@aws-sdk/client-secrets-manager 3.34.0 → 3.37.0

package/commands/PutSecretValueCommand.ts

@@ -1,181 +0,0 @@
-import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
-import { PutSecretValueRequest, PutSecretValueResponse } from "../models/models_0";
-import {
-  deserializeAws_json1_1PutSecretValueCommand,
-  serializeAws_json1_1PutSecretValueCommand,
-} from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-import {
-  FinalizeHandlerArguments,
-  Handler,
-  HandlerExecutionContext,
-  MiddlewareStack,
-  HttpHandlerOptions as __HttpHandlerOptions,
-  MetadataBearer as __MetadataBearer,
-  SerdeContext as __SerdeContext,
-} from "@aws-sdk/types";
-
-export interface PutSecretValueCommandInput extends PutSecretValueRequest {}
-export interface PutSecretValueCommandOutput extends PutSecretValueResponse, __MetadataBearer {}
-
-/**
- * <p>Stores a new encrypted secret value in the specified secret. To do this, the operation
- *       creates a new version and attaches it to the secret. The version can contain a new
- *         <code>SecretString</code> value or a new <code>SecretBinary</code> value. You can also
- *       specify the staging labels that are initially attached to the new version.</p>
- *          <note>
- *             <p>The Secrets Manager console uses only the <code>SecretString</code> field. To add binary data to a
- *         secret with the <code>SecretBinary</code> field you must use the Amazon Web Services CLI or one of the
- *         Amazon Web Services SDKs.</p>
- *          </note>
- *          <ul>
- *             <li>
- *                <p>If this operation creates the first version for the secret then Secrets Manager
- *           automatically attaches the staging label <code>AWSCURRENT</code> to the new version.</p>
- *             </li>
- *             <li>
- *                <p>If you do not specify a value for VersionStages then Secrets Manager automatically
- *           moves the staging label <code>AWSCURRENT</code> to this new version.</p>
- *             </li>
- *             <li>
- *                <p>If this operation moves the staging label <code>AWSCURRENT</code> from another version to this
- *           version, then Secrets Manager also automatically moves the staging label <code>AWSPREVIOUS</code> to
- *           the version that <code>AWSCURRENT</code> was removed from.</p>
- *             </li>
- *             <li>
- *                <p>This operation is idempotent. If a version with a <code>VersionId</code> with the same
- *           value as the <code>ClientRequestToken</code> parameter already exists and you specify the
- *           same secret data, the operation succeeds but does nothing. However, if the secret data is
- *           different, then the operation fails because you cannot modify an existing version; you can
- *           only create new ones.</p>
- *             </li>
- *          </ul>
- *          <note>
- *             <ul>
- *                <li>
- *                   <p>If you call an operation to encrypt or decrypt the <code>SecretString</code>
- *           or <code>SecretBinary</code> for a secret in the same account as the calling user and that
- *           secret doesn't specify a Amazon Web Services KMS encryption key, Secrets Manager uses the account's default
- *           Amazon Web Services managed customer master key (CMK) with the alias <code>aws/secretsmanager</code>. If this key
- *           doesn't already exist in your account then Secrets Manager creates it for you automatically. All
- *           users and roles in the same Amazon Web Services account automatically have access to use the default CMK.
