@aws-sdk/client-secrets-manager 3.34.0 → 3.37.0

package/dist/types/ts3.4/models/models_0.d.ts

@@ -1,2041 +0,0 @@
-import { MetadataBearer as $MetadataBearer, SmithyException as __SmithyException } from "@aws-sdk/types";
-/**
- * <p>(Optional) Custom type consisting of a <code>Region</code> (required) and the <code>KmsKeyId</code> which can be an <code>ARN</code>, <code>Key ID</code>, or <code>Alias</code>.</p>
- */
-export interface ReplicaRegionType {
-    /**
-     * <p>Describes a single instance of Region objects.</p>
-     */
-    Region?: string;
-    /**
-     * <p>Can be an <code>ARN</code>, <code>Key ID</code>, or <code>Alias</code>. </p>
-     */
-    KmsKeyId?: string;
-}
-export declare namespace ReplicaRegionType {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ReplicaRegionType) => any;
-}
-export interface CancelRotateSecretRequest {
-    /**
-     * <p>Specifies the secret to cancel a rotation request. You can specify either the Amazon
-     *       Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-}
-export declare namespace CancelRotateSecretRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CancelRotateSecretRequest) => any;
-}
-export interface CancelRotateSecretResponse {
-    /**
-     * <p>The ARN of the secret for which rotation was canceled.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret for which rotation was canceled.</p>
-     */
-    Name?: string;
-    /**
-     * <p>The unique identifier of the version of the secret created during the rotation. This
-     *       version might not be complete, and should be evaluated for possible deletion. At the very
-     *       least, you should remove the <code>VersionStage</code> value <code>AWSPENDING</code> to enable this
-     *       version to be deleted. Failing to clean up a cancelled rotation can block you from
-     *       successfully starting future rotations.</p>
-     */
-    VersionId?: string;
-}
-export declare namespace CancelRotateSecretResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CancelRotateSecretResponse) => any;
-}
-/**
- * <p>An error occurred on the server side.</p>
- */
-export interface InternalServiceError extends __SmithyException, $MetadataBearer {
-    name: "InternalServiceError";
-    $fault: "server";
-    Message?: string;
-}
-export declare namespace InternalServiceError {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: InternalServiceError) => any;
-}
-/**
- * <p>You provided an invalid value for a parameter.</p>
- */
-export interface InvalidParameterException extends __SmithyException, $MetadataBearer {
-    name: "InvalidParameterException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace InvalidParameterException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: InvalidParameterException) => any;
-}
-/**
- * <p>You provided a parameter value that is not valid for the current state of the
- *       resource.</p>
- *          <p>Possible causes:</p>
- *          <ul>
- *             <li>
- *                <p>You tried to perform the operation on a secret that's currently marked deleted.</p>
- *             </li>
- *             <li>
- *                <p>You tried to enable rotation on a secret that doesn't already have a Lambda function
- *           ARN configured and you didn't include such an ARN as a parameter in this call. </p>
- *             </li>
- *          </ul>
- */
-export interface InvalidRequestException extends __SmithyException, $MetadataBearer {
-    name: "InvalidRequestException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace InvalidRequestException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: InvalidRequestException) => any;
-}
-/**
- * <p>We can't find the resource that you asked for.</p>
- */
-export interface ResourceNotFoundException extends __SmithyException, $MetadataBearer {
-    name: "ResourceNotFoundException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace ResourceNotFoundException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ResourceNotFoundException) => any;
-}
-/**
- * <p>A structure that contains information about a tag.</p>
- */
-export interface Tag {
-    /**
-     * <p>The key identifier, or name, of the tag.</p>
-     */
-    Key?: string;
-    /**
-     * <p>The string value associated with the key of the tag.</p>
-     */
-    Value?: string;
-}
-export declare namespace Tag {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: Tag) => any;
-}
-export interface CreateSecretRequest {
-    /**
-     * <p>Specifies the friendly name of the new secret.</p>
-     *          <p>The secret name must be ASCII letters, digits, or the following characters :
-     *       /_+=.@-</p>
-     *          <note>
-     *             <p>Do not end your secret name with a hyphen followed by six characters. If you do so, you
-     *         risk confusion and unexpected results when searching for a secret by partial ARN. Secrets Manager
-     *         automatically adds a hyphen and six random characters at the end of the ARN.</p>
-     *          </note>
-     */
-    Name: string | undefined;
-    /**
-     * <p>(Optional) If you include <code>SecretString</code> or <code>SecretBinary</code>, then an
-     *       initial version is created as part of the secret, and this parameter specifies a unique
-     *       identifier for the new version. </p>
-     *          <note>
-     *             <p>If you use the Amazon Web Services CLI or one of the Amazon Web Services SDK to call this operation, then you can
-     *         leave this parameter empty. The CLI or SDK generates a random UUID for you and includes it
