akeyless 5.0.39 → 5.0.40

data/docs/ScimStatus.md

@@ -0,0 +1,42 @@
+# Akeyless::ScimStatus
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **active_identities** | **Integer** |  | [optional] |
+| **base_url** | **String** |  | [optional] |
+| **bearer_access_id** | **String** |  | [optional] |
+| **connected** | **Boolean** |  | [optional] |
+| **degraded** | **Boolean** | Degraded is true when live-token revocation is not active, so deactivation only denies new logins. | [optional] |
+| **enabled** | **Boolean** |  | [optional] |
+| **endpoint** | **String** |  | [optional] |
+| **gateway_url** | **String** |  | [optional] |
+| **groups** | **Integer** |  | [optional] |
+| **inactive_identities** | **Integer** |  | [optional] |
+| **last_write_action** | **String** |  | [optional] |
+| **last_write_status** | **String** |  | [optional] |
+| **last_write_ts** | **Time** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::ScimStatus.new(
+  active_identities: null,
+  base_url: null,
+  bearer_access_id: null,
+  connected: null,
+  degraded: null,
+  enabled: null,
+  endpoint: null,
+  gateway_url: null,
+  groups: null,
+  inactive_identities: null,
+  last_write_action: null,
+  last_write_status: null,
+  last_write_ts: null
+)
+```
+

data/docs/TargetCreateAliCloud.md

@@ -0,0 +1,52 @@
+# Akeyless::TargetCreateAliCloud
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **access_key** | **String** | AliCloud RAM access key secret | [optional] |
+| **access_key_id** | **String** | AliCloud RAM access key ID | [optional] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object | [optional] |
+| **generate_external_id** | **Boolean** | A unique auto-generated value used in your AliCloud account when configuring the RAM role trust policy to securely delegate access to Akeyless. Relevant only when using GW cloud ID | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **key** | **String** | The name of a key that used to encrypt the target secret value (if empty, the account default protectionKey key will be used) | [optional] |
+| **lock_on_read** | **String** | Lock this secret after each successful value read | [optional] |
+| **lock_ttl** | **String** | Lock TTL in minutes | [optional] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **name** | **String** | Target name |  |
+| **region** | **String** | AliCloud region. Selects the regional STS endpoint. If empty, the global STS endpoint is used | [optional] |
+| **role_arn** | **String** | AliCloud RAM role ARN that the Gateway will assume in your AliCloud account (acs:ram::<account-id>:role/<role-name>), relevant only when using external ID | [optional] |
+| **rotate_on_unlock** | **String** | Rotate this secret after it is unlocked | [optional] |
+| **session_token** | **String** | Required only for temporary security credentials retrieved using STS | [optional] |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **use_gw_cloud_identity** | **Boolean** | Use the Gateway cloud identity | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::TargetCreateAliCloud.new(
+  access_key: null,
+  access_key_id: null,
+  delete_protection: null,
+  description: null,
+  generate_external_id: null,
+  json: null,
+  key: null,
+  lock_on_read: null,
+  lock_ttl: null,
+  max_versions: null,
+  name: null,
+  region: null,
+  role_arn: null,
+  rotate_on_unlock: null,
+  session_token: null,
+  token: null,
+  uid_token: null,
+  use_gw_cloud_identity: null
+)
+```
+

data/docs/TargetList.md

@@ -8,7 +8,7 @@
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **pagination_token** | **String** | Next page reference | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
-| **type** | **Array<String>** | The target types list . In case it is empty, all types of targets will be returned. options: [hanadb cassandra aws ssh gke eks mysql mongodb snowflake mssql redshift artifactory azure rabbitmq k8s venafi gcp oracle dockerhub cloudflare ldap github chef web salesforce postgres] | [optional] |
+| **type** | **Array<String>** | The target types list . In case it is empty, all types of targets will be returned. options: [hanadb cassandra aws alicloud ssh gke eks mysql mongodb snowflake mssql redshift artifactory azure rabbitmq k8s venafi gcp oracle dockerhub cloudflare ldap github chef web salesforce postgres] | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
 
