, see+    -- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>+    -- in the /Amazon Web Services General Reference/.+    certificateArn :: Prelude.Maybe Prelude.Text,+    -- | The Amazon Resource Name (ARN) of the private certificate authority (CA)+    -- that issued the certificate. This has the following format:+    --+    -- @arn:aws:acm-pca:region:account:certificate-authority\/12345678-1234-1234-1234-123456789012@+    certificateAuthorityArn :: Prelude.Maybe Prelude.Text,+    -- | The time at which the certificate was requested.+    createdAt :: Prelude.Maybe Data.POSIX,+    -- | The fully qualified domain name for the certificate, such as+    -- www.example.com or example.com.+    domainName :: Prelude.Maybe Prelude.Text,+    -- | Contains information about the initial validation of each domain name+    -- that occurs as a result of the RequestCertificate request. This field+    -- exists only when the certificate type is @AMAZON_ISSUED@.+    domainValidationOptions :: Prelude.Maybe (Prelude.NonEmpty DomainValidation),+    -- | Contains a list of Extended Key Usage X.509 v3 extension objects. Each+    -- object specifies a purpose for which the certificate public key can be+    -- used and consists of a name and an object identifier (OID).+    extendedKeyUsages :: Prelude.Maybe [ExtendedKeyUsage],+    -- | The reason the certificate request failed. This value exists only when+    -- the certificate status is @FAILED@. For more information, see+    -- <https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed Certificate Request Failed>+    -- in the /Certificate Manager User Guide/.+    failureReason :: Prelude.Maybe FailureReason,+    -- | The date and time when the certificate was imported. This value exists+    -- only when the certificate type is @IMPORTED@.+    importedAt :: Prelude.Maybe Data.POSIX,+    -- | A list of ARNs for the Amazon Web Services resources that are using the+    -- certificate. A certificate can be used by multiple Amazon Web Services+    -- resources.+    inUseBy :: Prelude.Maybe [Prelude.Text],+    -- | The time at which the certificate was issued. This value exists only+    -- when the certificate type is @AMAZON_ISSUED@.+    issuedAt :: Prelude.Maybe Data.POSIX,+    -- | The name of the certificate authority that issued and signed the+    -- certificate.+    issuer :: Prelude.Maybe Prelude.Text,+    -- | The algorithm that was used to generate the public-private key pair.+    keyAlgorithm :: Prelude.Maybe KeyAlgorithm,+    -- | A list of Key Usage X.509 v3 extension objects. Each object is a string+    -- value that identifies the purpose of the public key contained in the+    -- certificate. Possible extension values include DIGITAL_SIGNATURE,+    -- KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.+    keyUsages :: Prelude.Maybe [KeyUsage],+    -- | The time after which the certificate is not valid.+    notAfter :: Prelude.Maybe Data.POSIX,+    -- | The time before which the certificate is not valid.+    notBefore :: Prelude.Maybe Data.POSIX,+    -- | Value that specifies whether to add the certificate to a transparency+    -- log. Certificate transparency makes it possible to detect SSL+    -- certificates that have been mistakenly or maliciously issued. A browser+    -- might respond to certificate that has not been logged by showing an+    -- error message. The logs are cryptographically secure.+    options :: Prelude.Maybe CertificateOptions,+    -- | Specifies whether the certificate is eligible for renewal. At this time,+    -- only exported private certificates can be renewed with the+    -- RenewCertificate command.+    renewalEligibility :: Prelude.Maybe RenewalEligibility,+    -- | Contains information about the status of ACM\'s+    -- <https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html managed renewal>+    -- for the certificate. This field exists only when the certificate type is+    -- @AMAZON_ISSUED@.+    renewalSummary :: Prelude.Maybe RenewalSummary,+    -- | The reason the certificate was revoked. This value exists only when the+    -- certificate status is @REVOKED@.+    revocationReason :: Prelude.Maybe RevocationReason,+    -- | The time at which the certificate was revoked. This value exists only+    -- when the certificate status is @REVOKED@.+    revokedAt :: Prelude.Maybe Data.POSIX,+    -- | The serial number of the certificate.