Amazon Certificate Manager Certificate Manager Acme Domain Validation API
The Certificate Manager Acme Domain Validation API from Amazon Certificate Manager — 5 operation(s) for certificate manager acme domain validation.
The Certificate Manager Acme Domain Validation API from Amazon Certificate Manager — 5 operation(s) for certificate manager acme domain validation.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/amazon-certificate-manager:amazon-certificate-manager-acme-domain-validation-api"
curl "https://apis.io/api/v1/apis?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: AWS Certificate Manager Acme Domain Validation API
version: '2015-12-08'
description: Generated from AWS's published Smithy model for AWS Certificate Manager. 5 operation(s).
contact:
name: Amazon Web Services
url: https://aws.amazon.com/contact-us/
license:
name: Apache 2.0
identifier: Apache-2.0
url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://acm.{region}.amazonaws.com
variables:
region:
default: us-east-1
security:
- sigv4: []
tags:
- name: Acme Domain Validation
paths:
/#CreateAcmeDomainValidation:
post:
operationId: CreateAcmeDomainValidation
summary: Create Acme Domain Validation
description: Creates a domain validation for an ACME endpoint. Domain validations authorize the endpoint to issue certificates for specified domain names. You configure prevalidation to prove domain ownership.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/CreateAcmeDomainValidationResponse'
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'400':
description: ConflictException; ResourceNotFoundException; ServiceQuotaExceededException; ThrottlingException; ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ConflictException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- CertificateManager.CreateAcmeDomainValidation
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/CreateAcmeDomainValidationRequest'
tags:
- Acme Domain Validation
/#DeleteAcmeDomainValidation:
post:
operationId: DeleteAcmeDomainValidation
summary: Delete Acme Domain Validation
description: Deletes a domain validation. After deletion, the ACME endpoint can no longer issue certificates for the associated domain.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
type: string
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'400':
description: ConflictException; ThrottlingException; ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ConflictException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- CertificateManager.DeleteAcmeDomainValidation
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/DeleteAcmeDomainValidationRequest'
tags:
- Acme Domain Validation
/#DescribeAcmeDomainValidation:
post:
operationId: DescribeAcmeDomainValidation
summary: Describe Acme Domain Validation
description: Returns detailed metadata about the specified domain validation, including its status, domain scope, and DNS resource records required for validation.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/DescribeAcmeDomainValidationResponse'
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
'400':
description: ResourceNotFoundException; ThrottlingException; ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- CertificateManager.DescribeAcmeDomainValidation
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/DescribeAcmeDomainValidationRequest'
tags:
- Acme Domain Validation
/#ListAcmeDomainValidations:
post:
operationId: ListAcmeDomainValidations
summary: List Acme Domain Validations
description: Retrieves a list of domain validations for the specified ACME endpoint.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ListAcmeDomainValidationsResponse'
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
'400':
description: ResourceNotFoundException; ThrottlingException; ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- CertificateManager.ListAcmeDomainValidations
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ListAcmeDomainValidationsRequest'
tags:
- Acme Domain Validation
/#UpdateAcmeDomainValidation:
post:
operationId: UpdateAcmeDomainValidation
summary: Update Acme Domain Validation
description: Updates the prevalidation configuration of an existing domain validation.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
type: string
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'400':
description: ConflictException; ResourceNotFoundException; ThrottlingException; ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ConflictException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- CertificateManager.UpdateAcmeDomainValidation
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/UpdateAcmeDomainValidationRequest'
tags:
- Acme Domain Validation
components:
schemas:
Tag:
type: object
properties:
Key:
type: string
description: The key of the tag.
Value:
type: string
description: The value of the tag.
required:
- Key
FailureDetails:
type: object
properties:
Reason:
type: string
enum:
- ACCESS_DENIED
- DOMAIN_MISMATCH
- DOMAIN_NOT_ALLOWED
- ENDPOINT_NOT_ACTIVE
- HOSTED_ZONE_NOT_FOUND
- INTERNAL_FAILURE
- INVALID_CHANGE_BATCH
- INVALID_PUBLIC_DOMAIN
- TIMED_OUT
description: The reason for the failure.
Message:
type: string
description: A message describing the failure.
DnsPrevalidationOptions:
type: object
properties:
DomainScope:
$ref: '#/components/schemas/DomainScope'
HostedZoneId:
type: string
description: The Route 53 hosted zone ID for DNS validation.
UpdateAcmeDomainValidationRequest:
type: object
properties:
AcmeDomainValidationArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME domain validation to update.
PrevalidationOptions:
$ref: '#/components/schemas/PrevalidationOptions'
required:
- AcmeDomainValidationArn
DescribeAcmeDomainValidationRequest:
type: object
properties:
AcmeDomainValidationArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME domain validation.
required:
- AcmeDomainValidationArn
AcmeDomainValidationSummary:
type: object
properties:
AcmeDomainValidationArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME domain validation.
AcmeEndpointArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME endpoint.
DomainName:
type: string
description: The domain name being validated.
PrevalidationType:
type: string
enum:
- DNS_PREVALIDATION
description: The type of prevalidation used.
PrevalidationDetails:
$ref: '#/components/schemas/PrevalidationDetails'
Status:
type: string
enum:
- VALIDATING
- VALID
- INVALID
- DELETING
description: The status of the domain validation.
FailureDetails:
$ref: '#/components/schemas/FailureDetails'
CreatedAt:
type: string
description: The time at which the domain validation was created.
UpdatedAt:
type: string
description: The time at which the domain validation was last updated.
ResourceNotFoundException:
type: object
properties:
message:
type: string
PrevalidationOptions:
type: object
properties:
DnsPrevalidation:
$ref: '#/components/schemas/DnsPrevalidationOptions'
description: Exactly one member is set.
DomainScope:
type: object
properties:
ExactDomain:
type: string
enum:
- ENABLED
- DISABLED
description: Whether validation applies to the exact domain.
Subdomains:
type: string
enum:
- ENABLED
- DISABLED
description: Whether validation applies to subdomains.
Wildcards:
type: string
enum:
- ENABLED
- DISABLED
description: Whether validation applies to wildcard domains.
DescribeAcmeDomainValidationResponse:
type: object
properties:
AcmeDomainValidation:
$ref: '#/components/schemas/AcmeDomainValidation'
CreateAcmeDomainValidationRequest:
type: object
properties:
IdempotencyToken:
type: string
description: A unique, case-sensitive identifier to ensure idempotency of the request.
AcmeEndpointArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME endpoint.
DomainName:
type: string
description: The domain name to validate.
PrevalidationOptions:
$ref: '#/components/schemas/PrevalidationOptions'
Tags:
type: array
items:
$ref: '#/components/schemas/Tag'
description: One or more tags to associate with the domain validation.
required:
- AcmeEndpointArn
- DomainName
- PrevalidationOptions
PrevalidationDetails:
type: object
properties:
DnsPrevalidation:
$ref: '#/components/schemas/DnsPrevalidationDetails'
description: Exactly one member is set.
CreateAcmeDomainValidationResponse:
type: object
properties:
AcmeDomainValidationArn:
type: string
description: The Amazon Resource Name (ARN) of the created domain validation.
required:
- AcmeDomainValidationArn
ConflictException:
type: object
properties:
message:
type: string
DeleteAcmeDomainValidationRequest:
type: object
properties:
AcmeDomainValidationArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME domain validation to delete.
required:
- AcmeDomainValidationArn
ListAcmeDomainValidationsResponse:
type: object
properties:
AcmeDomainValidations:
type: array
items:
$ref: '#/components/schemas/AcmeDomainValidationSummary'
description: The list of domain validations.
NextToken:
type: string
description: A token for pagination.
ListAcmeDomainValidationsRequest:
type: object
properties:
NextToken:
type: string
description: A token for pagination.
MaxResults:
type: integer
description: The maximum number of results to return.
AcmeEndpointArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME endpoint.
required:
- AcmeEndpointArn
AcmeDomainValidation:
type: object
properties:
AcmeDomainValidationArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME domain validation.
AcmeEndpointArn:
type: string
description: The Amazon Resource Name (ARN) of the ACME endpoint.
DomainName:
type: string
description: The domain name being validated.
PrevalidationType:
type: string
enum:
- DNS_PREVALIDATION
description: The type of prevalidation used.
PrevalidationDetails:
$ref: '#/components/schemas/PrevalidationDetails'
Status:
type: string
enum:
- VALIDATING
- VALID
- INVALID
- DELETING
description: The status of the domain validation.
FailureDetails:
$ref: '#/components/schemas/FailureDetails'
CreatedAt:
type: string
description: The time at which the domain validation was created.
UpdatedAt:
type: string
description: The time at which the domain validation was last updated.
InternalServerException:
type: object
properties:
message:
type: string
DnsPrevalidationDetails:
type: object
properties:
DomainScope:
$ref: '#/components/schemas/DomainScope'
HostedZoneId:
type: string
description: The Route 53 hosted zone ID for DNS validation.
ResourceRecord:
$ref: '#/components/schemas/ResourceRecord'
ResourceRecord:
type: object
properties:
Name:
type: string
description: The name of the DNS record to create in your domain. This is supplied by ACM.
Type:
type: string
enum:
- CNAME
description: The type of DNS record. Currently this can be CNAME.
Value:
type: string
description: The value of the CNAME record to add to your DNS database. This is supplied by ACM.
required:
- Name
- Type
- Value
AccessDeniedException:
type: object
properties:
Message:
type: string
securitySchemes:
sigv4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
x-aws-sigv4:
signingName: acm
x-provenance:
method: harvested
publisher: Amazon Web Services
source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/acm/service/2015-12-08/acm-2015-12-08.json
note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)