- *           Note that if an Secrets Manager API call results in Amazon Web Services creating the account's
- *           Amazon Web Services-managed CMK, it can result in a one-time significant delay in returning the
- *           result.</p>
- *                </li>
- *                <li>
- *                   <p>If the secret resides in a different Amazon Web Services account from the credentials calling an API that
- *           requires encryption or decryption of the secret value then you must create and use a custom
- *           Amazon Web Services KMS CMK because you can't access the default CMK for the account using credentials
- *           from a different Amazon Web Services account. Store the ARN of the CMK in the secret when you create the
- *           secret or when you update it by including it in the <code>KMSKeyId</code>. If you call an
- *           API that must encrypt or decrypt <code>SecretString</code> or <code>SecretBinary</code>
- *           using credentials from a different account then the Amazon Web Services KMS key policy must grant cross-account
- *           access to that other account's user or role for both the kms:GenerateDataKey and
- *           kms:Decrypt operations.</p>
- *                </li>
- *             </ul>
- *          </note>
- *          <p>
- *             <b>Minimum permissions</b>
- *          </p>
- *          <p>To run this command, you must have the following permissions:</p>
- *          <ul>
- *             <li>
- *                <p>secretsmanager:PutSecretValue</p>
- *             </li>
- *             <li>
- *                <p>kms:GenerateDataKey - needed only if you use a customer-managed Amazon Web Services KMS key to encrypt
- *           the secret. You do not need this permission to use the account's default Amazon Web Services managed CMK
- *           for Secrets Manager.</p>
- *             </li>
- *          </ul>
- *          <p>
- *             <b>Related operations</b>
- *          </p>
- *          <ul>
- *             <li>
- *                <p>To retrieve the encrypted value you store in the version of a secret, use <a>GetSecretValue</a>.</p>
- *             </li>
- *             <li>
- *                <p>To create a secret, use <a>CreateSecret</a>.</p>
- *             </li>
- *             <li>
- *                <p>To get the details for a secret, use <a>DescribeSecret</a>.</p>
- *             </li>
- *             <li>
- *                <p>To list the versions attached to a secret, use <a>ListSecretVersionIds</a>.</p>
- *             </li>
- *          </ul>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { SecretsManagerClient, PutSecretValueCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
- * // const { SecretsManagerClient, PutSecretValueCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
- * const client = new SecretsManagerClient(config);
- * const command = new PutSecretValueCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link PutSecretValueCommandInput} for command's `input` shape.
- * @see {@link PutSecretValueCommandOutput} for command's `response` shape.
- * @see {@link SecretsManagerClientResolvedConfig | config} for command's `input` shape.
- *
- */
-export class PutSecretValueCommand extends $Command<
-  PutSecretValueCommandInput,
-  PutSecretValueCommandOutput,
-  SecretsManagerClientResolvedConfig
-> {
-  // Start section: command_properties
-  // End section: command_properties
-
-  constructor(readonly input: PutSecretValueCommandInput) {
-    // Start section: command_constructor
-    super();
-    // End section: command_constructor
-  }
-
-  /**
-   * @internal
-   */
-  resolveMiddleware(
-    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
-    configuration: SecretsManagerClientResolvedConfig,
-    options?: __HttpHandlerOptions
-  ): Handler<PutSecretValueCommandInput, PutSecretValueCommandOutput> {
-    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-
-    const stack = clientStack.concat(this.middlewareStack);
-
-    const { logger } = configuration;
-    const clientName = "SecretsManagerClient";
-    const commandName = "PutSecretValueCommand";
-    const handlerExecutionContext: HandlerExecutionContext = {
-      logger,
-      clientName,
-      commandName,
-      inputFilterSensitiveLog: PutSecretValueRequest.filterSensitiveLog,
-      outputFilterSensitiveLog: PutSecretValueResponse.filterSensitiveLog,
-    };
-    const { requestHandler } = configuration;
-    return stack.resolve(
-      (request: FinalizeHandlerArguments<any>) =>
-        requestHandler.handle(request.request as __HttpRequest, options || {}),
-      handlerExecutionContext
-    );
-  }
-
-  private serialize(input: PutSecretValueCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
-    return serializeAws_json1_1PutSecretValueCommand(input, context);
-  }
-
-  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<PutSecretValueCommandOutput> {
-    return deserializeAws_json1_1PutSecretValueCommand(output, context);
-  }
-
-  // Start section: command_body_extra
-  // End section: command_body_extra
-}

package/commands/RemoveRegionsFromReplicationCommand.ts

@@ -1,99 +0,0 @@
-import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
-import { RemoveRegionsFromReplicationRequest, RemoveRegionsFromReplicationResponse } from "../models/models_0";
-import {
-  deserializeAws_json1_1RemoveRegionsFromReplicationCommand,
-  serializeAws_json1_1RemoveRegionsFromReplicationCommand,
-} from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-import {
-  FinalizeHandlerArguments,
-  Handler,
-  HandlerExecutionContext,
-  MiddlewareStack,
-  HttpHandlerOptions as __HttpHandlerOptions,
-  MetadataBearer as __MetadataBearer,
-  SerdeContext as __SerdeContext,
-} from "@aws-sdk/types";
-
-export interface RemoveRegionsFromReplicationCommandInput extends RemoveRegionsFromReplicationRequest {}
-export interface RemoveRegionsFromReplicationCommandOutput
-  extends RemoveRegionsFromReplicationResponse,
-    __MetadataBearer {}
-
-/**
- * <p>Remove regions from replication.</p>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { SecretsManagerClient, RemoveRegionsFromReplicationCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
- * // const { SecretsManagerClient, RemoveRegionsFromReplicationCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
- * const client = new SecretsManagerClient(config);
- * const command = new RemoveRegionsFromReplicationCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link RemoveRegionsFromReplicationCommandInput} for command's `input` shape.
