@aws-sdk/client-docdb 3.714.0 → 3.717.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist-cjs/index.js CHANGED
@@ -3504,6 +3504,12 @@ var se_CreateDBClusterMessage = /* @__PURE__ */ __name((input, context) => {
3504
3504
  if (input[_ST] != null) {
3505
3505
  entries[_ST] = input[_ST];
3506
3506
  }
3507
+ if (input[_MMUP] != null) {
3508
+ entries[_MMUP] = input[_MMUP];
3509
+ }
3510
+ if (input[_MUSKKI] != null) {
3511
+ entries[_MUSKKI] = input[_MUSKKI];
3512
+ }
3507
3513
  return entries;
3508
3514
  }, "se_CreateDBClusterMessage");
3509
3515
  var se_CreateDBClusterParameterGroupMessage = /* @__PURE__ */ __name((input, context) => {
@@ -4369,6 +4375,15 @@ var se_ModifyDBClusterMessage = /* @__PURE__ */ __name((input, context) => {
4369
4375
  if (input[_ST] != null) {
4370
4376
  entries[_ST] = input[_ST];
4371
4377
  }
4378
+ if (input[_MMUP] != null) {
4379
+ entries[_MMUP] = input[_MMUP];
4380
+ }
4381
+ if (input[_MUSKKI] != null) {
4382
+ entries[_MUSKKI] = input[_MUSKKI];
4383
+ }
4384
+ if (input[_RMUP] != null) {
4385
+ entries[_RMUP] = input[_RMUP];
4386
+ }
4372
4387
  return entries;
4373
4388
  }, "se_ModifyDBClusterMessage");
4374
4389
  var se_ModifyDBClusterParameterGroupMessage = /* @__PURE__ */ __name((input, context) => {
@@ -4968,6 +4983,19 @@ var de_CertificateNotFoundFault = /* @__PURE__ */ __name((output, context) => {
4968
4983
  }
4969
4984
  return contents;
4970
4985
  }, "de_CertificateNotFoundFault");
4986
+ var de_ClusterMasterUserSecret = /* @__PURE__ */ __name((output, context) => {
4987
+ const contents = {};
4988
+ if (output[_SA] != null) {
4989
+ contents[_SA] = (0, import_smithy_client.expectString)(output[_SA]);
4990
+ }
4991
+ if (output[_SS] != null) {
4992
+ contents[_SS] = (0, import_smithy_client.expectString)(output[_SS]);
4993
+ }
4994
+ if (output[_KKI] != null) {
4995
+ contents[_KKI] = (0, import_smithy_client.expectString)(output[_KKI]);
4996
+ }
4997
+ return contents;
4998
+ }, "de_ClusterMasterUserSecret");
4971
4999
  var de_CopyDBClusterParameterGroupResult = /* @__PURE__ */ __name((output, context) => {
4972
5000
  const contents = {};
4973
5001
  if (output[_DBCPG] != null) {
@@ -5144,6 +5172,9 @@ var de_DBCluster = /* @__PURE__ */ __name((output, context) => {
5144
5172
  if (output[_ST] != null) {
5145
5173
  contents[_ST] = (0, import_smithy_client.expectString)(output[_ST]);
5146
5174
  }
5175
+ if (output[_MUS] != null) {
5176
+ contents[_MUS] = de_ClusterMasterUserSecret(output[_MUS], context);
5177
+ }
5147
5178
  return contents;
5148
5179
  }, "de_DBCluster");
5149
5180
  var de_DBClusterAlreadyExistsFault = /* @__PURE__ */ __name((output, context) => {
@@ -5829,8 +5860,8 @@ var de_Event = /* @__PURE__ */ __name((output, context) => {
5829
5860
  if (output[_Da] != null) {
5830
5861
  contents[_Da] = (0, import_smithy_client.expectNonNull)((0, import_smithy_client.parseRfc3339DateTimeWithOffset)(output[_Da]));
5831
5862
  }
5832
- if (output[_SA] != null) {
5833
- contents[_SA] = (0, import_smithy_client.expectString)(output[_SA]);
5863
+ if (output[_SAo] != null) {
5864
+ contents[_SAo] = (0, import_smithy_client.expectString)(output[_SAo]);
5834
5865
  }
5835
5866
  return contents;