 ## Example

data/docs/TargetTypeDetailsInput.md

@@ -5,6 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **aerospike_target_details** | [**AerospikeTargetDetails**](AerospikeTargetDetails.md) |  | [optional] |
+| **alicloud_target_details** | [**AliCloudTargetDetails**](AliCloudTargetDetails.md) |  | [optional] |
 | **anthropic_target_details** | [**AnthropicTargetDetails**](AnthropicTargetDetails.md) |  | [optional] |
 | **artifactory_target_details** | [**ArtifactoryTargetDetails**](ArtifactoryTargetDetails.md) |  | [optional] |
 | **aws_target_details** | [**AWSTargetDetails**](AWSTargetDetails.md) |  | [optional] |
@@ -56,6 +57,7 @@ require 'akeyless'
 
 instance = Akeyless::TargetTypeDetailsInput.new(
   aerospike_target_details: null,
+  alicloud_target_details: null,
   anthropic_target_details: null,
   artifactory_target_details: null,
   aws_target_details: null,

data/docs/TargetUpdateAliCloud.md

@@ -0,0 +1,56 @@
+# Akeyless::TargetUpdateAliCloud
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **access_key** | **String** | AliCloud RAM access key secret | [optional] |
+| **access_key_id** | **String** | AliCloud RAM access key ID | [optional] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object | [optional] |
+| **generate_external_id** | **Boolean** | A unique auto-generated value used in your AliCloud account when configuring the RAM role trust policy to securely delegate access to Akeyless. Relevant only when using GW cloud ID | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **keep_prev_version** | **String** | Whether to keep previous version [true/false]. If not set, use default according to account settings | [optional] |
+| **key** | **String** | The name of a key that used to encrypt the target secret value (if empty, the account default protectionKey key will be used) | [optional] |
+| **lock_on_read** | **String** | Lock this secret after each successful value read | [optional] |
+| **lock_ttl** | **String** | Lock TTL in minutes | [optional] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **name** | **String** | Target name |  |
+| **new_name** | **String** | New target name | [optional] |
+| **region** | **String** | AliCloud region. Selects the regional STS endpoint. If empty, the global STS endpoint is used | [optional] |
+| **role_arn** | **String** | AliCloud RAM role ARN that the Gateway will assume in your AliCloud account (acs:ram::<account-id>:role/<role-name>), relevant only when using external ID | [optional] |
+| **rotate_on_unlock** | **String** | Rotate this secret after it is unlocked | [optional] |
+| **session_token** | **String** | Required only for temporary security credentials retrieved using STS | [optional] |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **use_gw_cloud_identity** | **Boolean** | Use the Gateway cloud identity | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::TargetUpdateAliCloud.new(
+  access_key: null,
+  access_key_id: null,
+  delete_protection: null,
+  description: null,
+  generate_external_id: null,
+  json: null,
+  keep_prev_version: null,
+  key: null,
+  lock_on_read: null,
+  lock_ttl: null,
+  max_versions: null,
+  name: null,
+  new_name: null,
+  region: null,
+  role_arn: null,
+  rotate_on_unlock: null,
+  session_token: null,
+  token: null,
+  uid_token: null,
+  use_gw_cloud_identity: null
+)
+```
+

data/docs/UpdateItem.md

@@ -34,7 +34,8 @@
 | **rotate_on_unlock** | **String** | Rotate this secret after it is unlocked | [optional] |
 | **secure_access_add_host** | **Array<String>** | List of the new hosts that will be attached to SRA servers host | [optional] |
 | **secure_access_allow_external_user** | **String** | Allow providing external user for a domain users [true/false] | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access (relevant only for EKS/GKE/K8s Dynamic-Secret) | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access (relevant only for EKS/GKE/K8s Dynamic-Secret) | [optional] |
 | **secure_access_api** | **String** | Bastion's SSH control API endpoint. E.g. https://my.sra-server:9900 (relevant only for ssh cert issuer) | [optional] |
 | **secure_access_aws_account_id** | **String** | The AWS account id (relevant only for aws) | [optional] |
 | **secure_access_aws_native_cli** | **Boolean** | The AWS native cli (relevant only for aws) | [optional] |
@@ -106,6 +107,7 @@ instance = Akeyless::UpdateItem.new(
   secure_access_add_host: null,
   secure_access_allow_external_user: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_api: null,
   secure_access_aws_account_id: null,
   secure_access_aws_native_cli: null,