- * @see {@link RemoveRegionsFromReplicationCommandOutput} for command's `response` shape.
- * @see {@link SecretsManagerClientResolvedConfig | config} for command's `input` shape.
- *
- */
-export class RemoveRegionsFromReplicationCommand extends $Command<
-  RemoveRegionsFromReplicationCommandInput,
-  RemoveRegionsFromReplicationCommandOutput,
-  SecretsManagerClientResolvedConfig
-> {
-  // Start section: command_properties
-  // End section: command_properties
-
-  constructor(readonly input: RemoveRegionsFromReplicationCommandInput) {
-    // Start section: command_constructor
-    super();
-    // End section: command_constructor
-  }
-
-  /**
-   * @internal
-   */
-  resolveMiddleware(
-    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
-    configuration: SecretsManagerClientResolvedConfig,
-    options?: __HttpHandlerOptions
-  ): Handler<RemoveRegionsFromReplicationCommandInput, RemoveRegionsFromReplicationCommandOutput> {
-    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-
-    const stack = clientStack.concat(this.middlewareStack);
-
-    const { logger } = configuration;
-    const clientName = "SecretsManagerClient";
-    const commandName = "RemoveRegionsFromReplicationCommand";
-    const handlerExecutionContext: HandlerExecutionContext = {
-      logger,
-      clientName,
-      commandName,
-      inputFilterSensitiveLog: RemoveRegionsFromReplicationRequest.filterSensitiveLog,
-      outputFilterSensitiveLog: RemoveRegionsFromReplicationResponse.filterSensitiveLog,
-    };
-    const { requestHandler } = configuration;
-    return stack.resolve(
-      (request: FinalizeHandlerArguments<any>) =>
-        requestHandler.handle(request.request as __HttpRequest, options || {}),
-      handlerExecutionContext
-    );
-  }
-
-  private serialize(input: RemoveRegionsFromReplicationCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
-    return serializeAws_json1_1RemoveRegionsFromReplicationCommand(input, context);
-  }
-
-  private deserialize(
-    output: __HttpResponse,
-    context: __SerdeContext
-  ): Promise<RemoveRegionsFromReplicationCommandOutput> {
-    return deserializeAws_json1_1RemoveRegionsFromReplicationCommand(output, context);
-  }
-
-  // Start section: command_body_extra
-  // End section: command_body_extra
-}

package/commands/ReplicateSecretToRegionsCommand.ts

@@ -1,95 +0,0 @@
-import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
-import { ReplicateSecretToRegionsRequest, ReplicateSecretToRegionsResponse } from "../models/models_0";
-import {
-  deserializeAws_json1_1ReplicateSecretToRegionsCommand,
-  serializeAws_json1_1ReplicateSecretToRegionsCommand,
-} from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-import {
-  FinalizeHandlerArguments,
-  Handler,
-  HandlerExecutionContext,
-  MiddlewareStack,
-  HttpHandlerOptions as __HttpHandlerOptions,
-  MetadataBearer as __MetadataBearer,
-  SerdeContext as __SerdeContext,
-} from "@aws-sdk/types";
-
-export interface ReplicateSecretToRegionsCommandInput extends ReplicateSecretToRegionsRequest {}
-export interface ReplicateSecretToRegionsCommandOutput extends ReplicateSecretToRegionsResponse, __MetadataBearer {}
-
-/**
- * <p>Converts an existing secret to a multi-Region secret and begins replication the secret to a
- *       list of new regions. </p>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { SecretsManagerClient, ReplicateSecretToRegionsCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
- * // const { SecretsManagerClient, ReplicateSecretToRegionsCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
- * const client = new SecretsManagerClient(config);
- * const command = new ReplicateSecretToRegionsCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link ReplicateSecretToRegionsCommandInput} for command's `input` shape.