5836
5867
  }, "de_Event");
@@ -6559,8 +6590,8 @@ var de_Subnet = /* @__PURE__ */ __name((output, context) => {
6559
6590
  if (output[_SAZ] != null) {
6560
6591
  contents[_SAZ] = de_AvailabilityZone(output[_SAZ], context);
6561
6592
  }
6562
- if (output[_SS] != null) {
6563
- contents[_SS] = (0, import_smithy_client.expectString)(output[_SS]);
6593
+ if (output[_SSu] != null) {
6594
+ contents[_SSu] = (0, import_smithy_client.expectString)(output[_SSu]);
6564
6595
  }
6565
6596
  return contents;
6566
6597
  }, "de_Subnet");
@@ -6878,9 +6909,12 @@ var _MDBSG = "ModifyDBSubnetGroup";
6878
6909
  var _MES = "ModifyEventSubscription";
6879
6910
  var _MEV = "MinimumEngineVersion";
6880
6911
  var _MGC = "ModifyGlobalCluster";
6912
+ var _MMUP = "ManageMasterUserPassword";
6881
6913
  var _MR = "MaxRecords";
6882
6914
  var _MU = "MasterUsername";
6883
6915
  var _MUP = "MasterUserPassword";
6916
+ var _MUS = "MasterUserSecret";
6917
+ var _MUSKKI = "MasterUserSecretKmsKeyId";
6884
6918
  var _Me = "Message";
6885
6919
  var _N = "Name";
6886
6920
  var _NDBCI = "NewDBClusterIdentifier";
@@ -6919,6 +6953,7 @@ var _RDBI = "RebootDBInstance";
6919
6953
  var _RE = "ReaderEndpoint";
6920
6954
  var _RFGC = "RemoveFromGlobalCluster";
6921
6955
  var _RI = "ResourceIdentifier";
6956
+ var _RMUP = "RotateMasterUserPassword";
6922
6957
  var _RN = "ResourceName";
6923
6958
  var _RPMA = "ResourcePendingMaintenanceActions";
6924
6959
  var _RRI = "ReadReplicaIdentifiers";
@@ -6929,8 +6964,9 @@ var _RT = "RestoreType";
6929
6964
  var _RTFR = "RemoveTagsFromResource";
6930
6965
  var _RTT = "RestoreToTime";
6931
6966
  var _S = "Source";
6932
- var _SA = "SourceArn";
6967
+ var _SA = "SecretArn";
6933
6968
  var _SAZ = "SubnetAvailabilityZone";
6969
+ var _SAo = "SourceArn";
6934
6970
  var _SCACI = "SupportedCACertificateIdentifiers";
6935
6971
  var _SCRWR = "SupportsCertificateRotationWithoutRestart";
6936
6972
  var _SCT = "SnapshotCreateTime";
@@ -6955,7 +6991,8 @@ var _SIu = "SubnetIds";
6955
6991
  var _SIub = "SubnetIdentifier";
6956
6992
  var _SLETCL = "SupportsLogExportsToCloudwatchLogs";
6957
6993
  var _SN = "SubscriptionName";
6958
- var _SS = "SubnetStatus";
6994
+ var _SS = "SecretStatus";
6995
+ var _SSu = "SubnetStatus";
6959
6996
  var _ST = "StorageType";
6960
6997
  var _STA = "SnsTopicArn";
6961
6998
  var _STn = "SnapshotType";
@@ -2189,6 +2189,12 @@ const se_CreateDBClusterMessage = (input, context) => {
2189
2189
  if (input[_ST] != null) {
2190
2190
  entries[_ST] = input[_ST];
2191
2191
  }
2192
+ if (input[_MMUP] != null) {
2193
+ entries[_MMUP] = input[_MMUP];
2194
+ }
2195
+ if (input[_MUSKKI] != null) {
2196
+ entries[_MUSKKI] = input[_MUSKKI];
2197
+ }
2192
2198
  return entries;
2193
2199
  };
2194
2200
  const se_CreateDBClusterParameterGroupMessage = (input, context) => {
@@ -3031,6 +3037,15 @@ const se_ModifyDBClusterMessage = (input, context) => {
3031
3037
  if (input[_ST] != null) {
3032
3038
  entries[_ST] = input[_ST];
3033
3039
  }
3040
+ if (input[_MMUP] != null) {
3041
+ entries[_MMUP] = input[_MMUP];
3042
+ }
3043
+ if (input[_MUSKKI] != null) {
3044
+ entries[_MUSKKI] = input[_MUSKKI];
3045
+ }
3046
+ if (input[_RMUP] != null) {