+    serial :: Prelude.Maybe Prelude.Text,+    -- | The algorithm that was used to sign the certificate.+    signatureAlgorithm :: Prelude.Maybe Prelude.Text,+    -- | The status of the certificate.+    --+    -- A certificate enters status PENDING_VALIDATION upon being requested,+    -- unless it fails for any of the reasons given in the troubleshooting+    -- topic+    -- <https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html Certificate request fails>.+    -- ACM makes repeated attempts to validate a certificate for 72 hours and+    -- then times out. If a certificate shows status FAILED or+    -- VALIDATION_TIMED_OUT, delete the request, correct the issue with+    -- <https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html DNS validation>+    -- or+    -- <https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html Email validation>,+    -- and try again. If validation succeeds, the certificate enters status+    -- ISSUED.+    status :: Prelude.Maybe CertificateStatus,+    -- | The name of the entity that is associated with the public key contained+    -- in the certificate.+    subject :: Prelude.Maybe Prelude.Text,+    -- | One or more domain names (subject alternative names) included in the+    -- certificate. This list contains the domain names that are bound to the+    -- public key that is contained in the certificate. The subject alternative+    -- names include the canonical domain name (CN) of the certificate and+    -- additional domain names that can be used to connect to the website.+    subjectAlternativeNames :: Prelude.Maybe (Prelude.NonEmpty Prelude.Text),+    -- | The source of the certificate. For certificates provided by ACM, this+    -- value is @AMAZON_ISSUED@. For certificates that you imported with+    -- ImportCertificate, this value is @IMPORTED@. ACM does not provide+    -- <https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html managed renewal>+    -- for imported certificates. For more information about the differences+    -- between certificates that you import and those that ACM provides, see+    -- <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html Importing Certificates>+    -- in the /Certificate Manager User Guide/.+    type' :: Prelude.Maybe CertificateType+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CertificateDetail' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'certificateArn', 'certificateDetail_certificateArn' - The Amazon Resource Name (ARN) of the certificate. For more information+-- about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>+-- in the /Amazon Web Services General Reference/.+--+-- 'certificateAuthorityArn', 'certificateDetail_certificateAuthorityArn' - The Amazon Resource Name (ARN) of the private certificate authority (CA)+-- that issued the certificate. This has the following format:+--+-- @arn:aws:acm-pca:region:account:certificate-authority\/12345678-1234-1234-1234-123456789012@+--+-- 'createdAt', 'certificateDetail_createdAt' - The time at which the certificate was requested.+--+-- 'domainName', 'certificateDetail_domainName' - The fully qualified domain name for the certificate, such as+-- www.example.com or example.com.+--+-- 'domainValidationOptions', 'certificateDetail_domainValidationOptions' - Contains information about the initial validation of each domain name+-- that occurs as a result of the RequestCertificate request. This field+-- exists only when the certificate type is @AMAZON_ISSUED@.+--+-- 'extendedKeyUsages', 'certificateDetail_extendedKeyUsages' - Contains a list of Extended Key Usage X.509 v3 extension objects. Each+-- object specifies a purpose for which the certificate public key can be+-- used and consists of a name and an object identifier (OID).+--+-- 'failureReason', 'certificateDetail_failureReason' - The reason the certificate request failed. This value exists only when+-- the certificate status is @FAILED@. For more information, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed Certificate Request Failed>+-- in the /Certificate Manager User Guide/.+--+-- 'importedAt', 'certificateDetail_importedAt' - The date and time when the certificate was imported. This value exists+-- only when the certificate type is @IMPORTED@.+--+-- 'inUseBy', 'certificateDetail_inUseBy' - A list of ARNs for the Amazon Web Services resources that are using the+-- certificate. A certificate can be used by multiple Amazon Web Services+-- resources.