- * @see {@link ReplicateSecretToRegionsCommandOutput} for command's `response` shape.
- * @see {@link SecretsManagerClientResolvedConfig | config} for command's `input` shape.
- *
- */
-export class ReplicateSecretToRegionsCommand extends $Command<
-  ReplicateSecretToRegionsCommandInput,
-  ReplicateSecretToRegionsCommandOutput,
-  SecretsManagerClientResolvedConfig
-> {
-  // Start section: command_properties
-  // End section: command_properties
-
-  constructor(readonly input: ReplicateSecretToRegionsCommandInput) {
-    // Start section: command_constructor
-    super();
-    // End section: command_constructor
-  }
-
-  /**
-   * @internal
-   */
-  resolveMiddleware(
-    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
-    configuration: SecretsManagerClientResolvedConfig,
-    options?: __HttpHandlerOptions
-  ): Handler<ReplicateSecretToRegionsCommandInput, ReplicateSecretToRegionsCommandOutput> {
-    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-
-    const stack = clientStack.concat(this.middlewareStack);
-
-    const { logger } = configuration;
-    const clientName = "SecretsManagerClient";
-    const commandName = "ReplicateSecretToRegionsCommand";
-    const handlerExecutionContext: HandlerExecutionContext = {
-      logger,
-      clientName,
-      commandName,
-      inputFilterSensitiveLog: ReplicateSecretToRegionsRequest.filterSensitiveLog,
-      outputFilterSensitiveLog: ReplicateSecretToRegionsResponse.filterSensitiveLog,
-    };
-    const { requestHandler } = configuration;
-    return stack.resolve(
-      (request: FinalizeHandlerArguments<any>) =>
-        requestHandler.handle(request.request as __HttpRequest, options || {}),
-      handlerExecutionContext
-    );
-  }
-
-  private serialize(input: ReplicateSecretToRegionsCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
-    return serializeAws_json1_1ReplicateSecretToRegionsCommand(input, context);
-  }
-
-  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<ReplicateSecretToRegionsCommandOutput> {
-    return deserializeAws_json1_1ReplicateSecretToRegionsCommand(output, context);
-  }
-
-  // Start section: command_body_extra
-  // End section: command_body_extra
-}

package/commands/RestoreSecretCommand.ts

@@ -1,112 +0,0 @@
-import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
-import { RestoreSecretRequest, RestoreSecretResponse } from "../models/models_0";
-import {
-  deserializeAws_json1_1RestoreSecretCommand,
-  serializeAws_json1_1RestoreSecretCommand,
-} from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-import {
-  FinalizeHandlerArguments,
-  Handler,
-  HandlerExecutionContext,
-  MiddlewareStack,
-  HttpHandlerOptions as __HttpHandlerOptions,
-  MetadataBearer as __MetadataBearer,
-  SerdeContext as __SerdeContext,
-} from "@aws-sdk/types";
-
-export interface RestoreSecretCommandInput extends RestoreSecretRequest {}
-export interface RestoreSecretCommandOutput extends RestoreSecretResponse, __MetadataBearer {}
-
-/**
- * <p>Cancels the scheduled deletion of a secret by removing the <code>DeletedDate</code> time
- *       stamp. This makes the secret accessible to query once again.</p>
- *          <p>
- *             <b>Minimum permissions</b>
- *          </p>
- *          <p>To run this command, you must have the following permissions:</p>
- *          <ul>
- *             <li>
- *                <p>secretsmanager:RestoreSecret</p>
- *             </li>
- *          </ul>
- *          <p>
- *             <b>Related operations</b>
- *          </p>
- *          <ul>
- *             <li>
- *                <p>To delete a secret, use <a>DeleteSecret</a>.</p>
- *             </li>
- *          </ul>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { SecretsManagerClient, RestoreSecretCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
- * // const { SecretsManagerClient, RestoreSecretCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
- * const client = new SecretsManagerClient(config);
- * const command = new RestoreSecretCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link RestoreSecretCommandInput} for command's `input` shape.
- * @see {@link RestoreSecretCommandOutput} for command's `response` shape.