3047
+ entries[_RMUP] = input[_RMUP];
3048
+ }
3034
3049
  return entries;
3035
3050
  };
3036
3051
  const se_ModifyDBClusterParameterGroupMessage = (input, context) => {
@@ -3633,6 +3648,19 @@ const de_CertificateNotFoundFault = (output, context) => {
3633
3648
  }
3634
3649
  return contents;
3635
3650
  };
3651
+ const de_ClusterMasterUserSecret = (output, context) => {
3652
+ const contents = {};
3653
+ if (output[_SA] != null) {
3654
+ contents[_SA] = __expectString(output[_SA]);
3655
+ }
3656
+ if (output[_SS] != null) {
3657
+ contents[_SS] = __expectString(output[_SS]);
3658
+ }
3659
+ if (output[_KKI] != null) {
3660
+ contents[_KKI] = __expectString(output[_KKI]);
3661
+ }
3662
+ return contents;
3663
+ };
3636
3664
  const de_CopyDBClusterParameterGroupResult = (output, context) => {
3637
3665
  const contents = {};
3638
3666
  if (output[_DBCPG] != null) {
@@ -3815,6 +3843,9 @@ const de_DBCluster = (output, context) => {
3815
3843
  if (output[_ST] != null) {
3816
3844
  contents[_ST] = __expectString(output[_ST]);
3817
3845
  }
3846
+ if (output[_MUS] != null) {
3847
+ contents[_MUS] = de_ClusterMasterUserSecret(output[_MUS], context);
3848
+ }
3818
3849
  return contents;
3819
3850
  };
3820
3851
  const de_DBClusterAlreadyExistsFault = (output, context) => {
@@ -4539,8 +4570,8 @@ const de_Event = (output, context) => {
4539
4570
  if (output[_Da] != null) {
4540
4571
  contents[_Da] = __expectNonNull(__parseRfc3339DateTimeWithOffset(output[_Da]));
4541
4572
  }
4542
- if (output[_SA] != null) {
4543
- contents[_SA] = __expectString(output[_SA]);
4573
+ if (output[_SAo] != null) {
4574
+ contents[_SAo] = __expectString(output[_SAo]);
4544
4575
  }
4545
4576
  return contents;
4546
4577
  };
@@ -5312,8 +5343,8 @@ const de_Subnet = (output, context) => {
5312
5343
  if (output[_SAZ] != null) {
5313
5344
  contents[_SAZ] = de_AvailabilityZone(output[_SAZ], context);
5314
5345
  }
5315
- if (output[_SS] != null) {
5316
- contents[_SS] = __expectString(output[_SS]);
5346
+ if (output[_SSu] != null) {
5347
+ contents[_SSu] = __expectString(output[_SSu]);
5317
5348
  }
5318
5349
  return contents;
5319
5350
  };
@@ -5641,9 +5672,12 @@ const _MDBSG = "ModifyDBSubnetGroup";
5641
5672
  const _MES = "ModifyEventSubscription";
5642
5673
  const _MEV = "MinimumEngineVersion";
5643
5674
  const _MGC = "ModifyGlobalCluster";
5675
+ const _MMUP = "ManageMasterUserPassword";
5644
5676
  const _MR = "MaxRecords";
5645
5677
  const _MU = "MasterUsername";
5646
5678
  const _MUP = "MasterUserPassword";
5679
+ const _MUS = "MasterUserSecret";
5680
+ const _MUSKKI = "MasterUserSecretKmsKeyId";
5647
5681
  const _Me = "Message";
5648
5682
  const _N = "Name";
5649
5683
  const _NDBCI = "NewDBClusterIdentifier";
@@ -5682,6 +5716,7 @@ const _RDBI = "RebootDBInstance";
5682
5716
  const _RE = "ReaderEndpoint";
5683
5717
  const _RFGC = "RemoveFromGlobalCluster";
5684
5718
  const _RI = "ResourceIdentifier";
5719
+ const _RMUP = "RotateMasterUserPassword";
5685
5720
  const _RN = "ResourceName";
5686
5721
  const _RPMA = "ResourcePendingMaintenanceActions";
5687
5722
  const _RRI = "ReadReplicaIdentifiers";
@@ -5692,8 +5727,9 @@ const _RT = "RestoreType";
5692
5727
