aws-sdk-secretsmanager 1.64.0 → 1.66.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a081e16da4489126c551e2f8b647342e8a42cada9e289f64ee9a9e88eae9032a
-  data.tar.gz: b461a4efae7078ad18f7f8cd30496f4cf449abc51957580ed0fa8343a940fa78
+  metadata.gz: be8a3646b585f20357ca5d121853825dacce1a927eccf8ebdf58100b5c016842
+  data.tar.gz: 5df2cb07d6789b0894c5fffed9126f6aa0fa7c5208439c0216c001d61f0382ce
 SHA512:
-  metadata.gz: 51364fb8c866fc4bedf75aec4cae8632b50b19a860ebda15c303aa9e7ad7cd885d6c189bc96d862869e9fe7f4fe59129b931b42461e04cf2599f37615120e994
-  data.tar.gz: 0bc6ca321ef12243b7d90fab0533f8d9f2c397a1c5a5ebed839436afccd21da066b27772a6861a73664e2b9a6d01b07df949f472659c63a43a7e230cee853eee
+  metadata.gz: e2beaeabaa877247d38ee3a11b5dc1cfebc4484da9ffd2f23867a83070d049c10910baec7ea1162d7fe7ac817c8d5e6208083015b2ed8c3a7e3f8d9ad269332f
+  data.tar.gz: 4ac3f03d379ecfe591c9edc4685f95862de4e44b49f8c315f85c9e20c07c28e76046c5ceeb48eb5b56b332202205db06dbf6afca5d2219e9fa6b969be8c58235

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.66.0 (2022-09-29)
+------------------
+
+* Feature - Documentation updates for Secrets Manager
+
+1.65.0 (2022-08-17)
+------------------
+
+* Feature - Documentation updates for Secrets Manager.
+
 1.64.0 (2022-06-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.64.0
+1.66.0

data/lib/aws-sdk-secretsmanager/client.rb

@@ -376,15 +376,21 @@ module Aws::SecretsManager
     #
     # To turn on automatic rotation again, call RotateSecret.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][2].
+    #
     # <b>Required permissions: </b> `secretsmanager:CancelRotateSecret`. For
-    # more information, see [ IAM policy actions for Secrets Manager][2] and
-    # [Authentication and access control in Secrets Manager][3].
+    # more information, see [ IAM policy actions for Secrets Manager][3] and
+    # [Authentication and access control in Secrets Manager][4].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret.
@@ -475,11 +481,17 @@ module Aws::SecretsManager
     # to encrypt the secret, and you must create and use a customer managed
     # KMS key.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # except `SecretBinary` or `SecretString` because it might be logged.
+    # For more information, see [Logging Secrets Manager events with
+    # CloudTrail][3].
+    #
     # <b>Required permissions: </b> `secretsmanager:CreateSecret`. If you
     # include tags in the secret, you also need
     # `secretsmanager:TagResource`. For more information, see [ IAM policy
-    # actions for Secrets Manager][3] and [Authentication and access control
-    # in Secrets Manager][4].
+    # actions for Secrets Manager][4] and [Authentication and access control
+    # in Secrets Manager][5].
     #
     # To encrypt the secret with a KMS key other than `aws/secretsmanager`,
     # you need `kms:GenerateDataKey` and `kms:Decrypt` permission to the
@@ -489,8 +501,9 @@ module Aws::SecretsManager
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_create-basic-secret.html
     # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_secret_json_structure.html
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [5]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :name
     #   The name of the new secret.
@@ -553,7 +566,9 @@ module Aws::SecretsManager
     #
     # @option params [String] :kms_key_id
     #   The ARN, key ID, or alias of the KMS key that Secrets Manager uses to
-    #   encrypt the secret value in the secret.
+    #   encrypt the secret value in the secret. An alias is always prefixed by
+    #   `alias/`, for example `alias/aws/secretsmanager`. For more
+    #   information, see [About aliases][1].
