aws-sdk-secretsmanager 1.73.0 → 1.75.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-secretsmanager/client.rb +46 -13
- data/lib/aws-sdk-secretsmanager/types.rb +28 -23
- data/lib/aws-sdk-secretsmanager.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: a013e3267e462b36da1bf3bbd0aab16d4d0ed62debdfafed5dacf302f8d24549
|
4
|
+
data.tar.gz: e6df7b0a07b40e3dfd948cc0ad6051717ef4464e6bf61af9b9950d87f35be66f
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: cad81313330f840c4463175a57b10a649b71a3cdc653bfc9c2e6fd0a983b0fcdadfa7f4c1f3bebabfdb62e05b67f448366eb09fcc2b64985c0da27f7df1d5a03
|
7
|
+
data.tar.gz: 217f9c20364cdcacd54f5dbd5113bee97cdab1f00322b541aa5a13853e2f1f6d9124e8b1d2f9394802f88d8ae5d25b977c5df994befa224044b91d03c8d64527
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,16 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.75.0 (2023-05-16)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Documentation updates for Secrets Manager
|
8
|
+
|
9
|
+
1.74.0 (2023-04-19)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Documentation updates for Secrets Manager
|
13
|
+
|
4
14
|
1.73.0 (2023-03-10)
|
5
15
|
------------------
|
6
16
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.75.0
|
@@ -688,7 +688,7 @@ module Aws::SecretsManager
|
|
688
688
|
#
|
689
689
|
# @option params [Boolean] :force_overwrite_replica_secret
|
690
690
|
# Specifies whether to overwrite a secret with the same name in the
|
691
|
-
# destination Region.
|
691
|
+
# destination Region. By default, secrets aren't overwritten.
|
692
692
|
#
|
693
693
|
# @return [Types::CreateSecretResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
694
694
|
#
|
@@ -895,13 +895,13 @@ module Aws::SecretsManager
|
|
895
895
|
# The number of days from 7 to 30 that Secrets Manager waits before
|
896
896
|
# permanently deleting the secret. You can't use both this parameter
|
897
897
|
# and `ForceDeleteWithoutRecovery` in the same call. If you don't use
|
898
|
-
# either, then Secrets Manager
|
898
|
+
# either, then by default Secrets Manager uses a 30 day recovery window.
|
899
899
|
#
|
900
900
|
# @option params [Boolean] :force_delete_without_recovery
|
901
901
|
# Specifies whether to delete the secret without any recovery window.
|
902
902
|
# You can't use both this parameter and `RecoveryWindowInDays` in the
|
903
|
-
# same call. If you don't use either, then Secrets Manager
|
904
|
-
# a 30 day recovery window.
|
903
|
+
# same call. If you don't use either, then by default Secrets Manager
|
904
|
+
# uses a 30 day recovery window.
|
905
905
|
#
|
906
906
|
# Secrets Manager performs the actual deletion with an asynchronous
|
907
907
|
# background process, so there might be a short delay before the secret
|
@@ -909,6 +909,9 @@ module Aws::SecretsManager
|
|
909
909
|
# create a secret with the same name, use appropriate back off and retry
|
910
910
|
# logic.
|
911
911
|
#
|
912
|
+
# If you forcibly delete an already deleted or nonexistent secret, the
|
913
|
+
# operation does not return `ResourceNotFoundException`.
|
914
|
+
#
|
912
915
|
# Use this parameter with caution. This parameter causes the operation
|
913
916
|
# to skip the normal recovery window before the permanent deletion that
|
914
917
|
# Secrets Manager would normally impose with the `RecoveryWindowInDays`
|
@@ -1456,6 +1459,7 @@ module Aws::SecretsManager
|
|
1456
1459
|
# Specifies whether to include versions of secrets that don't have any
|
1457
1460
|
# staging labels attached to them. Versions without staging labels are
|
1458
1461
|
# considered deprecated and are subject to deletion by Secrets Manager.
|
1462
|
+
# By default, versions without staging labels aren't included.
|
1459
1463
|
#
|
1460
1464
|
# @return [Types::ListSecretVersionIdsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1461
1465
|
#
|
@@ -1568,7 +1572,8 @@ module Aws::SecretsManager
|
|
1568
1572
|
# [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
|
1569
1573
|
#
|
1570
1574
|
# @option params [Boolean] :include_planned_deletion
|
1571
|
-
# Specifies whether to include secrets scheduled for deletion.
|
1575
|
+
# Specifies whether to include secrets scheduled for deletion. By
|
1576
|
+
# default, secrets scheduled for deletion aren't included.
|
1572
1577
|
#
|
1573
1578
|
# @option params [Integer] :max_results
|
1574
1579
|
# The number of results to include in the response.
|
@@ -1727,7 +1732,7 @@ module Aws::SecretsManager
|
|
1727
1732
|
# @option params [Boolean] :block_public_policy
|
1728
1733
|
# Specifies whether to block resource-based policies that allow broad
|
1729
1734
|
# access to the secret, for example those that use a wildcard for the
|
1730
|
-
# principal.
|
1735
|
+
# principal. By default, public policies aren't blocked.
|
1731
1736
|
#
|
1732
1737
|
# @return [Types::PutResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1733
1738
|
#
|
@@ -2043,13 +2048,41 @@ module Aws::SecretsManager
|
|
2043
2048
|
#
|
2044
2049
|
# @option params [Boolean] :force_overwrite_replica_secret
|
2045
2050
|
# Specifies whether to overwrite a secret with the same name in the
|
2046
|
-
# destination Region.
|
2051
|
+
# destination Region. By default, secrets aren't overwritten.
|
2047
2052
|
#
|
2048
2053
|
# @return [Types::ReplicateSecretToRegionsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
2049
2054
|
#
|
2050
2055
|
# * {Types::ReplicateSecretToRegionsResponse#arn #arn} => String
|
2051
2056
|
# * {Types::ReplicateSecretToRegionsResponse#replication_status #replication_status} => Array<Types::ReplicationStatusType>