  const _RTFR = "RemoveTagsFromResource";
5693
5728
  const _RTT = "RestoreToTime";
5694
5729
  const _S = "Source";
5695
- const _SA = "SourceArn";
5730
+ const _SA = "SecretArn";
5696
5731
  const _SAZ = "SubnetAvailabilityZone";
5732
+ const _SAo = "SourceArn";
5697
5733
  const _SCACI = "SupportedCACertificateIdentifiers";
5698
5734
  const _SCRWR = "SupportsCertificateRotationWithoutRestart";
5699
5735
  const _SCT = "SnapshotCreateTime";
@@ -5718,7 +5754,8 @@ const _SIu = "SubnetIds";
5718
5754
  const _SIub = "SubnetIdentifier";
5719
5755
  const _SLETCL = "SupportsLogExportsToCloudwatchLogs";
5720
5756
  const _SN = "SubscriptionName";
5721
- const _SS = "SubnetStatus";
5757
+ const _SS = "SecretStatus";
5758
+ const _SSu = "SubnetStatus";
5722
5759
  const _ST = "StorageType";
5723
5760
  const _STA = "SnsTopicArn";
5724
5761
  const _STn = "SnapshotType";
@@ -67,6 +67,8 @@ declare const CreateDBClusterCommand_base: {
67
67
  * DeletionProtection: true || false,
68
68
  * GlobalClusterIdentifier: "STRING_VALUE",
69
69
  * StorageType: "STRING_VALUE",
70
+ * ManageMasterUserPassword: true || false,
71
+ * MasterUserSecretKmsKeyId: "STRING_VALUE",
70
72
  * };
71
73
  * const command = new CreateDBClusterCommand(input);
72
74
  * const response = await client.send(command);
@@ -128,6 +130,11 @@ declare const CreateDBClusterCommand_base: {
128
130
  * // ],
129
131
  * // DeletionProtection: true || false,
130
132
  * // StorageType: "STRING_VALUE",
133
+ * // MasterUserSecret: { // ClusterMasterUserSecret
134
+ * // SecretArn: "STRING_VALUE",
135
+ * // SecretStatus: "STRING_VALUE",
136
+ * // KmsKeyId: "STRING_VALUE",
137
+ * // },
131
138
  * // },
132
139
  * // };
133
140
  *
@@ -100,6 +100,11 @@ declare const DeleteDBClusterCommand_base: {
100
100
  * // ],
101
101
  * // DeletionProtection: true || false,
102
102
  * // StorageType: "STRING_VALUE",
103
+ * // MasterUserSecret: { // ClusterMasterUserSecret
104
+ * // SecretArn: "STRING_VALUE",
105
+ * // SecretStatus: "STRING_VALUE",
106
+ * // KmsKeyId: "STRING_VALUE",
107
+ * // },
103
108
  * // },
104
109
  * // };
105
110
  *
@@ -114,6 +114,11 @@ declare const DescribeDBClustersCommand_base: {
114
114
  * // ],
115
115
  * // DeletionProtection: true || false,
116
116
  * // StorageType: "STRING_VALUE",
117
+ * // MasterUserSecret: { // ClusterMasterUserSecret
118
+ * // SecretArn: "STRING_VALUE",
119
+ * // SecretStatus: "STRING_VALUE",
120
+ * // KmsKeyId: "STRING_VALUE",
121
+ * // },
117
122
  * // },
118
123
  * // ],
119
124
  * // };
@@ -100,6 +100,11 @@ declare const FailoverDBClusterCommand_base: {
100
100
  * // ],
101
101
  * // DeletionProtection: true || false,
102
102
  * // StorageType: "STRING_VALUE",
103
+ * // MasterUserSecret: { // ClusterMasterUserSecret
104
+ * // SecretArn: "STRING_VALUE",
105
+ * // SecretStatus: "STRING_VALUE",
106
+ * // KmsKeyId: "STRING_VALUE",
107
+ * // },
103
108
  * // },
104
109
  * // };
105
110
  *
@@ -61,6 +61,9 @@ declare const ModifyDBClusterCommand_base: {
61
61
  * AllowMajorVersionUpgrade: true || false,
62
62
  * DeletionProtection: true || false,
63
63
  * StorageType: "STRING_VALUE",
64
+ * ManageMasterUserPassword: true || false,
65