     #
     #   To use a KMS key in a different account, use the key ARN or the alias
     #   ARN.
@@ -568,6 +583,10 @@ module Aws::SecretsManager
     #   to encrypt the secret, and you must create and use a customer managed
     #   KMS key.
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html
+    #
     # @option params [String, StringIO, File] :secret_binary
     #   The binary data to encrypt and store in the new version of the secret.
     #   We recommend that you store your binary data in a file and then pass
@@ -724,14 +743,20 @@ module Aws::SecretsManager
     # Deletes the resource-based permission policy attached to the secret.
     # To attach a policy to a secret, use PutResourcePolicy.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][1].
+    #
     # <b>Required permissions: </b> `secretsmanager:DeleteResourcePolicy`.
-    # For more information, see [ IAM policy actions for Secrets Manager][1]
-    # and [Authentication and access control in Secrets Manager][2].
+    # For more information, see [ IAM policy actions for Secrets Manager][2]
+    # and [Authentication and access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to delete the attached resource-based
@@ -818,15 +843,21 @@ module Aws::SecretsManager
     # secret value. You must first cancel the deletion with RestoreSecret
     # and then you can retrieve the secret.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][2].
+    #
     # <b>Required permissions: </b> `secretsmanager:DeleteSecret`. For more
-    # information, see [ IAM policy actions for Secrets Manager][2] and
-    # [Authentication and access control in Secrets Manager][3].
+    # information, see [ IAM policy actions for Secrets Manager][3] and
+    # [Authentication and access control in Secrets Manager][4].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/monitoring_cloudwatch_deleted-secrets.html
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to delete.
@@ -915,14 +946,20 @@ module Aws::SecretsManager
     # secret value. Secrets Manager only returns fields that have a value in
     # the response.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][1].
+    #
     # <b>Required permissions: </b> `secretsmanager:DescribeSecret`. For
-    # more information, see [ IAM policy actions for Secrets Manager][1] and
-    # [Authentication and access control in Secrets Manager][2].
+    # more information, see [ IAM policy actions for Secrets Manager][2] and
+    # [Authentication and access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret.
@@ -1049,14 +1086,20 @@ module Aws::SecretsManager
     # length and include every character type that the system you are
     # generating a password for can support.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][1].
+    #
     # <b>Required permissions: </b> `secretsmanager:GetRandomPassword`. For
-    # more information, see [ IAM policy actions for Secrets Manager][1] and
-    # [Authentication and access control in Secrets Manager][2].
+    # more information, see [ IAM policy actions for Secrets Manager][2] and
+    # [Authentication and access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [Integer] :password_length
     #   The length of the password. If you don't include this parameter, the
@@ -1146,15 +1189,21 @@ module Aws::SecretsManager
     # attached to a secret, see [Permissions policies attached to a
     # secret][1].
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][2].
+    #
     # <b>Required permissions: </b> `secretsmanager:GetResourcePolicy`. For
-    # more information, see [ IAM policy actions for Secrets Manager][2] and
-    # [Authentication and access control in Secrets Manager][3].
+    # more information, see [ IAM policy actions for Secrets Manager][3] and
+    # [Authentication and access control in Secrets Manager][4].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_resource-policies.html
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to retrieve the attached resource-based
@@ -1218,18 +1267,29 @@ module Aws::SecretsManager
     # caching. Caching secrets improves speed and reduces your costs. For
     # more information, see [Cache secrets for your applications][1].
     #
+    # To retrieve the previous version of a secret, use `VersionStage` and
+    # specify AWSPREVIOUS. To revert to the previous version of a secret,
+    # call [UpdateSecretVersionStage][2].
+    #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][3].
+    #
     # <b>Required permissions: </b> `secretsmanager:GetSecretValue`. If the
     # secret is encrypted using a customer-managed key instead of the Amazon
     # Web Services managed key `aws/secretsmanager`, then you also need
     # `kms:Decrypt` permissions for that key. For more information, see [
-    # IAM policy actions for Secrets Manager][2] and [Authentication and
-    # access control in Secrets Manager][3].