-     *         as the value for this parameter in the request. If you don't use the SDK and instead
-     *         generate a raw HTTP request to the Secrets Manager service endpoint, then you must generate a
-     *           <code>ClientRequestToken</code> yourself for the new version and include the value in the
-     *         request.</p>
-     *          </note>
-     *          <p>This value helps ensure idempotency. Secrets Manager uses this value to prevent the accidental
-     *       creation of duplicate versions if there are failures and retries during a rotation. We
-     *       recommend that you generate a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID-type</a> value to
-     *       ensure uniqueness of your versions within the specified secret. </p>
-     *          <ul>
-     *             <li>
-     *                <p>If the <code>ClientRequestToken</code> value isn't already associated with a version
-     *           of the secret then a new version of the secret is created. </p>
-     *             </li>
-     *             <li>
-     *                <p>If a version with this value already exists and the version <code>SecretString</code>
-     *           and <code>SecretBinary</code> values are the same as those in the request, then the
-     *           request is ignored.</p>
-     *             </li>
-     *             <li>
-     *                <p>If a version with this value already exists and that version's
-     *             <code>SecretString</code> and <code>SecretBinary</code> values are different from those
-     *           in the request, then the request fails because you cannot modify an existing version.
-     *           Instead, use <a>PutSecretValue</a> to create a new version.</p>
-     *             </li>
-     *          </ul>
-     *          <p>This value becomes the <code>VersionId</code> of the new version.</p>
-     */
-    ClientRequestToken?: string;
-    /**
-     * <p>(Optional) Specifies a user-provided description of the secret.</p>
-     */
-    Description?: string;
-    /**
-     * <p>(Optional) Specifies the ARN, Key ID, or alias of the Amazon Web Services KMS customer master key (CMK) to
-     *       be used to encrypt the <code>SecretString</code> or <code>SecretBinary</code> values in the
-     *       versions stored in this secret.</p>
-     *          <p>You can specify any of the supported ways to identify a Amazon Web Services KMS key ID. If you need to
-     *       reference a CMK in a different account, you can use only the key ARN or the alias ARN.</p>
-     *          <p>If you don't specify this value, then Secrets Manager defaults to using the Amazon Web Services account's
-     *       default CMK (the one named <code>aws/secretsmanager</code>). If a Amazon Web Services KMS CMK with that name doesn't yet
-     *       exist, then Secrets Manager creates it for you automatically the first time it needs to encrypt a
-     *       version's <code>SecretString</code> or <code>SecretBinary</code> fields.</p>
-     *          <important>
-     *             <p>You can use the account default CMK to encrypt and decrypt only if you call this
-     *         operation using credentials from the same account that owns the secret. If the secret
-     *         resides in a different account, then you must create a custom CMK and specify the ARN in
-     *         this field. </p>
-     *          </important>
-     */
-    KmsKeyId?: string;
-    /**
-     * <p>(Optional) Specifies binary data that you want to encrypt and store in the new version of
-     *       the secret. To use this parameter in the command-line tools, we recommend that you store your
-     *       binary data in a file and then use the appropriate technique for your tool to pass the
-     *       contents of the file as a parameter.</p>
-     *          <p>Either <code>SecretString</code> or <code>SecretBinary</code> must have a value, but not
-     *       both. They cannot both be empty.</p>
-     *          <p>This parameter is not available using the Secrets Manager console. It can be accessed only by
-     *       using the Amazon Web Services CLI or one of the Amazon Web Services SDKs.</p>
-     */
-    SecretBinary?: Uint8Array;
-    /**
-     * <p>(Optional) Specifies text data that you want to encrypt and store in this new version of
-     *       the secret.</p>
-     *          <p>Either <code>SecretString</code> or <code>SecretBinary</code> must have a value, but not
-     *       both. They cannot both be empty.</p>
-     *          <p>If you create a secret by using the Secrets Manager console then Secrets Manager puts the protected
-     *       secret text in only the <code>SecretString</code> parameter. The Secrets Manager console stores the
-     *       information as a JSON structure of key/value pairs that the Lambda rotation function knows how
-     *       to parse.</p>
-     *          <p>For storing multiple values, we recommend that you use a JSON text string argument and
-     *       specify key/value pairs. For information on how to format a JSON parameter for the various
-     *       command line tool environments, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json">Using JSON for
-     *         Parameters</a> in the <i>CLI User Guide</i>. For example:</p>
-     *          <p>
-     *             <code>{"username":"bob","password":"abc123xyz456"}</code>
-     *          </p>
-     *          <p>If your command-line tool or SDK requires quotation marks around the parameter, you should