data/docs/UpdateRotatedSecret.md

@@ -36,7 +36,8 @@
 | **rotator_custom_cmd** | **String** | \"Custom rotation command (relevant only for ssh target) | [optional] |
 | **same_password** | **String** | Rotate same password for each host from the Linked Target (relevant only for Linked Target) | [optional] |
 | **secure_access_allow_external_user** | **String** | Allow providing external user for a domain users [true/false] | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access (relevant only for EKS/GKE/K8s Dynamic-Secret) | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access (relevant only for EKS/GKE/K8s Dynamic-Secret) | [optional] |
 | **secure_access_aws_account_id** | **String** | The AWS account id (relevant only for aws) | [optional] |
 | **secure_access_aws_native_cli** | **Boolean** | The AWS native cli (relevant only for aws) | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
@@ -103,6 +104,7 @@ instance = Akeyless::UpdateRotatedSecret.new(
   same_password: null,
   secure_access_allow_external_user: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_aws_account_id: null,
   secure_access_aws_native_cli: null,
   secure_access_bastion_issuer: null,

data/docs/UscCreate.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **aws_account_id** | **String** | The AWS account ID to create the secret in. Required when the connector spans multiple account IDs. | [optional] |
 | **binary_value** | **Boolean** | Use this option if the universal secrets value is a base64 encoded binary | [optional] |
 | **description** | **String** | Description of the universal secrets | [optional] |
 | **gcp_project_id** | **String** | The GCP project to create the secret in (GCP only). Required when the connector spans multiple projects or uses folder/organization scope. | [optional] |
@@ -11,7 +12,7 @@
 | **namespace** | **String** | The namespace (relevant for Hashi vault target) | [optional] |
 | **object_type** | **String** |  | [optional] |
 | **pfx_password** | **String** | Optional, the passphrase that protects the private key within the pfx certificate (Relevant only for Azure KV certificates) | [optional] |
-| **region** | **String** | Optional, create secret in a specific region (GCP only). If empty, a global secret will be created (provider default). | [optional] |
+| **region** | **String** | AWS Organization scope region or GCP regional secret location. GCP creates a global secret when empty. | [optional] |
 | **remote_secret_activation_date** | **String** | Activation date for the secret on the remote endpoint, in UTC format: YYYY-MM-DDTHH:MM:SSZ | [optional] |
 | **remote_secret_expires** | **String** | Expiration time for the secret on the remote endpoint, in UTC format: YYYY-MM-DDTHH:MM:SSZ | [optional] |
 | **secret_name** | **String** | Name for the new universal secrets |  |
@@ -29,6 +30,7 @@
 require 'akeyless'
 
 instance = Akeyless::UscCreate.new(
+  aws_account_id: null,
   binary_value: null,
   description: null,
   gcp_project_id: null,

data/docs/UscDelete.md

@@ -4,10 +4,12 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **aws_account_id** | **String** | The AWS account ID that contains the secret. Required when the connector spans multiple account IDs. | [optional] |
 | **force_delete** | **Boolean** | Force delete objects that are soft deleted by default (relavent only for Azure target) | [optional] |
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **namespace** | **String** | The namespace (relevant for Hashi vault target) | [optional] |
 | **object_type** | **String** |  | [optional] |
+| **region** | **String** | The AWS region that contains the secret (AWS only). If empty, uses the target region. | [optional] |
 | **secret_id** | **String** | The universal secrets id (or name, for AWS, Azure, K8s or Hashi vault targets) to delete |  |
 | **selected_repositories** | **String** | GitHub selected repositories. For repository scope: repo name. For repository-environment scope: repo/env (format: repo-name/env-name). Required when multiple repos/envs configured. | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
@@ -20,10 +22,12 @@
 require 'akeyless'
 
 instance = Akeyless::UscDelete.new(
+  aws_account_id: null,
   force_delete: null,
   json: null,
   namespace: null,
   object_type: null,
+  region: null,
   secret_id: null,
   selected_repositories: null,
   token: null,