+--+-- 'issuedAt', 'certificateDetail_issuedAt' - The time at which the certificate was issued. This value exists only+-- when the certificate type is @AMAZON_ISSUED@.+--+-- 'issuer', 'certificateDetail_issuer' - The name of the certificate authority that issued and signed the+-- certificate.+--+-- 'keyAlgorithm', 'certificateDetail_keyAlgorithm' - The algorithm that was used to generate the public-private key pair.+--+-- 'keyUsages', 'certificateDetail_keyUsages' - A list of Key Usage X.509 v3 extension objects. Each object is a string+-- value that identifies the purpose of the public key contained in the+-- certificate. Possible extension values include DIGITAL_SIGNATURE,+-- KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.+--+-- 'notAfter', 'certificateDetail_notAfter' - The time after which the certificate is not valid.+--+-- 'notBefore', 'certificateDetail_notBefore' - The time before which the certificate is not valid.+--+-- 'options', 'certificateDetail_options' - Value that specifies whether to add the certificate to a transparency+-- log. Certificate transparency makes it possible to detect SSL+-- certificates that have been mistakenly or maliciously issued. A browser+-- might respond to certificate that has not been logged by showing an+-- error message. The logs are cryptographically secure.+--+-- 'renewalEligibility', 'certificateDetail_renewalEligibility' - Specifies whether the certificate is eligible for renewal. At this time,+-- only exported private certificates can be renewed with the+-- RenewCertificate command.+--+-- 'renewalSummary', 'certificateDetail_renewalSummary' - Contains information about the status of ACM\'s+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html managed renewal>+-- for the certificate. This field exists only when the certificate type is+-- @AMAZON_ISSUED@.+--+-- 'revocationReason', 'certificateDetail_revocationReason' - The reason the certificate was revoked. This value exists only when the+-- certificate status is @REVOKED@.+--+-- 'revokedAt', 'certificateDetail_revokedAt' - The time at which the certificate was revoked. This value exists only+-- when the certificate status is @REVOKED@.+--+-- 'serial', 'certificateDetail_serial' - The serial number of the certificate.+--+-- 'signatureAlgorithm', 'certificateDetail_signatureAlgorithm' - The algorithm that was used to sign the certificate.+--+-- 'status', 'certificateDetail_status' - The status of the certificate.+--+-- A certificate enters status PENDING_VALIDATION upon being requested,+-- unless it fails for any of the reasons given in the troubleshooting+-- topic+-- <https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html Certificate request fails>.+-- ACM makes repeated attempts to validate a certificate for 72 hours and+-- then times out. If a certificate shows status FAILED or+-- VALIDATION_TIMED_OUT, delete the request, correct the issue with+-- <https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html DNS validation>+-- or+-- <https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html Email validation>,+-- and try again. If validation succeeds, the certificate enters status+-- ISSUED.+--+-- 'subject', 'certificateDetail_subject' - The name of the entity that is associated with the public key contained+-- in the certificate.+--+-- 'subjectAlternativeNames', 'certificateDetail_subjectAlternativeNames' - One or more domain names (subject alternative names) included in the+-- certificate. This list contains the domain names that are bound to the+-- public key that is contained in the certificate. The subject alternative+-- names include the canonical domain name (CN) of the certificate and+-- additional domain names that can be used to connect to the website.+--+-- 'type'', 'certificateDetail_type' - The source of the certificate. For certificates provided by ACM, this+-- value is @AMAZON_ISSUED@. For certificates that you imported with+-- ImportCertificate, this value is @IMPORTED@. ACM does not provide+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html managed renewal>+-- for imported certificates. For more information about the differences+-- between certificates that you import and those that ACM provides, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html Importing Certificates>+-- in the /Certificate Manager User Guide/.