+    # IAM policy actions for Secrets Manager][4] and [Authentication and
+    # access control in Secrets Manager][5].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets.html
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/update-secret-version-stage.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [5]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to retrieve.
@@ -1329,15 +1389,21 @@ module Aws::SecretsManager
     #
     # To list the secrets in the account, use ListSecrets.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][2].
+    #
     # <b>Required permissions: </b> `secretsmanager:ListSecretVersionIds`.
-    # For more information, see [ IAM policy actions for Secrets Manager][2]
-    # and [Authentication and access control in Secrets Manager][3].
+    # For more information, see [ IAM policy actions for Secrets Manager][3]
+    # and [Authentication and access control in Secrets Manager][4].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/getting-started.html#term_version
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret whose versions you want to list.
@@ -1460,15 +1526,21 @@ module Aws::SecretsManager
     # For information about finding secrets in the console, see [Find
     # secrets in Secrets Manager][1].
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][2].
+    #
     # <b>Required permissions: </b> `secretsmanager:ListSecrets`. For more
-    # information, see [ IAM policy actions for Secrets Manager][2] and
-    # [Authentication and access control in Secrets Manager][3].
+    # information, see [ IAM policy actions for Secrets Manager][3] and
+    # [Authentication and access control in Secrets Manager][4].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_search-secret.html
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [Integer] :max_results
     #   The number of results to include in the response.
@@ -1588,15 +1660,21 @@ module Aws::SecretsManager
     # For information about attaching a policy in the console, see [Attach a
     # permissions policy to a secret][2].
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][3].
+    #
     # <b>Required permissions: </b> `secretsmanager:PutResourcePolicy`. For
-    # more information, see [ IAM policy actions for Secrets Manager][3] and
+    # more information, see [ IAM policy actions for Secrets Manager][4] and
     # [Authentication and access control in Secrets Manager][1].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_resource-based-policies.html
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to attach the resource-based policy.
@@ -1682,12 +1760,10 @@ module Aws::SecretsManager
     # Manager automatically moves the staging label `AWSCURRENT` to this
     # version. If this operation creates the first version for the secret,
     # then Secrets Manager automatically attaches the staging label
-    # `AWSCURRENT` to it .
-    #
-    # If this operation moves the staging label `AWSCURRENT` from another
-    # version to this version, then Secrets Manager also automatically moves
-    # the staging label `AWSPREVIOUS` to the version that `AWSCURRENT` was
-    # removed from.
+    # `AWSCURRENT` to it. If this operation moves the staging label
+    # `AWSCURRENT` from another version to this version, then Secrets
+    # Manager also automatically moves the staging label `AWSPREVIOUS` to
+    # the version that `AWSCURRENT` was removed from.
     #
     # This operation is idempotent. If you call this operation with a
     # `ClientRequestToken` that matches an existing version's VersionId,
@@ -1696,14 +1772,21 @@ module Aws::SecretsManager
     # fails because you can't modify an existing version; you can only
     # create new ones.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # except `SecretBinary` or `SecretString` because it might be logged.
+    # For more information, see [Logging Secrets Manager events with
+    # CloudTrail][1].
+    #
     # <b>Required permissions: </b> `secretsmanager:PutSecretValue`. For
-    # more information, see [ IAM policy actions for Secrets Manager][1] and
-    # [Authentication and access control in Secrets Manager][2].
+    # more information, see [ IAM policy actions for Secrets Manager][2] and
+    # [Authentication and access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to add a new version to.
@@ -1850,15 +1933,21 @@ module Aws::SecretsManager
     # For a secret that is replicated to other Regions, deletes the secret
     # replicas from the Regions you specify.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][1].
+    #
     # <b>Required permissions: </b>
     # `secretsmanager:RemoveRegionsFromReplication`. For more information,
-    # see [ IAM policy actions for Secrets Manager][1] and [Authentication
-    # and access control in Secrets Manager][2].