-     *       use single quotes to avoid confusion with the double quotes required in the JSON text. </p>
-     */
-    SecretString?: string;
-    /**
-     * <p>(Optional) Specifies a list of user-defined tags that are attached to the secret. Each tag
-     *       is a "Key" and "Value" pair of strings. This operation only appends tags to the existing list
-     *       of tags. To remove tags, you must use <a>UntagResource</a>.</p>
-     *          <important>
-     *             <ul>
-     *                <li>
-     *                   <p>Secrets Manager tag key names are case sensitive. A tag with the key "ABC" is a different tag
-     *             from one with key "abc".</p>
-     *                </li>
-     *                <li>
-     *                   <p>If you check tags in IAM policy <code>Condition</code> elements as part of your
-     *             security strategy, then adding or removing a tag can change permissions. If the
-     *             successful completion of this operation would result in you losing your permissions for
-     *             this secret, then this operation is blocked and returns an <code>Access Denied</code>
-     *             error.</p>
-     *                </li>
-     *             </ul>
-     *          </important>
-     *          <p>This parameter requires a JSON text string argument. For information on how to format a
-     *       JSON parameter for the various command line tool environments, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json">Using JSON for
-     *         Parameters</a> in the <i>CLI User Guide</i>. For example:</p>
-     *          <p>
-     *             <code>[{"Key":"CostCenter","Value":"12345"},{"Key":"environment","Value":"production"}]</code>
-     *          </p>
-     *          <p>If your command-line tool or SDK requires quotation marks around the parameter, you should
-     *       use single quotes to avoid confusion with the double quotes required in the JSON text. </p>
-     *             <p>The following basic restrictions apply to tags:</p>
-     *         <ul>
-     *             <li>
-     *                <p>Maximum number of tags per secret—50</p>
-     *             </li>
-     *             <li>
-     *                <p>Maximum key length—127 Unicode characters in UTF-8</p>
-     *             </li>
-     *             <li>
-     *                <p>Maximum value length—255 Unicode characters in UTF-8</p>
-     *             </li>
-     *             <li>
-     *                <p>Tag keys and values are case sensitive.</p>
-     *             </li>
-     *             <li>
-     *                <p>Do not use the <code>aws:</code> prefix in your tag names or values because Amazon Web Services reserves it
-     *             for Amazon Web Services use. You can't edit or delete tag names or values with this
-     *               prefix. Tags with this prefix do not count against your tags per secret limit.</p>
-     *             </li>
-     *             <li>
-     *                <p>If you use your tagging schema across multiple services and resources,
-     *               remember other services might have restrictions on allowed characters. Generally
-     *               allowed characters: letters, spaces, and numbers representable in UTF-8, plus the
-     *               following special characters: + - = . _ : / @.</p>
-     *             </li>
-     *          </ul>
-     */
-    Tags?: Tag[];
-    /**
-     * <p>(Optional) Add a list of regions to replicate secrets. Secrets Manager replicates the KMSKeyID objects to the list of regions specified in
-     *       the parameter.</p>
-     */
-    AddReplicaRegions?: ReplicaRegionType[];
-    /**
-     * <p>(Optional) If set, the replication overwrites a secret with the same name in the
-     *       destination region.</p>
-     */
-    ForceOverwriteReplicaSecret?: boolean;
-}
-export declare namespace CreateSecretRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateSecretRequest) => any;
-}
-export declare enum StatusType {
-    Failed = "Failed",
-    InProgress = "InProgress",
-    InSync = "InSync"
-}
-/**
- * <p>A replication object consisting of a <code>RegionReplicationStatus</code> object and includes a Region, KMSKeyId, status, and status message.</p>
- */
-export interface ReplicationStatusType {
-    /**
-     * <p>The Region where replication occurs.</p>
-     */
-    Region?: string;
-    /**
-     * <p>Can be an <code>ARN</code>, <code>Key ID</code>, or <code>Alias</code>. </p>
-     */
-    KmsKeyId?: string;
-    /**
-     * <p>The status can be <code>InProgress</code>, <code>Failed</code>, or <code>InSync</code>.</p>
-     */
-    Status?: StatusType | string;
-    /**
-     * <p>Status message such as "<i>Secret with this name already exists in this
-     *         region</i>".</p>
-     */
-    StatusMessage?: string;
-    /**
-     * <p>The date that you last accessed the secret in the Region. </p>
-     */
-    LastAccessedDate?: Date;
-}
-export declare namespace ReplicationStatusType {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ReplicationStatusType) => any;
-}
-export interface CreateSecretResponse {
-    /**
-     * <p>The Amazon Resource Name (ARN) of the secret that you just created.</p>
-     *          <note>
-     *             <p>Secrets Manager automatically adds several random characters to the name at the end of the ARN when
-     *         you initially create a secret. This affects only the ARN and not the actual friendly name.