- * @see {@link SecretsManagerClientResolvedConfig | config} for command's `input` shape.
- *
- */
-export class RestoreSecretCommand extends $Command<
-  RestoreSecretCommandInput,
-  RestoreSecretCommandOutput,
-  SecretsManagerClientResolvedConfig
-> {
-  // Start section: command_properties
-  // End section: command_properties
-
-  constructor(readonly input: RestoreSecretCommandInput) {
-    // Start section: command_constructor
-    super();
-    // End section: command_constructor
-  }
-
-  /**
-   * @internal
-   */
-  resolveMiddleware(
-    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
-    configuration: SecretsManagerClientResolvedConfig,
-    options?: __HttpHandlerOptions
-  ): Handler<RestoreSecretCommandInput, RestoreSecretCommandOutput> {
-    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-
-    const stack = clientStack.concat(this.middlewareStack);
-
-    const { logger } = configuration;
-    const clientName = "SecretsManagerClient";
-    const commandName = "RestoreSecretCommand";
-    const handlerExecutionContext: HandlerExecutionContext = {
-      logger,
-      clientName,
-      commandName,
-      inputFilterSensitiveLog: RestoreSecretRequest.filterSensitiveLog,
-      outputFilterSensitiveLog: RestoreSecretResponse.filterSensitiveLog,
-    };
-    const { requestHandler } = configuration;
-    return stack.resolve(
-      (request: FinalizeHandlerArguments<any>) =>
-        requestHandler.handle(request.request as __HttpRequest, options || {}),
-      handlerExecutionContext
-    );
-  }
-
-  private serialize(input: RestoreSecretCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
-    return serializeAws_json1_1RestoreSecretCommand(input, context);
-  }
-
-  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<RestoreSecretCommandOutput> {
-    return deserializeAws_json1_1RestoreSecretCommand(output, context);
-  }
-
-  // Start section: command_body_extra
-  // End section: command_body_extra
-}

package/commands/RotateSecretCommand.ts

@@ -1,155 +0,0 @@
-import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
-import { RotateSecretRequest, RotateSecretResponse } from "../models/models_0";
-import {
-  deserializeAws_json1_1RotateSecretCommand,
-  serializeAws_json1_1RotateSecretCommand,
-} from "../protocols/Aws_json1_1";
-import { getSerdePlugin } from "@aws-sdk/middleware-serde";
-import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
-import { Command as $Command } from "@aws-sdk/smithy-client";
-import {
-  FinalizeHandlerArguments,
-  Handler,
-  HandlerExecutionContext,
-  MiddlewareStack,
-  HttpHandlerOptions as __HttpHandlerOptions,
-  MetadataBearer as __MetadataBearer,
-  SerdeContext as __SerdeContext,
-} from "@aws-sdk/types";
-
-export interface RotateSecretCommandInput extends RotateSecretRequest {}
-export interface RotateSecretCommandOutput extends RotateSecretResponse, __MetadataBearer {}
-
-/**
- * <p>Configures and starts the asynchronous process of rotating this secret. If you include the
- *       configuration parameters, the operation sets those values for the secret and then immediately
- *       starts a rotation. If you do not include the configuration parameters, the operation starts a
- *       rotation with the values already stored in the secret. After the rotation completes, the
- *       protected service and its clients all use the new version of the secret. </p>
- *          <p>This required configuration information includes the ARN of an Amazon Web Services Lambda function and
- *       optionally, the time between scheduled rotations. The Lambda rotation function creates a new
- *       version of the secret and creates or updates the credentials on the protected service to
- *       match. After testing the new credentials, the function marks the new secret with the staging
- *       label <code>AWSCURRENT</code> so that your clients all immediately begin to use the new version. For more
- *       information about rotating secrets and how to configure a Lambda function to rotate the
- *       secrets for your protected service, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html">Rotating Secrets in Amazon Web Services Secrets Manager</a> in the
- *         <i>Amazon Web Services Secrets Manager User Guide</i>.</p>
- *          <p>Secrets Manager schedules the next rotation when the previous
- *     one completes. Secrets Manager schedules the date by adding the rotation interval (number of days) to the
- *     actual date of the last rotation. The service chooses the hour within that 24-hour date window
- *     randomly. The minute is also chosen somewhat randomly, but weighted towards the top of the hour