+newCertificateDetail ::+  CertificateDetail+newCertificateDetail =+  CertificateDetail'+    { certificateArn =+        Prelude.Nothing,+      certificateAuthorityArn = Prelude.Nothing,+      createdAt = Prelude.Nothing,+      domainName = Prelude.Nothing,+      domainValidationOptions = Prelude.Nothing,+      extendedKeyUsages = Prelude.Nothing,+      failureReason = Prelude.Nothing,+      importedAt = Prelude.Nothing,+      inUseBy = Prelude.Nothing,+      issuedAt = Prelude.Nothing,+      issuer = Prelude.Nothing,+      keyAlgorithm = Prelude.Nothing,+      keyUsages = Prelude.Nothing,+      notAfter = Prelude.Nothing,+      notBefore = Prelude.Nothing,+      options = Prelude.Nothing,+      renewalEligibility = Prelude.Nothing,+      renewalSummary = Prelude.Nothing,+      revocationReason = Prelude.Nothing,+      revokedAt = Prelude.Nothing,+      serial = Prelude.Nothing,+      signatureAlgorithm = Prelude.Nothing,+      status = Prelude.Nothing,+      subject = Prelude.Nothing,+      subjectAlternativeNames = Prelude.Nothing,+      type' = Prelude.Nothing+    }++-- | The Amazon Resource Name (ARN) of the certificate. For more information+-- about ARNs, see+-- <https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html Amazon Resource Names (ARNs)>+-- in the /Amazon Web Services General Reference/.+certificateDetail_certificateArn :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.Text)+certificateDetail_certificateArn = Lens.lens (\CertificateDetail' {certificateArn} -> certificateArn) (\s@CertificateDetail' {} a -> s {certificateArn = a} :: CertificateDetail)++-- | The Amazon Resource Name (ARN) of the private certificate authority (CA)+-- that issued the certificate. This has the following format:+--+-- @arn:aws:acm-pca:region:account:certificate-authority\/12345678-1234-1234-1234-123456789012@+certificateDetail_certificateAuthorityArn :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.Text)+certificateDetail_certificateAuthorityArn = Lens.lens (\CertificateDetail' {certificateAuthorityArn} -> certificateAuthorityArn) (\s@CertificateDetail' {} a -> s {certificateAuthorityArn = a} :: CertificateDetail)++-- | The time at which the certificate was requested.+certificateDetail_createdAt :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.UTCTime)+certificateDetail_createdAt = Lens.lens (\CertificateDetail' {createdAt} -> createdAt) (\s@CertificateDetail' {} a -> s {createdAt = a} :: CertificateDetail) Prelude.. Lens.mapping Data._Time++-- | The fully qualified domain name for the certificate, such as+-- www.example.com or example.com.+certificateDetail_domainName :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.Text)+certificateDetail_domainName = Lens.lens (\CertificateDetail' {domainName} -> domainName) (\s@CertificateDetail' {} a -> s {domainName = a} :: CertificateDetail)++-- | Contains information about the initial validation of each domain name+-- that occurs as a result of the RequestCertificate request. This field+-- exists only when the certificate type is @AMAZON_ISSUED@.+certificateDetail_domainValidationOptions :: Lens.Lens' CertificateDetail (Prelude.Maybe (Prelude.NonEmpty DomainValidation))+certificateDetail_domainValidationOptions = Lens.lens (\CertificateDetail' {domainValidationOptions} -> domainValidationOptions) (\s@CertificateDetail' {} a -> s {domainValidationOptions = a} :: CertificateDetail) Prelude.. Lens.mapping Lens.coerced++-- | Contains a list of Extended Key Usage X.509 v3 extension objects. Each+-- object specifies a purpose for which the certificate public key can be+-- used and consists of a name and an object identifier (OID).+certificateDetail_extendedKeyUsages :: Lens.Lens' CertificateDetail (Prelude.Maybe [ExtendedKeyUsage])+certificateDetail_extendedKeyUsages = Lens.lens (\CertificateDetail' {extendedKeyUsages} -> extendedKeyUsages) (\s@CertificateDetail' {} a -> s {extendedKeyUsages = a} :: CertificateDetail) Prelude.. Lens.mapping Lens.coerced++-- | The reason the certificate request failed. This value exists only when+-- the certificate status is @FAILED@. For more information, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting.html#troubleshooting-failed Certificate Request Failed>+-- in the /Certificate Manager User Guide/.