+ * MasterUserSecretKmsKeyId: "STRING_VALUE",
66
+ * RotateMasterUserPassword: true || false,
64
67
  * };
65
68
  * const command = new ModifyDBClusterCommand(input);
66
69
  * const response = await client.send(command);
@@ -122,6 +125,11 @@ declare const ModifyDBClusterCommand_base: {
122
125
  * // ],
123
126
  * // DeletionProtection: true || false,
124
127
  * // StorageType: "STRING_VALUE",
128
+ * // MasterUserSecret: { // ClusterMasterUserSecret
129
+ * // SecretArn: "STRING_VALUE",
130
+ * // SecretStatus: "STRING_VALUE",
131
+ * // KmsKeyId: "STRING_VALUE",
132
+ * // },
125
133
  * // },
126
134
  * // };
127
135
  *
@@ -123,6 +123,11 @@ declare const RestoreDBClusterFromSnapshotCommand_base: {
123
123
  * // ],
124
124
  * // DeletionProtection: true || false,
125
125
  * // StorageType: "STRING_VALUE",
126
+ * // MasterUserSecret: { // ClusterMasterUserSecret
127
+ * // SecretArn: "STRING_VALUE",
128
+ * // SecretStatus: "STRING_VALUE",
129
+ * // KmsKeyId: "STRING_VALUE",
130
+ * // },
126
131
  * // },
127
132
  * // };
128
133
  *
@@ -122,6 +122,11 @@ declare const RestoreDBClusterToPointInTimeCommand_base: {
122
122
  * // ],
123
123
  * // DeletionProtection: true || false,
124
124
  * // StorageType: "STRING_VALUE",
125
+ * // MasterUserSecret: { // ClusterMasterUserSecret
126
+ * // SecretArn: "STRING_VALUE",
127
+ * // SecretStatus: "STRING_VALUE",
128
+ * // KmsKeyId: "STRING_VALUE",
129
+ * // },
125
130
  * // },
126
131
  * // };
127
132
  *
@@ -99,6 +99,11 @@ declare const StartDBClusterCommand_base: {
99
99
  * // ],
100
100
  * // DeletionProtection: true || false,
101
101
  * // StorageType: "STRING_VALUE",
102
+ * // MasterUserSecret: { // ClusterMasterUserSecret
103
+ * // SecretArn: "STRING_VALUE",
104
+ * // SecretStatus: "STRING_VALUE",
105
+ * // KmsKeyId: "STRING_VALUE",
106
+ * // },
102
107
  * // },
103
108
  * // };
104
109
  *
@@ -100,6 +100,11 @@ declare const StopDBClusterCommand_base: {
100
100
  * // ],
101
101
  * // DeletionProtection: true || false,
102
102
  * // StorageType: "STRING_VALUE",
103
+ * // MasterUserSecret: { // ClusterMasterUserSecret
104
+ * // SecretArn: "STRING_VALUE",
105
+ * // SecretStatus: "STRING_VALUE",
106
+ * // KmsKeyId: "STRING_VALUE",
107
+ * // },
103
108
  * // },
104
109
  * // };
105
110
  *
@@ -1008,6 +1008,24 @@ export interface CreateDBClusterMessage {
1008
1008
  * @public
1009
1009
  */
1010
1010
  StorageType?: string | undefined;
1011
+ /**
1012
+ * <p>Specifies whether to manage the master user password with Amazon Web Services Secrets Manager.</p>
1013
+ * <p>Constraint: You can't manage the master user password with Amazon Web Services Secrets Manager if <code>MasterUserPassword</code> is specified.</p>
1014
+ * @public
1015
+ */
1016
+ ManageMasterUserPassword?: boolean | undefined;
1017
+ /**
1018
+ * <p>The Amazon Web Services KMS key identifier to encrypt a secret that is automatically generated and managed in Amazon Web Services Secrets Manager.
1019
+ * This setting is valid only if the master user password is managed by Amazon DocumentDB in Amazon Web Services Secrets Manager for the DB cluster.</p>
1020
+ * <p>The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.