- *     and influenced by a variety of factors that help distribute load.</p>
- *          <p>The
- *       rotation function must end with the versions of the secret in one of two states:</p>
- *          <ul>
- *             <li>
- *                <p>The <code>AWSPENDING</code> and <code>AWSCURRENT</code> staging labels are attached to the same version of
- *           the secret, or</p>
- *             </li>
- *             <li>
- *                <p>The <code>AWSPENDING</code> staging label is not attached to any version of the secret.</p>
- *             </li>
- *          </ul>
- *          <p>If the <code>AWSPENDING</code> staging label is present but not attached to the same version as
- *       <code>AWSCURRENT</code> then any later invocation of <code>RotateSecret</code> assumes that a previous
- *       rotation request is still in progress and returns an error.</p>
- *          <p>
- *             <b>Minimum permissions</b>
- *          </p>
- *          <p>To run this command, you must have the following permissions:</p>
- *          <ul>
- *             <li>
- *                <p>secretsmanager:RotateSecret</p>
- *             </li>
- *             <li>
- *                <p>lambda:InvokeFunction (on the function specified in the secret's metadata)</p>
- *             </li>
- *          </ul>
- *          <p>
- *             <b>Related operations</b>
- *          </p>
- *          <ul>
- *             <li>
- *                <p>To list the secrets in your account, use <a>ListSecrets</a>.</p>
- *             </li>
- *             <li>
- *                <p>To get the details for a version of a secret, use <a>DescribeSecret</a>.</p>
- *             </li>
- *             <li>
- *                <p>To create a new version of a secret, use <a>CreateSecret</a>.</p>
- *             </li>
- *             <li>
- *                <p>To attach staging labels to or remove staging labels from a version of a secret, use
- *             <a>UpdateSecretVersionStage</a>.</p>
- *             </li>
- *          </ul>
- * @example
- * Use a bare-bones client and the command you need to make an API call.
- * ```javascript
- * import { SecretsManagerClient, RotateSecretCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
- * // const { SecretsManagerClient, RotateSecretCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
- * const client = new SecretsManagerClient(config);
- * const command = new RotateSecretCommand(input);
- * const response = await client.send(command);
- * ```
- *
- * @see {@link RotateSecretCommandInput} for command's `input` shape.
- * @see {@link RotateSecretCommandOutput} for command's `response` shape.
- * @see {@link SecretsManagerClientResolvedConfig | config} for command's `input` shape.
- *
- */
-export class RotateSecretCommand extends $Command<
-  RotateSecretCommandInput,
-  RotateSecretCommandOutput,
-  SecretsManagerClientResolvedConfig
-> {
-  // Start section: command_properties
-  // End section: command_properties
-
-  constructor(readonly input: RotateSecretCommandInput) {
-    // Start section: command_constructor
-    super();
-    // End section: command_constructor
-  }
-
-  /**
-   * @internal
-   */
-  resolveMiddleware(
-    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
-    configuration: SecretsManagerClientResolvedConfig,
-    options?: __HttpHandlerOptions
-  ): Handler<RotateSecretCommandInput, RotateSecretCommandOutput> {
-    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
-
-    const stack = clientStack.concat(this.middlewareStack);
-
-    const { logger } = configuration;
-    const clientName = "SecretsManagerClient";
-    const commandName = "RotateSecretCommand";
-    const handlerExecutionContext: HandlerExecutionContext = {
-      logger,
-      clientName,
-      commandName,
-      inputFilterSensitiveLog: RotateSecretRequest.filterSensitiveLog,
-      outputFilterSensitiveLog: RotateSecretResponse.filterSensitiveLog,
-    };
-    const { requestHandler } = configuration;
-    return stack.resolve(
-      (request: FinalizeHandlerArguments<any>) =>
-        requestHandler.handle(request.request as __HttpRequest, options || {}),
-      handlerExecutionContext
-    );
-  }
-
-  private serialize(input: RotateSecretCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
-    return serializeAws_json1_1RotateSecretCommand(input, context);
-  }
-
-  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<RotateSecretCommandOutput> {
-    return deserializeAws_json1_1RotateSecretCommand(output, context);
-  }
-
-  // Start section: command_body_extra
-  // End section: command_body_extra
-}