-     *         This ensures that if you create a new secret with the same name as an old secret that you
-     *         previously deleted, then users with access to the old secret <i>don't</i>
-     *         automatically get access to the new secret because the ARNs are different.</p>
-     *          </note>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret that you just created.</p>
-     */
-    Name?: string;
-    /**
-     * <p>The unique identifier associated with the version of the secret you just created.</p>
-     */
-    VersionId?: string;
-    /**
-     * <p>Describes a list of replication status objects as <code>InProgress</code>, <code>Failed</code> or <code>InSync</code>.</p>
-     */
-    ReplicationStatus?: ReplicationStatusType[];
-}
-export declare namespace CreateSecretResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateSecretResponse) => any;
-}
-/**
- * <p>Secrets Manager can't encrypt the protected secret text using the provided KMS key. Check that the
- *       customer master key (CMK) is available, enabled, and not in an invalid state. For more
- *       information, see <a href="http://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">How Key State Affects Use of a
- *         Customer Master Key</a>.</p>
- */
-export interface EncryptionFailure extends __SmithyException, $MetadataBearer {
-    name: "EncryptionFailure";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace EncryptionFailure {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: EncryptionFailure) => any;
-}
-/**
- * <p>The request failed because it would exceed one of the Secrets Manager internal limits.</p>
- */
-export interface LimitExceededException extends __SmithyException, $MetadataBearer {
-    name: "LimitExceededException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace LimitExceededException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: LimitExceededException) => any;
-}
-/**
- * <p>You provided a resource-based policy with syntax errors.</p>
- */
-export interface MalformedPolicyDocumentException extends __SmithyException, $MetadataBearer {
-    name: "MalformedPolicyDocumentException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace MalformedPolicyDocumentException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: MalformedPolicyDocumentException) => any;
-}
-/**
- * <p>The request failed because you did not complete all the prerequisite steps.</p>
- */
-export interface PreconditionNotMetException extends __SmithyException, $MetadataBearer {
-    name: "PreconditionNotMetException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace PreconditionNotMetException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PreconditionNotMetException) => any;
-}
-/**
- * <p>A resource with the ID you requested already exists.</p>
- */
-export interface ResourceExistsException extends __SmithyException, $MetadataBearer {
-    name: "ResourceExistsException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace ResourceExistsException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ResourceExistsException) => any;
-}
-/**
- * <p>Secrets Manager can't decrypt the protected secret text using the provided KMS key. </p>
- */
-export interface DecryptionFailure extends __SmithyException, $MetadataBearer {
-    name: "DecryptionFailure";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace DecryptionFailure {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DecryptionFailure) => any;
-}
-export interface DeleteResourcePolicyRequest {
-    /**
-     * <p>Specifies the secret that you want to delete the attached resource-based policy for. You
-     *       can specify either the Amazon Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-}
-export declare namespace DeleteResourcePolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteResourcePolicyRequest) => any;
-}
-export interface DeleteResourcePolicyResponse {
-    /**
-     * <p>The ARN of the secret that the resource-based policy was deleted for.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret that the resource-based policy was deleted for.</p>
-     */
-    Name?: string;
-}
-export declare namespace DeleteResourcePolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteResourcePolicyResponse) => any;
-}
-export interface DeleteSecretRequest {
-    /**
-     * <p>Specifies the secret to delete. You can specify either the Amazon Resource Name (ARN) or
-     *       the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>(Optional) Specifies the number of days that Secrets Manager waits before Secrets Manager can delete the
-     *       secret. You can't use both this parameter and the <code>ForceDeleteWithoutRecovery</code>
-     *       parameter in the same API call.</p>
-     *          <p>This value can range from 7 to 30 days with a default value of 30.</p>
-     */
-    RecoveryWindowInDays?: number;
-    /**
-     * <p>(Optional) Specifies that the secret is to be deleted without any recovery window. You
-     *       can't use both this parameter and the <code>RecoveryWindowInDays</code> parameter in the same
-     *       API call.</p>
-     *          <p>An asynchronous background process performs the actual deletion, so there can be a short
-     *       delay before the operation completes. If you write code to delete and then immediately
-     *       recreate a secret with the same name, ensure that your code includes appropriate back off and