+    # see [ IAM policy actions for Secrets Manager][2] and [Authentication
+    # and access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret.
@@ -1899,16 +1988,22 @@ module Aws::SecretsManager
 
     # Replicates the secret to a new Regions. See [Multi-Region secrets][1].
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][2].
+    #
     # <b>Required permissions: </b>
     # `secretsmanager:ReplicateSecretToRegions`. For more information, see [
-    # IAM policy actions for Secrets Manager][2] and [Authentication and
-    # access control in Secrets Manager][3].
+    # IAM policy actions for Secrets Manager][3] and [Authentication and
+    # access control in Secrets Manager][4].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/create-manage-multi-region-secrets.html
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to replicate.
@@ -1961,14 +2056,20 @@ module Aws::SecretsManager
     # `DeletedDate` time stamp. You can access a secret again after it has
     # been restored.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][1].
+    #
     # <b>Required permissions: </b> `secretsmanager:RestoreSecret`. For more
-    # information, see [ IAM policy actions for Secrets Manager][1] and
-    # [Authentication and access control in Secrets Manager][2].
+    # information, see [ IAM policy actions for Secrets Manager][2] and
+    # [Authentication and access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to restore.
@@ -2053,11 +2154,16 @@ module Aws::SecretsManager
     # later invocation of `RotateSecret` assumes that a previous rotation
     # request is still in progress and returns an error.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][7].
+    #
     # <b>Required permissions: </b> `secretsmanager:RotateSecret`. For more
-    # information, see [ IAM policy actions for Secrets Manager][7] and
-    # [Authentication and access control in Secrets Manager][8]. You also
+    # information, see [ IAM policy actions for Secrets Manager][8] and
+    # [Authentication and access control in Secrets Manager][9]. You also
     # need `lambda:InvokeFunction` permissions on the rotation function. For
-    # more information, see [ Permissions for rotation][9].
+    # more information, see [ Permissions for rotation][10].
     #
     #
     #
@@ -2067,9 +2173,10 @@ module Aws::SecretsManager
     # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html
     # [5]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_available-rotation-templates.html
     # [6]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets_strategies.html
-    # [7]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [8]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
-    # [9]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets-required-permissions-function.html
+    # [7]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [8]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [9]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [10]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets-required-permissions-function.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret to rotate.
@@ -2211,15 +2318,21 @@ module Aws::SecretsManager
     # You must call this operation from the Region in which you want to
     # promote the replica to a primary secret.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][1].
+    #
     # <b>Required permissions: </b>
     # `secretsmanager:StopReplicationToReplica`. For more information, see [
-    # IAM policy actions for Secrets Manager][1] and [Authentication and
-    # access control in Secrets Manager][2].
+    # IAM policy actions for Secrets Manager][2] and [Authentication and
+    # access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN of the primary secret.
@@ -2278,14 +2391,20 @@ module Aws::SecretsManager
     # operation would result in you losing your permissions for this secret,
     # then the operation is blocked and returns an Access Denied error.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][1].
+    #
     # <b>Required permissions: </b> `secretsmanager:TagResource`. For more
-    # information, see [ IAM policy actions for Secrets Manager][1] and
-    # [Authentication and access control in Secrets Manager][2].
+    # information, see [ IAM policy actions for Secrets Manager][2] and
+    # [Authentication and access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The identifier for the secret to attach tags to. You can specify
@@ -2365,14 +2484,20 @@ module Aws::SecretsManager
     # would result in you losing your permissions for this secret, then the
     # operation is blocked and returns an Access Denied error.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][1].
+    #
     # <b>Required permissions: </b> `secretsmanager:UntagResource`. For more
-    # information, see [ IAM policy actions for Secrets Manager][1] and
-    # [Authentication and access control in Secrets Manager][2].