|
2052
2057
|
#
|
2058
|
+
#
|
2059
|
+
# @example Example: Example
|
2060
|
+
#
|
2061
|
+
# # The following example replicates a secret to eu-west-3. The replica is encrypted with the AWS managed key
|
2062
|
+
# # aws/secretsmanager.
|
2063
|
+
#
|
2064
|
+
# resp = client.replicate_secret_to_regions({
|
2065
|
+
# add_replica_regions: [
|
2066
|
+
# {
|
2067
|
+
# region: "eu-west-3",
|
2068
|
+
# },
|
2069
|
+
# ],
|
2070
|
+
# force_overwrite_replica_secret: true,
|
2071
|
+
# secret_id: "MyTestSecret",
|
2072
|
+
# })
|
2073
|
+
#
|
2074
|
+
# resp.to_h outputs the following:
|
2075
|
+
# {
|
2076
|
+
# arn: "arn:aws:secretsmanager:us-west-2:123456789012:secret:MyTestSecret-1a2b3c",
|
2077
|
+
# replication_status: [
|
2078
|
+
# {
|
2079
|
+
# kms_key_id: "alias/aws/secretsmanager",
|
2080
|
+
# region: "eu-west-3",
|
2081
|
+
# status: "InProgress",
|
2082
|
+
# },
|
2083
|
+
# ],
|
2084
|
+
# }
|
2085
|
+
#
|
2053
2086
|
# @example Request syntax with placeholder values
|
2054
2087
|
#
|
2055
2088
|
# resp = client.replicate_secret_to_regions({
|
@@ -2252,8 +2285,7 @@ module Aws::SecretsManager
|
|
2252
2285
|
# Lambda rotation function. The test creates an `AWSPENDING` version of
|
2253
2286
|
# the secret and then removes it.
|
2254
2287
|
#
|
2255
|
-
#
|
2256
|
-
# rotates the secret immediately.
|
2288
|
+
# By default, Secrets Manager rotates the secret immediately.
|
2257
2289
|
#
|
2258
2290
|
#
|
2259
2291
|
#
|
@@ -2968,9 +3000,10 @@ module Aws::SecretsManager
|
|
2968
3000
|
# because it might be logged. For more information, see [Logging Secrets
|
2969
3001
|
# Manager events with CloudTrail][2].
|
2970
3002
|
#
|
2971
|
-
# <b>Required permissions: </b> `secretsmanager:ValidateResourcePolicy
|
2972
|
-
# For more information, see [
|
2973
|
-
#
|
3003
|
+
# <b>Required permissions: </b> `secretsmanager:ValidateResourcePolicy`
|
3004
|
+
# and `secretsmanager:PutResourcePolicy`. For more information, see [
|
3005
|
+
# IAM policy actions for Secrets Manager][3] and [Authentication and
|
3006
|
+
# access control in Secrets Manager][4].
|
2974
3007
|
#
|
2975
3008
|
#
|
2976
3009
|
#
|
@@ -3050,7 +3083,7 @@ module Aws::SecretsManager
|
|
3050
3083
|
params: params,
|
3051
3084
|
config: config)
|
3052
3085
|
context[:gem_name] = 'aws-sdk-secretsmanager'
|
3053
|
-
context[:gem_version] = '1.
|
3086
|
+
context[:gem_version] = '1.75.0'
|
3054
3087
|
Seahorse::Client::Request.new(handlers, context)