-     *       retry logic.</p>
-     *          <important>
-     *             <p>Use this parameter with caution. This parameter causes the operation to skip the normal
-     *         waiting period before the permanent deletion that Amazon Web Services would normally impose with the
-     *           <code>RecoveryWindowInDays</code> parameter. If you delete a secret with the
-     *           <code>ForceDeleteWithouRecovery</code> parameter, then you have no opportunity to recover
-     *         the secret. You lose the secret permanently.</p>
-     *          </important>
-     *          <important>
-     *             <p>If you use this parameter and include a previously deleted or nonexistent secret, the
-     *         operation does not return the error <code>ResourceNotFoundException</code> in order to
-     *         correctly handle retries.</p>
-     *          </important>
-     */
-    ForceDeleteWithoutRecovery?: boolean;
-}
-export declare namespace DeleteSecretRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteSecretRequest) => any;
-}
-export interface DeleteSecretResponse {
-    /**
-     * <p>The ARN of the secret that is now scheduled for deletion.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret currently scheduled for deletion.</p>
-     */
-    Name?: string;
-    /**
-     * <p>The date and time after which this secret can be deleted by Secrets Manager and can no longer be
-     *       restored. This value is the date and time of the delete request plus the number of days
-     *       specified in <code>RecoveryWindowInDays</code>.</p>
-     */
-    DeletionDate?: Date;
-}
-export declare namespace DeleteSecretResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteSecretResponse) => any;
-}
-export interface DescribeSecretRequest {
-    /**
-     * <p>The identifier of the secret whose details you want to retrieve. You can specify either
-     *       the Amazon Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-}
-export declare namespace DescribeSecretRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeSecretRequest) => any;
-}
-/**
- * <p>A structure that defines the rotation configuration for the secret.</p>
- */
-export interface RotationRulesType {
-    /**
-     * <p>Specifies the number of days between automatic scheduled rotations of the secret.</p>
-     *          <p>Secrets Manager schedules the next rotation when the previous
-     *     one is complete. Secrets Manager schedules the date by adding the rotation interval (number of days) to the
-     *     actual date of the last rotation. The service chooses the hour within that 24-hour date window
-     *     randomly. The minute is also chosen somewhat randomly, but weighted towards the top of the hour
-     *     and influenced by a variety of factors that help distribute load.</p>
-     */
-    AutomaticallyAfterDays?: number;
-}
-export declare namespace RotationRulesType {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RotationRulesType) => any;
-}
-export interface DescribeSecretResponse {
-    /**
-     * <p>The ARN of the secret.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The user-provided friendly name of the secret.</p>
-     */
-    Name?: string;
-    /**
-     * <p>The user-provided description of the secret.</p>
-     */
-    Description?: string;
-    /**
-     * <p>The ARN or alias of the Amazon Web Services KMS customer master key (CMK) that's used to encrypt the
-     *         <code>SecretString</code> or <code>SecretBinary</code> fields in each version of the secret.
-     *       If you don't provide a key, then Secrets Manager defaults to encrypting the secret fields with the
-     *       default Amazon Web Services KMS CMK (the one named <code>awssecretsmanager</code>) for this account.</p>
-     */
-    KmsKeyId?: string;
-    /**
-     * <p>Specifies whether automatic rotation is enabled for this secret.</p>
-     *          <p>To enable rotation, use <a>RotateSecret</a> with
-     *         <code>AutomaticallyRotateAfterDays</code> set to a value greater than 0. To disable
-     *       rotation, use <a>CancelRotateSecret</a>.</p>
-     */
-    RotationEnabled?: boolean;
-    /**
-     * <p>The ARN of a Lambda function that's invoked by Secrets Manager to rotate the
-     *       secret either automatically per the schedule or manually by a call to
-     *         <code>RotateSecret</code>.</p>
-     */
-    RotationLambdaARN?: string;
-    /**
-     * <p>A structure with the rotation configuration for this secret.</p>
-     */
-    RotationRules?: RotationRulesType;
-    /**
-     * <p>The last date and time that the rotation process for this secret was invoked.</p>
-     *          <p>The most recent date and time that the Secrets Manager rotation process successfully
-     *       completed. If the secret doesn't rotate, Secrets Manager returns a null value.</p>
-     */
-    LastRotatedDate?: Date;
-    /**
-     * <p>The last date and time that this secret was modified in any way.</p>
-     */
-    LastChangedDate?: Date;
-    /**
-     * <p>The last date that this secret was accessed. This value is truncated to midnight of the
-     *       date and therefore shows only the date, not the time.</p>
-     */
-    LastAccessedDate?: Date;
-    /**
-     * <p>This value exists if the secret is scheduled for deletion. Some time after the specified
-     *       date and time, Secrets Manager deletes the secret and all of its versions.</p>
