aws-sdk-secretsmanager 1.73.0 → 1.75.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-secretsmanager/client.rb +46 -13
- data/lib/aws-sdk-secretsmanager/types.rb +28 -23
- data/lib/aws-sdk-secretsmanager.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: a013e3267e462b36da1bf3bbd0aab16d4d0ed62debdfafed5dacf302f8d24549
|
4
|
+
data.tar.gz: e6df7b0a07b40e3dfd948cc0ad6051717ef4464e6bf61af9b9950d87f35be66f
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: cad81313330f840c4463175a57b10a649b71a3cdc653bfc9c2e6fd0a983b0fcdadfa7f4c1f3bebabfdb62e05b67f448366eb09fcc2b64985c0da27f7df1d5a03
|
7
|
+
data.tar.gz: 217f9c20364cdcacd54f5dbd5113bee97cdab1f00322b541aa5a13853e2f1f6d9124e8b1d2f9394802f88d8ae5d25b977c5df994befa224044b91d03c8d64527
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,16 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.75.0 (2023-05-16)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Documentation updates for Secrets Manager
|
8
|
+
|
9
|
+
1.74.0 (2023-04-19)
|
10
|
+
------------------
|
11
|
+
|
12
|
+
* Feature - Documentation updates for Secrets Manager
|
13
|
+
|
4
14
|
1.73.0 (2023-03-10)