+certificateDetail_failureReason :: Lens.Lens' CertificateDetail (Prelude.Maybe FailureReason)+certificateDetail_failureReason = Lens.lens (\CertificateDetail' {failureReason} -> failureReason) (\s@CertificateDetail' {} a -> s {failureReason = a} :: CertificateDetail)++-- | The date and time when the certificate was imported. This value exists+-- only when the certificate type is @IMPORTED@.+certificateDetail_importedAt :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.UTCTime)+certificateDetail_importedAt = Lens.lens (\CertificateDetail' {importedAt} -> importedAt) (\s@CertificateDetail' {} a -> s {importedAt = a} :: CertificateDetail) Prelude.. Lens.mapping Data._Time++-- | A list of ARNs for the Amazon Web Services resources that are using the+-- certificate. A certificate can be used by multiple Amazon Web Services+-- resources.+certificateDetail_inUseBy :: Lens.Lens' CertificateDetail (Prelude.Maybe [Prelude.Text])+certificateDetail_inUseBy = Lens.lens (\CertificateDetail' {inUseBy} -> inUseBy) (\s@CertificateDetail' {} a -> s {inUseBy = a} :: CertificateDetail) Prelude.. Lens.mapping Lens.coerced++-- | The time at which the certificate was issued. This value exists only+-- when the certificate type is @AMAZON_ISSUED@.+certificateDetail_issuedAt :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.UTCTime)+certificateDetail_issuedAt = Lens.lens (\CertificateDetail' {issuedAt} -> issuedAt) (\s@CertificateDetail' {} a -> s {issuedAt = a} :: CertificateDetail) Prelude.. Lens.mapping Data._Time++-- | The name of the certificate authority that issued and signed the+-- certificate.+certificateDetail_issuer :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.Text)+certificateDetail_issuer = Lens.lens (\CertificateDetail' {issuer} -> issuer) (\s@CertificateDetail' {} a -> s {issuer = a} :: CertificateDetail)++-- | The algorithm that was used to generate the public-private key pair.+certificateDetail_keyAlgorithm :: Lens.Lens' CertificateDetail (Prelude.Maybe KeyAlgorithm)+certificateDetail_keyAlgorithm = Lens.lens (\CertificateDetail' {keyAlgorithm} -> keyAlgorithm) (\s@CertificateDetail' {} a -> s {keyAlgorithm = a} :: CertificateDetail)++-- | A list of Key Usage X.509 v3 extension objects. Each object is a string+-- value that identifies the purpose of the public key contained in the+-- certificate. Possible extension values include DIGITAL_SIGNATURE,+-- KEY_ENCHIPHERMENT, NON_REPUDIATION, and more.+certificateDetail_keyUsages :: Lens.Lens' CertificateDetail (Prelude.Maybe [KeyUsage])+certificateDetail_keyUsages = Lens.lens (\CertificateDetail' {keyUsages} -> keyUsages) (\s@CertificateDetail' {} a -> s {keyUsages = a} :: CertificateDetail) Prelude.. Lens.mapping Lens.coerced++-- | The time after which the certificate is not valid.+certificateDetail_notAfter :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.UTCTime)+certificateDetail_notAfter = Lens.lens (\CertificateDetail' {notAfter} -> notAfter) (\s@CertificateDetail' {} a -> s {notAfter = a} :: CertificateDetail) Prelude.. Lens.mapping Data._Time++-- | The time before which the certificate is not valid.+certificateDetail_notBefore :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.UTCTime)+certificateDetail_notBefore = Lens.lens (\CertificateDetail' {notBefore} -> notBefore) (\s@CertificateDetail' {} a -> s {notBefore = a} :: CertificateDetail) Prelude.. Lens.mapping Data._Time++-- | Value that specifies whether to add the certificate to a transparency+-- log. Certificate transparency makes it possible to detect SSL+-- certificates that have been mistakenly or maliciously issued. A browser+-- might respond to certificate that has not been logged by showing an+-- error message. The logs are cryptographically secure.+certificateDetail_options :: Lens.Lens' CertificateDetail (Prelude.Maybe CertificateOptions)+certificateDetail_options = Lens.lens (\CertificateDetail' {options} -> options) (\s@CertificateDetail' {} a -> s {options = a} :: CertificateDetail)++-- | Specifies whether the certificate is eligible for renewal. At this time,+-- only exported private certificates can be renewed with the+-- RenewCertificate command.+certificateDetail_renewalEligibility :: Lens.Lens' CertificateDetail (Prelude.Maybe RenewalEligibility)+certificateDetail_renewalEligibility = Lens.lens (\CertificateDetail' {renewalEligibility} -> renewalEligibility) (\s@CertificateDetail' {} a -> s {renewalEligibility = a} :: CertificateDetail)++-- | Contains information about the status of ACM\'s+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html managed renewal>+-- for the certificate. This field exists only when the certificate type is+-- @AMAZON_ISSUED@.