+    # information, see [ IAM policy actions for Secrets Manager][2] and
+    # [Authentication and access control in Secrets Manager][3].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret.
@@ -2447,8 +2572,9 @@ module Aws::SecretsManager
     # reach the quota for secret versions.
     #
     # If you include `SecretString` or `SecretBinary` to create a new secret
-    # version, Secrets Manager automatically attaches the staging label
-    # `AWSCURRENT` to the new version.
+    # version, Secrets Manager automatically moves the staging label
+    # `AWSCURRENT` to the new version. Then it attaches the label
+    # `AWSPREVIOUS` to the version that `AWSCURRENT` was removed from.
     #
     # If you call this operation with a `ClientRequestToken` that matches an
     # existing version's `VersionId`, the operation results in an error.
@@ -2456,31 +2582,25 @@ module Aws::SecretsManager
     # version. To remove a version, remove all staging labels from it. See
     # UpdateSecretVersionStage.
     #
-    # If you don't specify an KMS encryption key, Secrets Manager uses the
-    # Amazon Web Services managed key `aws/secretsmanager`. If this key
-    # doesn't already exist in your account, then Secrets Manager creates
-    # it for you automatically. All users and roles in the Amazon Web
-    # Services account automatically have access to use
-    # `aws/secretsmanager`. Creating `aws/secretsmanager` can result in a
-    # one-time significant delay in returning the result.
-    #
-    # If the secret is in a different Amazon Web Services account from the
-    # credentials calling the API, then you can't use `aws/secretsmanager`
-    # to encrypt the secret, and you must create and use a customer managed
-    # key.
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # except `SecretBinary` or `SecretString` because it might be logged.
+    # For more information, see [Logging Secrets Manager events with
+    # CloudTrail][1].
     #
     # <b>Required permissions: </b> `secretsmanager:UpdateSecret`. For more
-    # information, see [ IAM policy actions for Secrets Manager][1] and
-    # [Authentication and access control in Secrets Manager][2]. If you use
+    # information, see [ IAM policy actions for Secrets Manager][2] and
+    # [Authentication and access control in Secrets Manager][3]. If you use
     # a customer managed key, you must also have `kms:GenerateDataKey` and
     # `kms:Decrypt` permissions on the key. For more information, see [
-    # Secret encryption and decryption][3].
+    # Secret encryption and decryption][4].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/security-encryption.html
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/security-encryption.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or name of the secret.
@@ -2518,11 +2638,23 @@ module Aws::SecretsManager
     #
     # @option params [String] :kms_key_id
     #   The ARN, key ID, or alias of the KMS key that Secrets Manager uses to
-    #   encrypt new secret versions as well as any existing versions the
+    #   encrypt new secret versions as well as any existing versions with the
     #   staging labels `AWSCURRENT`, `AWSPENDING`, or `AWSPREVIOUS`. For more
     #   information about versions and staging labels, see [Concepts:
     #   Version][1].
     #
+    #   A key alias is always prefixed by `alias/`, for example
+    #   `alias/aws/secretsmanager`. For more information, see [About
+    #   aliases][2].
+    #
+    #   If you set this to an empty string, Secrets Manager uses the Amazon
+    #   Web Services managed key `aws/secretsmanager`. If this key doesn't
+    #   already exist in your account, then Secrets Manager creates it for you
+    #   automatically. All users and roles in the Amazon Web Services account
+    #   automatically have access to use `aws/secretsmanager`. Creating
+    #   `aws/secretsmanager` can result in a one-time significant delay in
+    #   returning the result.