|
3055
3088
|
end
|
3056
3089
|
|
@@ -225,7 +225,7 @@ module Aws::SecretsManager
|
|
225
225
|
#
|
226
226
|
# @!attribute [rw] force_overwrite_replica_secret
|
227
227
|
# Specifies whether to overwrite a secret with the same name in the
|
228
|
-
# destination Region.
|
228
|
+
# destination Region. By default, secrets aren't overwritten.
|
229
229
|
# @return [Boolean]
|
230
230
|
#
|
231
231
|
# @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/CreateSecretRequest AWS API Documentation
|
@@ -350,14 +350,15 @@ module Aws::SecretsManager
|
|
350
350
|
# The number of days from 7 to 30 that Secrets Manager waits before
|
351
351
|
# permanently deleting the secret. You can't use both this parameter
|
352
352
|
# and `ForceDeleteWithoutRecovery` in the same call. If you don't use
|
353
|
-
# either, then Secrets Manager
|
353
|
+
# either, then by default Secrets Manager uses a 30 day recovery
|
354
|
+
# window.
|
354
355
|
# @return [Integer]
|
355
356
|
#
|
356
357
|
# @!attribute [rw] force_delete_without_recovery
|
357
358
|
# Specifies whether to delete the secret without any recovery window.
|
358
359
|
# You can't use both this parameter and `RecoveryWindowInDays` in the
|
359
|
-
# same call. If you don't use either, then Secrets Manager
|
360
|
-
#
|
360
|
+
# same call. If you don't use either, then by default Secrets Manager
|
361
|
+
# uses a 30 day recovery window.
|
361
362
|
#
|
362
363
|
# Secrets Manager performs the actual deletion with an asynchronous
|
363
364
|
# background process, so there might be a short delay before the
|
@@ -365,6 +366,9 @@ module Aws::SecretsManager
|
|
365
366
|
# immediately create a secret with the same name, use appropriate back
|
366
367
|
# off and retry logic.
|
367
368
|
#
|
369
|
+
# If you forcibly delete an already deleted or nonexistent secret, the
|
370
|
+
# operation does not return `ResourceNotFoundException`.
|
371
|
+
#
|
368
372
|
# Use this parameter with caution. This parameter causes the operation
|
369
373
|
# to skip the normal recovery window before the permanent deletion
|
370
374
|
# that Secrets Manager would normally impose with the
|
@@ -494,9 +498,9 @@ module Aws::SecretsManager
|
|
494
498
|
# @return [Time]
|
495
499
|
#
|
496
500
|
# @!attribute [rw] next_rotation_date
|
497
|
-
# The next
|
498
|
-
#
|
499
|
-
#
|
501
|
+
# The next rotation is scheduled to occur on or before this date. If
|
502
|
+
# the secret isn't configured for rotation, Secrets Manager returns
|
503
|
+
# null.
|
500
504
|
# @return [Time]
|
501
505
|
#
|
502
506
|
# @!attribute [rw] tags
|
@@ -620,19 +624,19 @@ module Aws::SecretsManager
|
|
620
624
|
# @!attribute [rw] key
|
621
625
|
# The following are keys you can use:
|
622
626
|
#
|
623
|
-
# * **description
|
627
|
+
# * **description**: Prefix match, not case-sensitive.
|
624
628
|
#
|
625
|
-
# * **name
|
629
|
+
# * **name**: Prefix match, case-sensitive.
|
626
630
|
#
|
627
|
-
# * **tag-key
|
631
|
+
# * **tag-key**: Prefix match, case-sensitive.
|
628
632
|
#
|
629
|
-
# * **tag-value
|
633
|
+
# * **tag-value**: Prefix match, case-sensitive.
|
630
634
|
#
|
631
|
-
# * **primary-region
|
635
|
+
# * **primary-region**: Prefix match, case-sensitive.
|
632
636
|
#
|
633
|
-
# * **owning-service
|
637
|
+
# * **owning-service**: Prefix match, case-sensitive.
|
634
638
|
#
|
635
|
-
# * **all
|