+certificateDetail_renewalSummary :: Lens.Lens' CertificateDetail (Prelude.Maybe RenewalSummary)+certificateDetail_renewalSummary = Lens.lens (\CertificateDetail' {renewalSummary} -> renewalSummary) (\s@CertificateDetail' {} a -> s {renewalSummary = a} :: CertificateDetail)++-- | The reason the certificate was revoked. This value exists only when the+-- certificate status is @REVOKED@.+certificateDetail_revocationReason :: Lens.Lens' CertificateDetail (Prelude.Maybe RevocationReason)+certificateDetail_revocationReason = Lens.lens (\CertificateDetail' {revocationReason} -> revocationReason) (\s@CertificateDetail' {} a -> s {revocationReason = a} :: CertificateDetail)++-- | The time at which the certificate was revoked. This value exists only+-- when the certificate status is @REVOKED@.+certificateDetail_revokedAt :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.UTCTime)+certificateDetail_revokedAt = Lens.lens (\CertificateDetail' {revokedAt} -> revokedAt) (\s@CertificateDetail' {} a -> s {revokedAt = a} :: CertificateDetail) Prelude.. Lens.mapping Data._Time++-- | The serial number of the certificate.+certificateDetail_serial :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.Text)+certificateDetail_serial = Lens.lens (\CertificateDetail' {serial} -> serial) (\s@CertificateDetail' {} a -> s {serial = a} :: CertificateDetail)++-- | The algorithm that was used to sign the certificate.+certificateDetail_signatureAlgorithm :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.Text)+certificateDetail_signatureAlgorithm = Lens.lens (\CertificateDetail' {signatureAlgorithm} -> signatureAlgorithm) (\s@CertificateDetail' {} a -> s {signatureAlgorithm = a} :: CertificateDetail)++-- | The status of the certificate.+--+-- A certificate enters status PENDING_VALIDATION upon being requested,+-- unless it fails for any of the reasons given in the troubleshooting+-- topic+-- <https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-failed.html Certificate request fails>.+-- ACM makes repeated attempts to validate a certificate for 72 hours and+-- then times out. If a certificate shows status FAILED or+-- VALIDATION_TIMED_OUT, delete the request, correct the issue with+-- <https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html DNS validation>+-- or+-- <https://docs.aws.amazon.com/acm/latest/userguide/email-validation.html Email validation>,+-- and try again. If validation succeeds, the certificate enters status+-- ISSUED.+certificateDetail_status :: Lens.Lens' CertificateDetail (Prelude.Maybe CertificateStatus)+certificateDetail_status = Lens.lens (\CertificateDetail' {status} -> status) (\s@CertificateDetail' {} a -> s {status = a} :: CertificateDetail)++-- | The name of the entity that is associated with the public key contained+-- in the certificate.+certificateDetail_subject :: Lens.Lens' CertificateDetail (Prelude.Maybe Prelude.Text)+certificateDetail_subject = Lens.lens (\CertificateDetail' {subject} -> subject) (\s@CertificateDetail' {} a -> s {subject = a} :: CertificateDetail)++-- | One or more domain names (subject alternative names) included in the+-- certificate. This list contains the domain names that are bound to the+-- public key that is contained in the certificate. The subject alternative+-- names include the canonical domain name (CN) of the certificate and+-- additional domain names that can be used to connect to the website.+certificateDetail_subjectAlternativeNames :: Lens.Lens' CertificateDetail (Prelude.Maybe (Prelude.NonEmpty Prelude.Text))+certificateDetail_subjectAlternativeNames = Lens.lens (\CertificateDetail' {subjectAlternativeNames} -> subjectAlternativeNames) (\s@CertificateDetail' {} a -> s {subjectAlternativeNames = a} :: CertificateDetail) Prelude.. Lens.mapping Lens.coerced++-- | The source of the certificate. For certificates provided by ACM, this+-- value is @AMAZON_ISSUED@. For certificates that you imported with+-- ImportCertificate, this value is @IMPORTED@. ACM does not provide+-- <https://docs.aws.amazon.com/acm/latest/userguide/acm-renewal.html managed renewal>+-- for imported certificates. For more information about the differences+-- between certificates that you import and those that ACM provides, see+-- <https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html Importing Certificates>+-- in the /Certificate Manager User Guide/.