+    #
     #   You can only use the Amazon Web Services managed key
     #   `aws/secretsmanager` if you call this operation using credentials from
     #   the same Amazon Web Services account that owns the secret. If the
@@ -2534,6 +2666,7 @@ module Aws::SecretsManager
     #
     #
     #   [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/getting-started.html#term_version
+    #   [2]: https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html
     #
     # @option params [String, StringIO, File] :secret_binary
     #   The binary data to encrypt and store in the new version of the secret.
@@ -2660,16 +2793,22 @@ module Aws::SecretsManager
     # then the version is considered to be 'deprecated' and can be deleted
     # by Secrets Manager.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][2].
+    #
     # <b>Required permissions: </b>
     # `secretsmanager:UpdateSecretVersionStage`. For more information, see [
-    # IAM policy actions for Secrets Manager][2] and [Authentication and
-    # access control in Secrets Manager][3].
+    # IAM policy actions for Secrets Manager][3] and [Authentication and
+    # access control in Secrets Manager][4].
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/getting-started.html#term_version
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [required, String] :secret_id
     #   The ARN or the name of the secret with the version and staging
@@ -2798,15 +2937,21 @@ module Aws::SecretsManager
     #
     # * Verifies the policy does not lock out a caller.
     #
+    # Secrets Manager generates a CloudTrail log entry when you call this
+    # action. Do not include sensitive information in request parameters
+    # because it might be logged. For more information, see [Logging Secrets
+    # Manager events with CloudTrail][2].
+    #
     # <b>Required permissions: </b> `secretsmanager:ValidateResourcePolicy`.
-    # For more information, see [ IAM policy actions for Secrets Manager][2]
-    # and [Authentication and access control in Secrets Manager][3].
+    # For more information, see [ IAM policy actions for Secrets Manager][3]
+    # and [Authentication and access control in Secrets Manager][4].
     #
     #
     #
     # [1]: https://aws.amazon.com/blogs/security/protect-sensitive-data-in-the-cloud-with-automated-reasoning-zelkova/
-    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
-    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
+    # [2]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html
+    # [3]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions
+    # [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
     #
     # @option params [String] :secret_id
     #   This field is reserved for internal use.
@@ -2879,7 +3024,7 @@ module Aws::SecretsManager
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-secretsmanager'
-      context[:gem_version] = '1.64.0'
+      context[:gem_version] = '1.66.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-secretsmanager/types.rb

@@ -152,7 +152,9 @@ module Aws::SecretsManager
     #
     # @!attribute [rw] kms_key_id
     #   The ARN, key ID, or alias of the KMS key that Secrets Manager uses
-    #   to encrypt the secret value in the secret.
+    #   to encrypt the secret value in the secret. An alias is always
+    #   prefixed by `alias/`, for example `alias/aws/secretsmanager`. For
+    #   more information, see [About aliases][1].
     #
     #   To use a KMS key in a different account, use the key ARN or the
     #   alias ARN.
@@ -166,6 +168,10 @@ module Aws::SecretsManager
     #   credentials calling the API, then you can't use
     #   `aws/secretsmanager` to encrypt the secret, and you must create and
     #   use a customer managed KMS key.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html
     #   @return [String]
     #
     # @!attribute [rw] secret_binary
@@ -489,9 +495,10 @@ module Aws::SecretsManager
     #   @return [String]
     #
     # @!attribute [rw] kms_key_id
-    #   The ARN of the KMS key that Secrets Manager uses to encrypt the
-    #   secret value. If the secret is encrypted with the Amazon Web
-    #   Services managed key `aws/secretsmanager`, this field is omitted.
+    #   The key ID or alias ARN of the KMS key that Secrets Manager uses to
+    #   encrypt the secret value. If the secret is encrypted with the Amazon
+    #   Web Services managed key `aws/secretsmanager`, this field is
+    #   omitted. Secrets created using the console use an KMS key ID.
     #   @return [String]
     #
     # @!attribute [rw] rotation_enabled
@@ -525,9 +532,8 @@ module Aws::SecretsManager
     #   @return [Time]
     #
     # @!attribute [rw] last_accessed_date
-    #   The last date that the secret value was retrieved. This value does
-    #   not include the time. This field is omitted if the secret has never
-    #   been retrieved.