|
5
15
|
------------------
|
6
16
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.75.0
|
@@ -688,7 +688,7 @@ module Aws::SecretsManager
|
|
688
688
|
#
|
689
689
|
# @option params [Boolean] :force_overwrite_replica_secret
|
690
690
|
# Specifies whether to overwrite a secret with the same name in the
|
691
|
-
# destination Region.
|
691
|
+
# destination Region. By default, secrets aren't overwritten.
|
692
692
|
#
|
693
693
|
# @return [Types::CreateSecretResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
694
694
|
#
|
@@ -895,13 +895,13 @@ module Aws::SecretsManager
|
|
895
895
|
# The number of days from 7 to 30 that Secrets Manager waits before
|
896
896
|
# permanently deleting the secret. You can't use both this parameter
|
897
897
|
# and `ForceDeleteWithoutRecovery` in the same call. If you don't use
|
898
|
-
# either, then Secrets Manager
|
898
|
+
# either, then by default Secrets Manager uses a 30 day recovery window.
|
899
899
|
#
|
900
900
|
# @option params [Boolean] :force_delete_without_recovery
|
901
901
|
# Specifies whether to delete the secret without any recovery window.
|
902
902
|
# You can't use both this parameter and `RecoveryWindowInDays` in the
|
903
|
-
# same call. If you don't use either, then Secrets Manager
|
904
|
-
# a 30 day recovery window.
|
903
|
+
# same call. If you don't use either, then by default Secrets Manager
|
904
|
+
# uses a 30 day recovery window.
|
905
905
|
#
|
906
906
|
# Secrets Manager performs the actual deletion with an asynchronous
|
907
907
|
# background process, so there might be a short delay before the secret
|
@@ -909,6 +909,9 @@ module Aws::SecretsManager
|
|
909
909
|
# create a secret with the same name, use appropriate back off and retry
|
910
910
|
# logic.
|
911
911
|
#
|
912
|
+
# If you forcibly delete an already deleted or nonexistent secret, the
|
913
|
+
# operation does not return `ResourceNotFoundException`.
|
914
|
+
#
|
912
915
|
# Use this parameter with caution. This parameter causes the operation
|
913
916
|
# to skip the normal recovery window before the permanent deletion that
|
914
917
|
# Secrets Manager would normally impose with the `RecoveryWindowInDays`
|
@@ -1456,6 +1459,7 @@ module Aws::SecretsManager
|
|
1456
1459
|
# Specifies whether to include versions of secrets that don't have any
|
1457
1460
|
# staging labels attached to them. Versions without staging labels are
|
1458
1461
|
# considered deprecated and are subject to deletion by Secrets Manager.
|
1462
|
+
# By default, versions without staging labels aren't included.
|
1459
1463
|
#
|
1460
1464
|
# @return [Types::ListSecretVersionIdsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1461
1465
|
#
|
@@ -1568,7 +1572,8 @@ module Aws::SecretsManager
|
|
1568
1572
|
# [4]: https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html
|
1569
1573
|
#
|
1570
1574
|
# @option params [Boolean] :include_planned_deletion
|
1571
|
-
# Specifies whether to include secrets scheduled for deletion.
|
1575
|
+
# Specifies whether to include secrets scheduled for deletion. By
|
1576
|
+
# default, secrets scheduled for deletion aren't included.
|
1572
1577
|
#
|
1573
1578
|
# @option params [Integer] :max_results
|
1574
1579
|
# The number of results to include in the response.
|
@@ -1727,7 +1732,7 @@ module Aws::SecretsManager
|
|
1727
1732
|
# @option params [Boolean] :block_public_policy
|
1728
1733
|
# Specifies whether to block resource-based policies that allow broad
|
1729
1734
|
# access to the secret, for example those that use a wildcard for the
|
1730
|
-
# principal.
|
1735
|
+
# principal. By default, public policies aren't blocked.
|
1731
1736
|
#
|
1732
1737
|
# @return [Types::PutResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1733
1738
|
#
|
@@ -2043,13 +2048,41 @@ module Aws::SecretsManager
|
|
2043
2048
|
#
|
2044
2049
|
# @option params [Boolean] :force_overwrite_replica_secret
|
2045
2050
|
# Specifies whether to overwrite a secret with the same name in the
|
2046
|
-
# destination Region.
|
2051
|
+
# destination Region. By default, secrets aren't overwritten.
|
2047
2052
|
#
|
2048
2053
|
# @return [Types::ReplicateSecretToRegionsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
2049
2054
|
#
|
2050
2055
|
# * {Types::ReplicateSecretToRegionsResponse#arn #arn} => String
|
2051
2056
|
# * {Types::ReplicateSecretToRegionsResponse#replication_status #replication_status} => Array<Types::ReplicationStatusType>