-     *          <p>If a secret is scheduled for deletion, then its details, including the encrypted secret
-     *       information, is not accessible. To cancel a scheduled deletion and restore access, use <a>RestoreSecret</a>.</p>
-     */
-    DeletedDate?: Date;
-    /**
-     * <p>The list of user-defined tags that are associated with the secret. To add tags to a
-     *       secret, use <a>TagResource</a>. To remove tags, use <a>UntagResource</a>.</p>
-     */
-    Tags?: Tag[];
-    /**
-     * <p>A list of all of the currently assigned <code>VersionStage</code> staging labels and the
-     *         <code>VersionId</code> that each is attached to. Staging labels are used to keep track of
-     *       the different versions during the rotation process.</p>
-     *          <note>
-     *             <p>A version that does not have any staging labels attached is considered deprecated and
-     *         subject to deletion. Such versions are not included in this list.</p>
-     *          </note>
-     */
-    VersionIdsToStages?: {
-        [key: string]: string[];
-    };
-    /**
-     * <p>Returns the name of the service that created this secret.</p>
-     */
-    OwningService?: string;
-    /**
-     * <p>The date you created the secret.</p>
-     */
-    CreatedDate?: Date;
-    /**
-     * <p>Specifies the primary region for secret replication. </p>
-     */
-    PrimaryRegion?: string;
-    /**
-     * <p>Describes a list of replication status objects as <code>InProgress</code>, <code>Failed</code> or <code>InSync</code>.<code>P</code>
-     *          </p>
-     */
-    ReplicationStatus?: ReplicationStatusType[];
-}
-export declare namespace DescribeSecretResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeSecretResponse) => any;
-}
-export declare type FilterNameStringType = "all" | "description" | "name" | "primary-region" | "tag-key" | "tag-value";
-/**
- * <p>Allows you to add filters when you use the search function in Secrets Manager.</p>
- */
-export interface Filter {
-    /**
-     * <p>Filters your list of secrets by a specific key.</p>
-     */
-    Key?: FilterNameStringType | string;
-    /**
-     * <p>Filters your list of secrets by a specific value.</p>
-     *          <p>You can prefix your search value with an exclamation mark (<code>!</code>) in order to perform negation filters. </p>
-     */
-    Values?: string[];
-}
-export declare namespace Filter {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: Filter) => any;
-}
-export interface GetRandomPasswordRequest {
-    /**
-     * <p>The desired length of the generated password. The default value if you do not include this
-     *       parameter is 32 characters.</p>
-     */
-    PasswordLength?: number;
-    /**
-     * <p>A string that includes characters that should not be included in the generated password.
-     *       The default is that all characters from the included sets can be used.</p>
-     */
-    ExcludeCharacters?: string;
-    /**
-     * <p>Specifies that the generated password should not include digits. The default if you do not
-     *       include this switch parameter is that digits can be included.</p>
-     */
-    ExcludeNumbers?: boolean;
-    /**
-     * <p>Specifies that the generated password should not include punctuation characters. The
-     *       default if you do not include this switch parameter is that punctuation characters can be
-     *       included.</p>
-     *          <p>The following are the punctuation characters that <i>can</i> be included in
-     *       the generated password if you don't explicitly exclude them with
-     *         <code>ExcludeCharacters</code> or <code>ExcludePunctuation</code>:</p>
-     *          <p>
-     *             <code>! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | }
-     *       ~</code>
-     *          </p>
-     */
-    ExcludePunctuation?: boolean;
-    /**
-     * <p>Specifies that the generated password should not include uppercase letters. The default if
-     *       you do not include this switch parameter is that uppercase letters can be included.</p>
-     */
-    ExcludeUppercase?: boolean;
-    /**
-     * <p>Specifies that the generated password should not include lowercase letters. The default if
-     *       you do not include this switch parameter is that lowercase letters can be included.</p>
-     */
-    ExcludeLowercase?: boolean;
-    /**
-     * <p>Specifies that the generated password can include the space character. The default if you
-     *       do not include this switch parameter is that the space character is not included.</p>
-     */
-    IncludeSpace?: boolean;
-    /**
-     * <p>A boolean value that specifies whether the generated password must include at least one of
-     *       every allowed character type. The default value is <code>True</code> and the operation
-     *       requires at least one of every character type.</p>
-     */
-    RequireEachIncludedType?: boolean;
-}
-export declare namespace GetRandomPasswordRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: GetRandomPasswordRequest) => any;
-}
-export interface GetRandomPasswordResponse {
-    /**
-     * <p>A string with the generated password.</p>
-     */
-    RandomPassword?: string;
-}
-export declare namespace GetRandomPasswordResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: GetRandomPasswordResponse) => any;
-}
-export interface GetResourcePolicyRequest {
