code: @Override
      public TagCertificateAuthorityResult tagCertificateAuthority(TagCertificateAuthorityRequest request) {
          request = beforeClientExecution(request);
          return executeTagCertificateAuthority(request);
      }
docs: <p>
  Adds one or more tags to your private CA. Tags are labels that you can use to identify and organize your AWS
  resources. Each tag consists of a key and an optional value. You specify the private CA on input by its Amazon
  Resource Name (ARN). You specify the tag by using a key-value pair. You can apply a tag to just one private CA if
  you want to identify a specific characteristic of that CA, or you can apply the same tag to multiple private CAs
  if you want to filter for a common relationship among those CAs. To remove one or more tags, use the
  <a>UntagCertificateAuthority</a> operation. Call the <a>ListTags</a> operation to see what tags are associated
  with your CA.
  </p>
  
  @param tagCertificateAuthorityRequest
  @return Result of the TagCertificateAuthority operation returned by the service.
  @throws ResourceNotFoundException
  A resource such as a private CA, S3 bucket, certificate, or audit report cannot be found.
  @throws InvalidArnException
  The requested Amazon Resource Name (ARN) does not refer to an existing resource.
  @throws InvalidStateException
  The private CA is in a state during which a report or certificate cannot be generated.
  @throws InvalidTagException
  The tag associated with the CA is not valid. The invalid argument is contained in the message field.
  @throws TooManyTagsException
  You can associate up to 50 tags with a private CA. Exception information is contained in the exception
  message field.
  @sample AWSACMPCA.TagCertificateAuthority
  @see <a href="http://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/TagCertificateAuthority"
  target="_top">AWS API Documentation</a>