|
2052
2057
|
#
|
2058
|
+
#
|
2059
|
+
# @example Example: Example
|
2060
|
+
#
|
2061
|
+
# # The following example replicates a secret to eu-west-3. The replica is encrypted with the AWS managed key
|
2062
|
+
# # aws/secretsmanager.
|
2063
|
+
#
|
2064
|
+
# resp = client.replicate_secret_to_regions({
|
2065
|
+
# add_replica_regions: [
|
2066
|
+
# {
|
2067
|
+
# region: "eu-west-3",
|
2068
|
+
# },
|
2069
|
+
# ],
|
2070
|
+
# force_overwrite_replica_secret: true,
|
2071
|
+
# secret_id: "MyTestSecret",
|
2072
|
+
# })
|
2073
|
+
#
|
2074
|
+
# resp.to_h outputs the following:
|
2075
|
+
# {
|
2076
|
+
# arn: "arn:aws:secretsmanager:us-west-2:123456789012:secret:MyTestSecret-1a2b3c",
|
2077
|
+
# replication_status: [
|
2078
|
+
# {
|
2079
|
+
# kms_key_id: "alias/aws/secretsmanager",
|
2080
|
+
# region: "eu-west-3",
|
2081
|
+
# status: "InProgress",
|
2082
|
+
# },
|
2083
|
+
# ],
|
2084
|
+
# }
|
2085
|
+
#
|
2053
2086
|
# @example Request syntax with placeholder values
|
2054
2087
|
#
|
2055
2088
|
# resp = client.replicate_secret_to_regions({
|
@@ -2252,8 +2285,7 @@ module Aws::SecretsManager
|
|
2252
2285
|
# Lambda rotation function. The test creates an `AWSPENDING` version of
|
2253
2286
|
# the secret and then removes it.
|
2254
2287
|
#
|
2255
|
-
#
|
2256
|
-
# rotates the secret immediately.
|
2288
|
+
# By default, Secrets Manager rotates the secret immediately.
|
2257
2289
|
#
|
2258
2290
|
#
|
2259
2291
|
#
|
@@ -2968,9 +3000,10 @@ module Aws::SecretsManager
|
|
2968
3000
|
# because it might be logged. For more information, see [Logging Secrets
|
2969
3001
|
# Manager events with CloudTrail][2].
|
2970
3002
|
#
|
2971
|
-
# <b>Required permissions: </b> `secretsmanager:ValidateResourcePolicy
|
2972
|
-
# For more information, see [
|
2973
|
-
#
|
3003
|
+
# <b>Required permissions: </b> `secretsmanager:ValidateResourcePolicy`
|
3004
|
+
# and `secretsmanager:PutResourcePolicy`. For more information, see [
|
3005
|
+
# IAM policy actions for Secrets Manager][3] and [Authentication and
|
3006
|
+
# access control in Secrets Manager][4].
|
2974
3007
|
#
|
2975
3008
|
#
|
2976
3009
|
#
|
@@ -3050,7 +3083,7 @@ module Aws::SecretsManager
|
|
3050
3083
|
params: params,
|
3051
3084
|
config: config)
|
3052
3085
|
context[:gem_name] = 'aws-sdk-secretsmanager'
|
3053
|
-
context[:gem_version] = '1.
|
3086
|
+
context[:gem_version] = '1.75.0'
|
3054
3087
|
Seahorse::Client::Request.new(handlers, context)