-    /**
-     * <p>Specifies the secret that you want to retrieve the attached resource-based policy for. You
-     *       can specify either the Amazon Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-}
-export declare namespace GetResourcePolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: GetResourcePolicyRequest) => any;
-}
-export interface GetResourcePolicyResponse {
-    /**
-     * <p>The ARN of the secret that the resource-based policy was retrieved for.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret that the resource-based policy was retrieved for.</p>
-     */
-    Name?: string;
-    /**
-     * <p>A JSON-formatted string that describes the permissions that are associated with the
-     *       attached secret. These permissions are combined with any permissions that are associated with
-     *       the user or role that attempts to access this secret. The combined permissions specify who can
-     *       access the secret and what actions they can perform. For more information, see <a href="http://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication and Access Control for
-     *         Amazon Web Services Secrets Manager</a> in the <i>Amazon Web Services Secrets Manager User Guide</i>.</p>
-     */
-    ResourcePolicy?: string;
-}
-export declare namespace GetResourcePolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: GetResourcePolicyResponse) => any;
-}
-export interface GetSecretValueRequest {
-    /**
-     * <p>Specifies the secret containing the version that you want to retrieve. You can specify
-     *       either the Amazon Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>Specifies the unique identifier of the version of the secret that you want to retrieve. If
-     *       you specify both this parameter and <code>VersionStage</code>,  the two parameters must refer
-     *       to the same secret version. If you don't specify either a <code>VersionStage</code> or
-     *         <code>VersionId</code> then the default is to perform the operation on the version with the
-     *         <code>VersionStage</code> value of <code>AWSCURRENT</code>.</p>
-     *          <p>This value is typically a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID-type</a> value with
-     *       32 hexadecimal digits.</p>
-     */
-    VersionId?: string;
-    /**
-     * <p>Specifies the secret version that you want to retrieve by the staging label attached to
-     *       the version.</p>
-     *          <p>Staging labels are used to keep track of different versions during the rotation process.
-     *       If you specify both this parameter and <code>VersionId</code>,  the two parameters must refer
-     *       to the same secret version . If you don't specify either a <code>VersionStage</code> or
-     *         <code>VersionId</code>, then the default is to perform the operation on the version with the
-     *         <code>VersionStage</code> value of <code>AWSCURRENT</code>.</p>
-     */
-    VersionStage?: string;
-}
-export declare namespace GetSecretValueRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: GetSecretValueRequest) => any;
-}
-export interface GetSecretValueResponse {
-    /**
-     * <p>The ARN of the secret.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret.</p>
-     */
-    Name?: string;
-    /**
-     * <p>The unique identifier of this version of the secret.</p>
-     */
-    VersionId?: string;
-    /**
-     * <p>The decrypted part of the protected secret information that was originally provided as
-     *       binary data in the form of a byte array. The response parameter represents the binary data as
-     *       a <a href="https://tools.ietf.org/html/rfc4648#section-4">base64-encoded</a>
-     *       string.</p>
-     *          <p>This parameter is not used if the secret is created by the Secrets Manager console.</p>
-     *          <p>If you store custom information in this field of the secret, then you must code your
-     *       Lambda rotation function to parse and interpret whatever you store in the
-     *         <code>SecretString</code> or <code>SecretBinary</code> fields.</p>
-     */
-    SecretBinary?: Uint8Array;
-    /**
-     * <p>The decrypted part of the protected secret information that was originally provided as a
-     *       string.</p>
-     *          <p>If you create this secret by using the Secrets Manager console then only the
-     *         <code>SecretString</code> parameter contains data. Secrets Manager stores the information as a
-     *       JSON structure of key/value pairs that the Lambda rotation function knows how to parse.</p>
-     *          <p>If you store custom information in the secret by using the <a>CreateSecret</a>,
-     *         <a>UpdateSecret</a>, or <a>PutSecretValue</a> API operations instead
-     *       of the Secrets Manager console, or by using the <b>Other secret type</b> in
-     *       the console, then you must code your Lambda rotation function to parse and interpret those
-     *       values.</p>
-     */
-    SecretString?: string;
-    /**
-     * <p>A list of all of the staging labels currently attached to this version of the
-     *       secret.</p>
-     */
-    VersionStages?: string[];
-    /**
-     * <p>The date and time that this version of the secret was created.</p>
-     */
-    CreatedDate?: Date;
-}
-export declare namespace GetSecretValueResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: GetSecretValueResponse) => any;