data/docs/UscGet.md

@@ -4,10 +4,12 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **aws_account_id** | **String** | The AWS account ID that contains the secret. Required when the connector spans multiple account IDs. | [optional] |
 | **gcp_project_id** | **String** | The GCP project the secret resides in (GCP only). Used when getting a secret by name in a connector that spans multiple projects or uses folder/organization scope. | [optional] |
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **namespace** | **String** | The namespace (relevant for Hashi vault target) | [optional] |
 | **object_type** | **String** |  | [optional] |
+| **region** | **String** | The AWS region that contains the secret (AWS only). If empty, uses the target region. | [optional] |
 | **secret_id** | **String** | The secret id (or name, for AWS, Azure, K8s or Hashi vault targets) to get from the Universal Secrets Connector |  |
 | **selected_repositories** | **String** | GitHub selected repositories. For repository scope: repo name. For repository-environment scope: repo/env (format: repo-name/env-name). Required when multiple repos/envs configured. | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
@@ -21,10 +23,12 @@
 require 'akeyless'
 
 instance = Akeyless::UscGet.new(
+  aws_account_id: null,
   gcp_project_id: null,
   json: null,
   namespace: null,
   object_type: null,
+  region: null,
   secret_id: null,
   selected_repositories: null,
   token: null,

data/docs/UscList.md

@@ -4,11 +4,13 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **aws_account_id** | **String** | The AWS account ID to list secrets from. Required when the connector spans multiple account IDs. | [optional] |
 | **gcp_project_id** | **String** | The GCP project to list secrets from (GCP only). Required when the connector spans multiple projects or uses folder/organization scope. | [optional] |
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **object_type** | **String** |  | [optional] |
 | **page_size** | **Integer** | Optional: number of items requested per response. When set, response may include next_token | [optional] |
 | **page_token** | **String** | Optional: continuation token returned by a previous usc list --page-size call | [optional] |
+| **region** | **String** | The AWS region to list secrets from (AWS only). If empty, the target's region is used. | [optional] |
 | **search** | **String** | Search query used to match secret names and paths. | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
@@ -20,11 +22,13 @@
 require 'akeyless'
 
 instance = Akeyless::UscList.new(
+  aws_account_id: null,
   gcp_project_id: null,
   json: null,
   object_type: null,
   page_size: null,
   page_token: null,
+  region: null,
   search: null,
   token: null,
   uid_token: null,

data/docs/UscUpdate.md

@@ -4,12 +4,14 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **aws_account_id** | **String** | The AWS account ID that contains the secret. Required when the connector spans multiple account IDs. | [optional] |
 | **binary_value** | **Boolean** | Use this option if the universal secrets value is a base64 encoded binary | [optional] |
 | **description** | **String** | Description of the universal secrets | [optional] |
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **namespace** | **String** | The namespace (relevant for Hashi vault target) | [optional] |
 | **object_type** | **String** |  | [optional] |
 | **pfx_password** | **String** | Optional, the passphrase that protects the private key within the pfx certificate (Relevant only for Azure KV certificates) | [optional] |
+| **region** | **String** | The AWS region that contains the secret (AWS only). If empty, uses the target region. | [optional] |
 | **remote_secret_activation_date** | **String** | Activation date for the secret on the remote endpoint, in UTC format: YYYY-MM-DDTHH:MM:SSZ | [optional] |
 | **remote_secret_expires** | **String** | Expiration time for the secret on the remote endpoint, in UTC format: YYYY-MM-DDTHH:MM:SSZ | [optional] |
 | **secret_id** | **String** | The universal secrets id (or name, for AWS, Azure, K8s or Hashi vault targets) to update |  |
@@ -27,12 +29,14 @@
 require 'akeyless'
 
 instance = Akeyless::UscUpdate.new(
+  aws_account_id: null,
   binary_value: null,
   description: null,
   json: null,
   namespace: null,
   object_type: null,
   pfx_password: null,
+  region: null,
   remote_secret_activation_date: null,
   remote_secret_expires: null,
   secret_id: null,