639
|
+
# * **all**: Breaks the filter value string into words and then
|
636
640
|
# searches all attributes for matches. Not case-sensitive.
|
637
641
|
# @return [String]
|
638
642
|
#
|
@@ -993,7 +997,8 @@ module Aws::SecretsManager
|
|
993
997
|
# Specifies whether to include versions of secrets that don't have
|
994
998
|
# any staging labels attached to them. Versions without staging labels
|
995
999
|
# are considered deprecated and are subject to deletion by Secrets
|
996
|
-
# Manager.
|
1000
|
+
# Manager. By default, versions without staging labels aren't
|
1001
|
+
# included.
|
997
1002
|
# @return [Boolean]
|
998
1003
|
#
|
999
1004
|
# @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/ListSecretVersionIdsRequest AWS API Documentation
|
@@ -1039,7 +1044,8 @@ module Aws::SecretsManager
|
|
1039
1044
|
end
|
1040
1045
|
|
1041
1046
|
# @!attribute [rw] include_planned_deletion
|
1042
|
-
# Specifies whether to include secrets scheduled for deletion.
|
1047
|
+
# Specifies whether to include secrets scheduled for deletion. By
|
1048
|
+
# default, secrets scheduled for deletion aren't included.
|
1043
1049
|
# @return [Boolean]
|
1044
1050
|
#
|
1045
1051
|
# @!attribute [rw] max_results
|
@@ -1161,7 +1167,7 @@ module Aws::SecretsManager
|
|
1161
1167
|
# @!attribute [rw] block_public_policy
|
1162
1168
|
# Specifies whether to block resource-based policies that allow broad
|
1163
1169
|
# access to the secret, for example those that use a wildcard for the
|
1164
|
-
# principal.
|
1170
|
+
# principal. By default, public policies aren't blocked.
|
1165
1171
|
# @return [Boolean]
|
1166
1172
|
#
|
1167
1173
|
# @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/PutResourcePolicyRequest AWS API Documentation
|
@@ -1395,7 +1401,7 @@ module Aws::SecretsManager
|
|
1395
1401
|
#
|
1396
1402
|
# @!attribute [rw] force_overwrite_replica_secret
|
1397
1403
|
# Specifies whether to overwrite a secret with the same name in the
|
1398
|
-
# destination Region.
|
1404
|
+
# destination Region. By default, secrets aren't overwritten.
|
1399
1405
|
# @return [Boolean]
|
1400
1406
|
#
|
1401
1407
|
# @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/ReplicateSecretToRegionsRequest AWS API Documentation
|
@@ -1593,8 +1599,7 @@ module Aws::SecretsManager
|
|
1593
1599
|
# Lambda rotation function. The test creates an `AWSPENDING` version
|
1594
1600
|
# of the secret and then removes it.
|
1595
1601
|
#
|
1596
|
-
#
|
1597
|
-
# rotates the secret immediately.
|
1602
|
+
# By default, Secrets Manager rotates the secret immediately.
|
1598
1603
|
#
|
1599
1604
|
#
|
1600
1605
|
#
|
@@ -1788,9 +1793,9 @@ module Aws::SecretsManager
|
|
1788
1793
|
# @return [Time]
|
1789
1794
|
#
|
1790
1795
|
# @!attribute [rw] next_rotation_date
|
1791
|
-
# The next
|
1792
|
-
# the secret
|
1793
|
-
#
|
1796
|
+
# The next rotation is scheduled to occur on or before this date. If
|
1797
|
+
# the secret isn't configured for rotation, Secrets Manager returns
|
1798
|
+
# null.
|
1794
1799
|
# @return [Time]
|
1795
1800
|
#
|
1796
1801
|
# @!attribute [rw] tags
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-secretsmanager
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.75.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-
|
11
|
+
date: 2023-05-16 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|