1021
+ * To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN.</p>
1022
+ * <p>If you don't specify <code>MasterUserSecretKmsKeyId</code>, then the <code>aws/secretsmanager</code> KMS key is used to encrypt the secret.
1023
+ * If the secret is in a different Amazon Web Services account, then you can't use the <code>aws/secretsmanager</code> KMS key to encrypt the secret, and you must use a customer managed KMS key.</p>
1024
+ * <p>There is a default KMS key for your Amazon Web Services account.
1025
+ * Your Amazon Web Services account has a different default KMS key for each Amazon Web Services Region.</p>
1026
+ * @public
1027
+ */
1028
+ MasterUserSecretKmsKeyId?: string | undefined;
1011
1029
  }
1012
1030
  /**
1013
1031
  * <p>Describes an Identity and Access Management (IAM) role that is associated with a
@@ -1070,6 +1088,45 @@ export interface DBClusterMember {
1070
1088
  */
1071
1089
  PromotionTier?: number | undefined;
1072
1090
  }
1091
+ /**
1092
+ * <p>Contains the secret managed by Amazon DocumentDB in Amazon Web Services Secrets Manager for the master user password.</p>
1093
+ * @public
1094
+ */
1095
+ export interface ClusterMasterUserSecret {
1096
+ /**
1097
+ * <p>The Amazon Resource Name (ARN) of the secret.</p>
1098
+ * @public
1099
+ */
1100
+ SecretArn?: string | undefined;
1101
+ /**
1102
+ * <p>The status of the secret.</p>
1103
+ * <p>The possible status values include the following:</p>
1104
+ * <ul>
1105
+ * <li>
1106
+ * <p>creating - The secret is being created.</p>
1107
+ * </li>
1108
+ * <li>
1109
+ * <p>active - The secret is available for normal use and rotation.</p>
1110
+ * </li>
1111
+ * <li>
1112
+ * <p>rotating - The secret is being rotated.</p>
1113
+ * </li>
1114
+ * <li>
1115
+ * <p>impaired - The secret can be used to access database credentials, but it can't be rotated.
1116
+ * A secret might have this status if, for example, permissions are changed so that Amazon DocumentDB can no longer access either the secret or the KMS key for the secret.</p>
1117
+ * <p>When a secret has this status, you can correct the condition that caused the status.
1118
+ * Alternatively, modify the instance to turn off automatic management of database credentials, and then modify the instance again to turn on automatic management of database credentials.</p>
1119
+ * </li>
1120
+ * </ul>
1121
+ * @public
1122
+ */
1123
+ SecretStatus?: string | undefined;
1124
+ /**
1125
+ * <p>The Amazon Web Services KMS key identifier that is used to encrypt the secret.</p>
1126
+ * @public
1127
+ */
1128
+ KmsKeyId?: string | undefined;
1129
+ }
1073
1130
  /**
1074
1131
  * <p>Used as a response element for queries on virtual private cloud (VPC) security group
1075
1132
  * membership.</p>
@@ -1279,6 +1336,11 @@ export interface DBCluster {
1279
1336
  * @public
1280
1337
  */
1281
1338
  StorageType?: string | undefined;
1339
+ /**
1340
+ * <p>The secret managed by Amazon DocumentDB in Amazon Web Services Secrets Manager for the master user password.</p>
1341
+ * @public
1342
+ */
1343
+ MasterUserSecret?: ClusterMasterUserSecret | undefined;
1282
1344
  }
1283
1345
  /**
1284
1346
  * @public
@@ -4514,6 +4576,44 @@ export interface ModifyDBClusterMessage {
4514
4576
  * @public
4515
4577
  */
4516
4578
  StorageType?: string | undefined;
4579
+ /**
4580
+ * <p>Specifies whether to manage the master user password with Amazon Web Services Secrets Manager.
4581
+ * If the cluster doesn't manage the master user password with Amazon Web Services Secrets Manager, you can turn on this management.
4582
+ * In this case, you can't specify <code>MasterUserPassword</code>.
4583
+ * If the cluster already manages the master user password with Amazon Web Services Secrets Manager, and you specify that the master user password is not managed with Amazon Web Services Secrets Manager, then you must specify <code>MasterUserPassword</code>.