+certificateDetail_type :: Lens.Lens' CertificateDetail (Prelude.Maybe CertificateType)+certificateDetail_type = Lens.lens (\CertificateDetail' {type'} -> type') (\s@CertificateDetail' {} a -> s {type' = a} :: CertificateDetail)++instance Data.FromJSON CertificateDetail where+  parseJSON =+    Data.withObject+      "CertificateDetail"+      ( \x ->+          CertificateDetail'+            Prelude.<$> (x Data..:? "CertificateArn")+            Prelude.<*> (x Data..:? "CertificateAuthorityArn")+            Prelude.<*> (x Data..:? "CreatedAt")+            Prelude.<*> (x Data..:? "DomainName")+            Prelude.<*> (x Data..:? "DomainValidationOptions")+            Prelude.<*> ( x+                            Data..:? "ExtendedKeyUsages"+                            Data..!= Prelude.mempty+                        )+            Prelude.<*> (x Data..:? "FailureReason")+            Prelude.<*> (x Data..:? "ImportedAt")+            Prelude.<*> (x Data..:? "InUseBy" Data..!= Prelude.mempty)+            Prelude.<*> (x Data..:? "IssuedAt")+            Prelude.<*> (x Data..:? "Issuer")+            Prelude.<*> (x Data..:? "KeyAlgorithm")+            Prelude.<*> (x Data..:? "KeyUsages" Data..!= Prelude.mempty)+            Prelude.<*> (x Data..:? "NotAfter")+            Prelude.<*> (x Data..:? "NotBefore")+            Prelude.<*> (x Data..:? "Options")+            Prelude.<*> (x Data..:? "RenewalEligibility")+            Prelude.<*> (x Data..:? "RenewalSummary")+            Prelude.<*> (x Data..:? "RevocationReason")+            Prelude.<*> (x Data..:? "RevokedAt")+            Prelude.<*> (x Data..:? "Serial")+            Prelude.<*> (x Data..:? "SignatureAlgorithm")+            Prelude.<*> (x Data..:? "Status")+            Prelude.<*> (x Data..:? "Subject")+            Prelude.<*> (x Data..:? "SubjectAlternativeNames")+            Prelude.<*> (x Data..:? "Type")+      )++instance Prelude.Hashable CertificateDetail where+  hashWithSalt _salt CertificateDetail' {..} =+    _salt+      `Prelude.hashWithSalt` certificateArn+      `Prelude.hashWithSalt` certificateAuthorityArn+      `Prelude.hashWithSalt` createdAt+      `Prelude.hashWithSalt` domainName+      `Prelude.hashWithSalt` domainValidationOptions+      `Prelude.hashWithSalt` extendedKeyUsages+      `Prelude.hashWithSalt` failureReason+      `Prelude.hashWithSalt` importedAt+      `Prelude.hashWithSalt` inUseBy+      `Prelude.hashWithSalt` issuedAt+      `Prelude.hashWithSalt` issuer+      `Prelude.hashWithSalt` keyAlgorithm+      `Prelude.hashWithSalt` keyUsages+      `Prelude.hashWithSalt` notAfter+      `Prelude.hashWithSalt` notBefore+      `Prelude.hashWithSalt` options+      `Prelude.hashWithSalt` renewalEligibility+      `Prelude.hashWithSalt` renewalSummary+      `Prelude.hashWithSalt` revocationReason+      `Prelude.hashWithSalt` revokedAt+      `Prelude.hashWithSalt` serial+      `Prelude.hashWithSalt` signatureAlgorithm+      `Prelude.hashWithSalt` status+      `Prelude.hashWithSalt` subject+      `Prelude.hashWithSalt` subjectAlternativeNames+      `Prelude.hashWithSalt` type'++instance Prelude.NFData CertificateDetail where+  rnf CertificateDetail' {..} =+    Prelude.rnf certificateArn+      `Prelude.seq` Prelude.rnf certificateAuthorityArn+      `Prelude.seq` Prelude.rnf createdAt+      `Prelude.seq` Prelude.rnf domainName+      `Prelude.seq` Prelude.rnf domainValidationOptions+      `Prelude.seq` Prelude.rnf extendedKeyUsages+      `Prelude.seq` Prelude.rnf failureReason+      `Prelude.seq` Prelude.rnf importedAt+      `Prelude.seq` Prelude.rnf inUseBy+      `Prelude.seq` Prelude.rnf issuedAt+      `Prelude.seq` Prelude.rnf issuer+      `Prelude.seq` Prelude.rnf keyAlgorithm+      `Prelude.seq` Prelude.rnf keyUsages+      `Prelude.seq` Prelude.rnf notAfter+      `Prelude.seq` Prelude.rnf notBefore+      `Prelude.seq` Prelude.rnf options+      `Prelude.seq` Prelude.rnf renewalEligibility+      `Prelude.seq` Prelude.rnf renewalSummary+      `Prelude.seq` Prelude.rnf revocationReason+      `Prelude.seq` Prelude.rnf revokedAt+      `Prelude.seq` Prelude.rnf serial+      `Prelude.seq` Prelude.rnf+        signatureAlgorithm+      `Prelude.seq` Prelude.rnf status+      `Prelude.seq` Prelude.rnf subject+      `Prelude.seq` Prelude.rnf+        subjectAlternativeNames+      `Prelude.seq` Prelude.rnf type'