|
3055
3088
|
end
|
3056
3089
|
|
@@ -225,7 +225,7 @@ module Aws::SecretsManager
|
|
225
225
|
#
|
226
226
|
# @!attribute [rw] force_overwrite_replica_secret
|
227
227
|
# Specifies whether to overwrite a secret with the same name in the
|
228
|
-
# destination Region.
|
228
|
+
# destination Region. By default, secrets aren't overwritten.
|
229
229
|
# @return [Boolean]
|
230
230
|
#
|
231
231
|
# @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/CreateSecretRequest AWS API Documentation
|
@@ -350,14 +350,15 @@ module Aws::SecretsManager
|
|
350
350
|
# The number of days from 7 to 30 that Secrets Manager waits before
|
351
351
|
# permanently deleting the secret. You can't use both this parameter
|
352
352
|
# and `ForceDeleteWithoutRecovery` in the same call. If you don't use
|
353
|
-
# either, then Secrets Manager
|
353
|
+
# either, then by default Secrets Manager uses a 30 day recovery
|
354
|
+
# window.
|
354
355
|
# @return [Integer]
|
355
356
|
#
|
356
357
|
# @!attribute [rw] force_delete_without_recovery
|
357
358
|
# Specifies whether to delete the secret without any recovery window.
|
358
359
|
# You can't use both this parameter and `RecoveryWindowInDays` in the
|
359
|
-
# same call. If you don't use either, then Secrets Manager
|
360
|
-
#
|
360
|
+
# same call. If you don't use either, then by default Secrets Manager
|
361
|
+
# uses a 30 day recovery window.
|
361
362
|
#
|
362
363
|
# Secrets Manager performs the actual deletion with an asynchronous
|
363
364
|
# background process, so there might be a short delay before the
|
@@ -365,6 +366,9 @@ module Aws::SecretsManager
|
|
365
366
|
# immediately create a secret with the same name, use appropriate back
|
366
367
|
# off and retry logic.
|
367
368
|
#
|
369
|
+
# If you forcibly delete an already deleted or nonexistent secret, the
|
370
|
+
# operation does not return `ResourceNotFoundException`.
|
371
|
+
#
|
368
372
|
# Use this parameter with caution. This parameter causes the operation
|
369
373
|
# to skip the normal recovery window before the permanent deletion
|
370
374
|
# that Secrets Manager would normally impose with the
|
@@ -494,9 +498,9 @@ module Aws::SecretsManager
|
|
494
498
|
# @return [Time]
|
495
499
|
#
|
496
500
|
# @!attribute [rw] next_rotation_date
|
497
|
-
# The next
|
498
|
-
#
|
499
|
-
#
|
501
|
+
# The next rotation is scheduled to occur on or before this date. If
|
502
|
+
# the secret isn't configured for rotation, Secrets Manager returns
|
503
|
+
# null.
|
500
504
|
# @return [Time]
|
501
505
|
#
|
502
506
|
# @!attribute [rw] tags
|
@@ -620,19 +624,19 @@ module Aws::SecretsManager
|
|
620
624
|
# @!attribute [rw] key
|
621
625
|
# The following are keys you can use:
|
622
626
|
#
|
623
|
-
# * **description
|
627
|
+
# * **description**: Prefix match, not case-sensitive.
|
624
628
|
#
|
625
|
-
# * **name
|
629
|
+
# * **name**: Prefix match, case-sensitive.
|
626
630
|
#
|
627
|
-
# * **tag-key
|
631
|
+
# * **tag-key**: Prefix match, case-sensitive.
|
628
632
|
#
|
629
|
-
# * **tag-value
|
633
|
+
# * **tag-value**: Prefix match, case-sensitive.
|
630
634
|
#
|
631
|
-
# * **primary-region
|
635
|
+
# * **primary-region**: Prefix match, case-sensitive.
|
632
636
|
#
|
633
|
-
# * **owning-service
|
637
|
+
# * **owning-service**: Prefix match, case-sensitive.
|
634
638
|
#
|
635
|
-
# * **all
|
639
|
+
# * **all**: Breaks the filter value string into words and then
|
636
640
|
# searches all attributes for matches. Not case-sensitive.
|
637
641
|
# @return [String]
|
638
642
|
#
|
@@ -993,7 +997,8 @@ module Aws::SecretsManager
|
|
993
997
|
# Specifies whether to include versions of secrets that don't have
|
994
998
|
# any staging labels attached to them. Versions without staging labels
|
995
999
|
# are considered deprecated and are subject to deletion by Secrets
|
996
|
-
# Manager.
|
1000
|
+
# Manager. By default, versions without staging labels aren't
|
1001
|
+
# included.
|
997
1002
|
# @return [Boolean]
|
998
1003
|
#
|
999
1004
|
# @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/ListSecretVersionIdsRequest AWS API Documentation
|
@@ -1039,7 +1044,8 @@ module Aws::SecretsManager
|
|
1039
1044
|
end
|
1040
1045
|
|
1041
1046
|
# @!attribute [rw] include_planned_deletion
|
1042
|
-
# Specifies whether to include secrets scheduled for deletion.
|
1047
|
+
# Specifies whether to include secrets scheduled for deletion. By
|
1048
|
+
# default, secrets scheduled for deletion aren't included.
|
1043
1049
|
# @return [Boolean]
|
1044
1050
|
#
|
1045
1051
|
# @!attribute [rw] max_results
|
@@ -1161,7 +1167,7 @@ module Aws::SecretsManager
|
|
1161
1167
|
# @!attribute [rw] block_public_policy
|
1162
1168
|
# Specifies whether to block resource-based policies that allow broad
|
1163
1169
|
# access to the secret, for example those that use a wildcard for the
|
1164
|
-
# principal.
|
1170
|
+
# principal. By default, public policies aren't blocked.
|
1165
1171
|
# @return [Boolean]
|
1166
1172
|
#
|
1167
1173
|
# @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/PutResourcePolicyRequest AWS API Documentation
|
@@ -1395,7 +1401,7 @@ module Aws::SecretsManager
|
|
1395
1401
|
#
|
1396
1402
|
# @!attribute [rw] force_overwrite_replica_secret
|
1397
1403
|
# Specifies whether to overwrite a secret with the same name in the
|
1398
|
-
# destination Region.
|
1404
|
+
# destination Region. By default, secrets aren't overwritten.
|
1399
1405
|
# @return [Boolean]
|
1400
1406
|
#
|
1401
1407
|
# @see http://docs.aws.amazon.com/goto/WebAPI/secretsmanager-2017-10-17/ReplicateSecretToRegionsRequest AWS API Documentation
|
@@ -1593,8 +1599,7 @@ module Aws::SecretsManager
|
|
1593
1599
|
# Lambda rotation function. The test creates an `AWSPENDING` version
|
1594
1600
|
# of the secret and then removes it.
|
1595
1601
|
#
|
1596
|
-
#
|
1597
|
-
# rotates the secret immediately.
|
1602
|
+
# By default, Secrets Manager rotates the secret immediately.
|
1598
1603
|
#
|
1599
1604
|
#
|
1600
1605
|
#
|
@@ -1788,9 +1793,9 @@ module Aws::SecretsManager
|
|
1788
1793
|
# @return [Time]
|
1789
1794
|
#
|
1790
1795
|
# @!attribute [rw] next_rotation_date
|
1791
|
-
# The next
|
1792
|
-
# the secret
|
1793
|
-
#
|
1796
|
+
# The next rotation is scheduled to occur on or before this date. If
|
1797
|
+
# the secret isn't configured for rotation, Secrets Manager returns
|
1798
|
+
# null.
|
1794
1799
|
# @return [Time]
|
1795
1800
|
#
|
1796
1801
|
# @!attribute [rw] tags
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-secretsmanager
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.75.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-
|
11
|
+
date: 2023-05-16 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|