4584
+ * In this case, Amazon DocumentDB deletes the secret and uses the new password for the master user specified by <code>MasterUserPassword</code>.</p>
4585
+ * @public
4586
+ */
4587
+ ManageMasterUserPassword?: boolean | undefined;
4588
+ /**
4589
+ * <p>The Amazon Web Services KMS key identifier to encrypt a secret that is automatically generated and managed in Amazon Web Services Secrets Manager.</p>
4590
+ * <p>This setting is valid only if both of the following conditions are met:</p>
4591
+ * <ul>
4592
+ * <li>
4593
+ * <p>The cluster doesn't manage the master user password in Amazon Web Services Secrets Manager.
4594
+ * If the cluster already manages the master user password in Amazon Web Services Secrets Manager, you can't change the KMS key that is used to encrypt the secret.</p>
4595
+ * </li>
4596
+ * <li>
4597
+ * <p>You are enabling <code>ManageMasterUserPassword</code> to manage the master user password in Amazon Web Services Secrets Manager.
4598
+ * If you are turning on <code>ManageMasterUserPassword</code> and don't specify <code>MasterUserSecretKmsKeyId</code>, then the <code>aws/secretsmanager</code> KMS key is used to encrypt the secret.
4599
+ * If the secret is in a different Amazon Web Services account, then you can't use the <code>aws/secretsmanager</code> KMS key to encrypt the secret, and you must use a customer managed KMS key.</p>
4600
+ * </li>
4601
+ * </ul>
4602
+ * <p>The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.
4603
+ * To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN.</p>
4604
+ * <p>There is a default KMS key for your Amazon Web Services account.
4605
+ * Your Amazon Web Services account has a different default KMS key for each Amazon Web Services Region.</p>
4606
+ * @public
4607
+ */
4608
+ MasterUserSecretKmsKeyId?: string | undefined;
4609
+ /**
4610
+ * <p>Specifies whether to rotate the secret managed by Amazon Web Services Secrets Manager for the master user password.</p>
4611
+ * <p>This setting is valid only if the master user password is managed by Amazon DocumentDB in Amazon Web Services Secrets Manager for the cluster.
4612
+ * The secret value contains the updated password.</p>
4613
+ * <p>Constraint: You must apply the change immediately when rotating the master user password.</p>
4614
+ * @public
4615
+ */
4616
+ RotateMasterUserPassword?: boolean | undefined;
4517
4617
  }
4518
4618
  /**
4519
4619
  * @public
@@ -241,6 +241,8 @@ export interface CreateDBClusterMessage {
241
241
  DeletionProtection?: boolean | undefined;
242
242
  GlobalClusterIdentifier?: string | undefined;
243
243
  StorageType?: string | undefined;
244
+ ManageMasterUserPassword?: boolean | undefined;
245
+ MasterUserSecretKmsKeyId?: string | undefined;
244
246
  }
245
247
  export interface DBClusterRole {
246
248
  RoleArn?: string | undefined;
@@ -252,6 +254,11 @@ export interface DBClusterMember {
252
254
  DBClusterParameterGroupStatus?: string | undefined;
253
255
  PromotionTier?: number | undefined;
254
256
  }
257
+ export interface ClusterMasterUserSecret {
258
+ SecretArn?: string | undefined;
259
+ SecretStatus?: string | undefined;
260
+ KmsKeyId?: string | undefined;
261
+ }
255
262
  export interface VpcSecurityGroupMembership {
256
263
  VpcSecurityGroupId?: string | undefined;
257
264
  Status?: string | undefined;
@@ -290,6 +297,7 @@ export interface DBCluster {
290
297
  EnabledCloudwatchLogsExports?: string[] | undefined;
291
298
  DeletionProtection?: boolean | undefined;