+    #   The date that the secret was last accessed in the Region. This field
+    #   is omitted if the secret has never been retrieved in the Region.
     #   @return [Time]
     #
     # @!attribute [rw] deleted_date
@@ -578,7 +584,13 @@ module Aws::SecretsManager
     #   @return [Hash<String,Array<String>>]
     #
     # @!attribute [rw] owning_service
-    #   The name of the service that created this secret.
+    #   The ID of the service that created this secret. For more
+    #   information, see [Secrets managed by other Amazon Web Services
+    #   services][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html
     #   @return [String]
     #
     # @!attribute [rw] created_date
@@ -1003,6 +1015,14 @@ module Aws::SecretsManager
     #   a Lambda function ARN configured and you didn't include such an ARN
     #   as a parameter in this call.
     #
+    # * The secret is managed by another service, and you must use that
+    #   service to update it. For more information, see [Secrets managed by
+    #   other Amazon Web Services services][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html
+    #
     # @!attribute [rw] message
     #   @return [String]
     #
@@ -1580,7 +1600,8 @@ module Aws::SecretsManager
     #   @return [String]
     #
     # @!attribute [rw] last_accessed_date
-    #   The date that you last accessed the secret in the Region.
+    #   The date that the secret was last accessed in the Region. This field
+    #   is omitted if the secret has never been retrieved in the Region.
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/ReplicationStatusType AWS API Documentation
@@ -1912,9 +1933,8 @@ module Aws::SecretsManager
     #   @return [Time]
     #
     # @!attribute [rw] last_accessed_date
-    #   The last date that this secret was accessed. This value is truncated
-    #   to midnight of the date and therefore shows only the date, not the
-    #   time.
+    #   The date that the secret was last accessed in the Region. This field
+    #   is omitted if the secret has never been retrieved in the Region.
     #   @return [Time]
     #
     # @!attribute [rw] deleted_date
@@ -2229,11 +2249,23 @@ module Aws::SecretsManager
     #
     # @!attribute [rw] kms_key_id
     #   The ARN, key ID, or alias of the KMS key that Secrets Manager uses
-    #   to encrypt new secret versions as well as any existing versions the
-    #   staging labels `AWSCURRENT`, `AWSPENDING`, or `AWSPREVIOUS`. For
+    #   to encrypt new secret versions as well as any existing versions with
+    #   the staging labels `AWSCURRENT`, `AWSPENDING`, or `AWSPREVIOUS`. For
     #   more information about versions and staging labels, see [Concepts:
     #   Version][1].
     #
+    #   A key alias is always prefixed by `alias/`, for example
+    #   `alias/aws/secretsmanager`. For more information, see [About
+    #   aliases][2].
+    #
+    #   If you set this to an empty string, Secrets Manager uses the Amazon
+    #   Web Services managed key `aws/secretsmanager`. If this key doesn't
+    #   already exist in your account, then Secrets Manager creates it for
+    #   you automatically. All users and roles in the Amazon Web Services
+    #   account automatically have access to use `aws/secretsmanager`.
+    #   Creating `aws/secretsmanager` can result in a one-time significant
+    #   delay in returning the result.
+    #
     #   You can only use the Amazon Web Services managed key
     #   `aws/secretsmanager` if you call this operation using credentials
     #   from the same Amazon Web Services account that owns the secret. If
@@ -2245,6 +2277,7 @@ module Aws::SecretsManager
     #
     #
     #   [1]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/getting-started.html#term_version
+    #   [2]: https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html
     #   @return [String]
     #
     # @!attribute [rw] secret_binary

data/lib/aws-sdk-secretsmanager.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-secretsmanager/customizations'
 # @!group service
 module Aws::SecretsManager
 
-  GEM_VERSION = '1.64.0'
+  GEM_VERSION = '1.66.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-secretsmanager
 version: !ruby/object:Gem::Version
-  version: 1.64.0
+  version: 1.66.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-06-16 00:00:00.000000000 Z
+date: 2022-09-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core