---
updatedAt: 2025-11-12T00:56:21.000Z
agentTools:
  projectIndex: https://public.docs.kivera.io/llms.txt
---

# ACM

<Embed url="https://docs.aws.amazon.com/" title="AWS documentation" provider="docs.aws.amazon.com" href="https://docs.aws.amazon.com/" />

# AddTagsToCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.Body.Tags[_].Key == STRING
    input.Body.Tags[_].Value == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DescribeCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ExportCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.Body.Passphrase == BLOB
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetAccountConfiguration

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.Body.Passphrase == BLOB
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ImportCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.Body.Certificate == BLOB
    input.Body.PrivateKey == BLOB
    input.Body.CertificateChain == BLOB
    input.Body.Tags[_].Key == STRING
    input.Body.Tags[_].Value == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListCertificates

```erlang
enum_CertificateExport := [ "ENABLED", "DISABLED" ]
enum_CertificateManagedBy := [ "CLOUDFRONT" ]
enum_CertificateStatus := [ "PENDING_VALIDATION", "ISSUED", "INACTIVE", "EXPIRED", "VALIDATION_TIMED_OUT", "REVOKED", "FAILED" ]
enum_ExtendedKeyUsageName := [ "TLS_WEB_SERVER_AUTHENTICATION", "TLS_WEB_CLIENT_AUTHENTICATION", "CODE_SIGNING", "EMAIL_PROTECTION", "TIME_STAMPING", "OCSP_SIGNING", "IPSEC_END_SYSTEM", "IPSEC_TUNNEL", "IPSEC_USER", "ANY", "NONE", "CUSTOM" ]
enum_KeyAlgorithm := [ "RSA_1024", "RSA_2048", "RSA_3072", "RSA_4096", "EC_prime256v1", "EC_secp384r1", "EC_secp521r1" ]
enum_KeyUsageName := [ "DIGITAL_SIGNATURE", "NON_REPUDIATION", "KEY_ENCIPHERMENT", "DATA_ENCIPHERMENT", "KEY_AGREEMENT", "CERTIFICATE_SIGNING", "CRL_SIGNING", "ENCIPHER_ONLY", "DECIPHER_ONLY", "ANY", "CUSTOM" ]
enum_SortBy := [ "CREATED_AT" ]
enum_SortOrder := [ "ASCENDING", "DESCENDING" ]

valid {
    input.Body.CertificateStatuses[_] == enum_CertificateStatus[_]
    input.Body.Includes.extendedKeyUsage[_] == enum_ExtendedKeyUsageName[_]
    input.Body.Includes.keyUsage[_] == enum_KeyUsageName[_]
    input.Body.Includes.keyTypes[_] == enum_KeyAlgorithm[_]
    input.Body.Includes.exportOption == enum_CertificateExport[_]
    input.Body.Includes.managedBy == enum_CertificateManagedBy[_]
    input.Body.NextToken == STRING
    input.Body.MaxItems == INTEGER
    input.Body.SortBy == enum_SortBy[_]
    input.Body.SortOrder == enum_SortOrder[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListTagsForCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# PutAccountConfiguration

```erlang
valid {
    input.Body.ExpiryEvents.DaysBeforeExpiry == INTEGER
    input.Body.IdempotencyToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# RemoveTagsFromCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.Body.Tags[_].Key == STRING
    input.Body.Tags[_].Value == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# RenewCertificate

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# RequestCertificate

```erlang
enum_CertificateExport := [ "ENABLED", "DISABLED" ]
enum_CertificateManagedBy := [ "CLOUDFRONT" ]
enum_CertificateTransparencyLoggingPreference := [ "ENABLED", "DISABLED" ]
enum_KeyAlgorithm := [ "RSA_1024", "RSA_2048", "RSA_3072", "RSA_4096", "EC_prime256v1", "EC_secp384r1", "EC_secp521r1" ]
enum_ValidationMethod := [ "EMAIL", "DNS", "HTTP" ]

valid {
    input.Body.DomainName == STRING
    input.Body.ValidationMethod == enum_ValidationMethod[_]
    input.Body.SubjectAlternativeNames[_] == STRING
    input.Body.IdempotencyToken == STRING
    input.Body.DomainValidationOptions[_].DomainName == STRING
    input.Body.DomainValidationOptions[_].ValidationDomain == STRING
    input.Body.Options.CertificateTransparencyLoggingPreference == enum_CertificateTransparencyLoggingPreference[_]
    input.Body.Options.Export == enum_CertificateExport[_]
    input.Body.CertificateAuthorityArn == STRING
    input.Body.Tags[_].Key == STRING
    input.Body.Tags[_].Value == STRING
    input.Body.KeyAlgorithm == enum_KeyAlgorithm[_]
    input.Body.ManagedBy == enum_CertificateManagedBy[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ResendValidationEmail

```erlang
valid {
    input.Body.CertificateArn == STRING
    input.Body.Domain == STRING
    input.Body.ValidationDomain == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# RevokeCertificate

```erlang
enum_RevocationReason := [ "UNSPECIFIED", "KEY_COMPROMISE", "CA_COMPROMISE", "AFFILIATION_CHANGED", "SUPERCEDED", "SUPERSEDED", "CESSATION_OF_OPERATION", "CERTIFICATE_HOLD", "REMOVE_FROM_CRL", "PRIVILEGE_WITHDRAWN", "A_A_COMPROMISE" ]

valid {
    input.Body.CertificateArn == STRING
    input.Body.RevocationReason == enum_RevocationReason[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateCertificateOptions

```erlang
enum_CertificateExport := [ "ENABLED", "DISABLED" ]
enum_CertificateTransparencyLoggingPreference := [ "ENABLED", "DISABLED" ]

valid {
    input.Body.CertificateArn == STRING
    input.Body.Options.CertificateTransparencyLoggingPreference == enum_CertificateTransparencyLoggingPreference[_]
    input.Body.Options.Export == enum_CertificateExport[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```