292
299
  StorageType?: string | undefined;
300
+ MasterUserSecret?: ClusterMasterUserSecret | undefined;
293
301
  }
294
302
  export interface CreateDBClusterResult {
295
303
  DBCluster?: DBCluster | undefined;
@@ -1091,6 +1099,9 @@ export interface ModifyDBClusterMessage {
1091
1099
  AllowMajorVersionUpgrade?: boolean | undefined;
1092
1100
  DeletionProtection?: boolean | undefined;
1093
1101
  StorageType?: string | undefined;
1102
+ ManageMasterUserPassword?: boolean | undefined;
1103
+ MasterUserSecretKmsKeyId?: string | undefined;
1104
+ RotateMasterUserPassword?: boolean | undefined;
1094
1105
  }
1095
1106
  export interface ModifyDBClusterResult {
1096
1107
  DBCluster?: DBCluster | undefined;
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-docdb",
3
3
  "description": "AWS SDK for JavaScript Docdb Client for Node.js, Browser and React Native",
4
- "version": "3.714.0",
4
+ "version": "3.717.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "node ../../scripts/compilation/inline client-docdb",
@@ -20,41 +20,41 @@
20
20
  "dependencies": {
21
21
  "@aws-crypto/sha256-browser": "5.2.0",
22
22
  "@aws-crypto/sha256-js": "5.2.0",
23
- "@aws-sdk/client-sso-oidc": "3.714.0",
24
- "@aws-sdk/client-sts": "3.714.0",
25
- "@aws-sdk/core": "3.714.0",
26
- "@aws-sdk/credential-provider-node": "3.714.0",
23
+ "@aws-sdk/client-sso-oidc": "3.716.0",
24
+ "@aws-sdk/client-sts": "3.716.0",
25
+ "@aws-sdk/core": "3.716.0",
26
+ "@aws-sdk/credential-provider-node": "3.716.0",
27
27
  "@aws-sdk/middleware-host-header": "3.714.0",
28
28
  "@aws-sdk/middleware-logger": "3.714.0",
29
29
  "@aws-sdk/middleware-recursion-detection": "3.714.0",
30
- "@aws-sdk/middleware-sdk-rds": "3.714.0",
31
- "@aws-sdk/middleware-user-agent": "3.714.0",
30
+ "@aws-sdk/middleware-sdk-rds": "3.716.0",
31
+ "@aws-sdk/middleware-user-agent": "3.716.0",
32
32
  "@aws-sdk/region-config-resolver": "3.714.0",
33
33
  "@aws-sdk/types": "3.714.0",
34
34
  "@aws-sdk/util-endpoints": "3.714.0",
35
35
  "@aws-sdk/util-user-agent-browser": "3.714.0",
36
- "@aws-sdk/util-user-agent-node": "3.714.0",
36
+ "@aws-sdk/util-user-agent-node": "3.716.0",
37
37
  "@smithy/config-resolver": "^3.0.13",
38
38
  "@smithy/core": "^2.5.5",
39
39
  "@smithy/fetch-http-handler": "^4.1.2",
40
40
  "@smithy/hash-node": "^3.0.11",
41
41
  "@smithy/invalid-dependency": "^3.0.11",
42
42
  "@smithy/middleware-content-length": "^3.0.13",
43
- "@smithy/middleware-endpoint": "^3.2.5",
44
- "@smithy/middleware-retry": "^3.0.30",
43
+ "@smithy/middleware-endpoint": "^3.2.6",
44
+ "@smithy/middleware-retry": "^3.0.31",
45
45
  "@smithy/middleware-serde": "^3.0.11",
46
46
  "@smithy/middleware-stack": "^3.0.11",
47
47
  "@smithy/node-config-provider": "^3.1.12",
48
48
  "@smithy/node-http-handler": "^3.3.2",
49
49
  "@smithy/protocol-http": "^4.1.8",
50
- "@smithy/smithy-client": "^3.5.0",
50
+ "@smithy/smithy-client": "^3.5.1",
51
51
  "@smithy/types": "^3.7.2",
52
52
  "@smithy/url-parser": "^3.0.11",
53
53
  "@smithy/util-base64": "^3.0.0",
54
54
  "@smithy/util-body-length-browser": "^3.0.0",
55
55
  "@smithy/util-body-length-node": "^3.0.0",
56
- "@smithy/util-defaults-mode-browser": "^3.0.30",
57
- "@smithy/util-defaults-mode-node": "^3.0.30",
56
+ "@smithy/util-defaults-mode-browser": "^3.0.31",
57
+ "@smithy/util-defaults-mode-node": "^3.0.31",
58
58
  "@smithy/util-endpoints": "^2.1.7",
59
59
  "@smithy/util-middleware": "^3.0.11",
60
60
  "@smithy/util-retry": "^3.0.11",