-}
-/**
- * <p>You provided an invalid <code>NextToken</code> value.</p>
- */
-export interface InvalidNextTokenException extends __SmithyException, $MetadataBearer {
-    name: "InvalidNextTokenException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace InvalidNextTokenException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: InvalidNextTokenException) => any;
-}
-export declare enum SortOrderType {
-    asc = "asc",
-    desc = "desc"
-}
-export interface ListSecretsRequest {
-    /**
-     * <p>(Optional) Limits the number of results you want to include in
-     *     the response. If you don't include this parameter, it defaults to a value that's
-     *     specific to the operation. If additional items exist beyond the maximum you specify, the
-     *     <code>NextToken</code> response element is present and has a value (isn't null). Include
-     *     that value as the <code>NextToken</code> request parameter in the next call to the operation to
-     *     get the next part of the results. Note that Secrets Manager might return fewer results than the maximum
-     *     even when there are more results available. You should check <code>NextToken</code> after every
-     *     operation to ensure that you receive all of the results.</p>
-     */
-    MaxResults?: number;
-    /**
-     * <p>(Optional) Use this parameter in a request if you receive a
-     *     <code>NextToken</code> response in a previous request indicating there's more
-     *     output available. In a subsequent call, set it to the value of the previous call
-     *     <code>NextToken</code> response to indicate where the output should continue from.</p>
-     */
-    NextToken?: string;
-    /**
-     * <p>Lists the secret request filters.</p>
-     */
-    Filters?: Filter[];
-    /**
-     * <p>Lists secrets in the requested order. </p>
-     */
-    SortOrder?: SortOrderType | string;
-}
-export declare namespace ListSecretsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListSecretsRequest) => any;
-}
-/**
- * <p>A structure that contains the details about a secret. It does not include the encrypted
- *         <code>SecretString</code> and <code>SecretBinary</code> values. To get those values, use the
- *         <a>GetSecretValue</a> operation.</p>
- */
-export interface SecretListEntry {
-    /**
-     * <p>The Amazon Resource Name (ARN) of the secret.</p>
-     *          <p>For more information about ARNs in Secrets Manager, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#iam-resources">Policy Resources</a> in the
-     *     <i>Amazon Web Services Secrets Manager User Guide</i>.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret. You can use forward slashes in the name to represent a
-     *       path hierarchy. For example, <code>/prod/databases/dbserver1</code> could represent the secret
-     *       for a server named <code>dbserver1</code> in the folder <code>databases</code> in the folder
-     *         <code>prod</code>. </p>
-     */
-    Name?: string;
-    /**
-     * <p>The user-provided description of the secret.</p>
-     */
-    Description?: string;
-    /**
-     * <p>The ARN or alias of the Amazon Web Services KMS customer master key (CMK) used to encrypt the
-     *         <code>SecretString</code> and <code>SecretBinary</code> fields in each version of the
-     *       secret. If you don't provide a key, then Secrets Manager defaults to encrypting the secret fields with
-     *       the default KMS CMK, the key named <code>awssecretsmanager</code>, for this account.</p>
-     */
-    KmsKeyId?: string;
-    /**
-     * <p>Indicates whether automatic, scheduled rotation is enabled for this secret.</p>
-     */
-    RotationEnabled?: boolean;
-    /**
-     * <p>The ARN of an Amazon Web Services Lambda function invoked by Secrets Manager to rotate and expire the
-     *       secret either automatically per the schedule or manually by a call to <a>RotateSecret</a>.</p>
-     */
-    RotationLambdaARN?: string;
-    /**
-     * <p>A structure that defines the rotation configuration for the secret.</p>
-     */
-    RotationRules?: RotationRulesType;
-    /**
-     * <p>The most recent date and time that the Secrets Manager rotation process was successfully completed. This value is null if the secret hasn't ever rotated.</p>
-     */
-    LastRotatedDate?: Date;
-    /**
-     * <p>The last date and time that this secret was modified in any way.</p>
-     */
-    LastChangedDate?: Date;
-    /**
-     * <p>The last date that this secret was accessed. This value is truncated to midnight of the
-     *       date and therefore shows only the date, not the time.</p>
-     */
-    LastAccessedDate?: Date;
-    /**
-     * <p>The date and time the deletion of the secret occurred. Not present on active secrets. The
-     *       secret can be recovered until the number of days in the recovery window has passed, as
-     *       specified in the <code>RecoveryWindowInDays</code> parameter of the <a>DeleteSecret</a> operation.</p>
-     */
-    DeletedDate?: Date;
-    /**
-     * <p>The list of user-defined tags associated with the secret. To add tags to a
-     *       secret, use <a>TagResource</a>. To remove tags, use <a>UntagResource</a>.</p>
-     */
-    Tags?: Tag[];
-    /**
-     * <p>A list of all of the currently assigned <code>SecretVersionStage</code> staging labels and
-     *       the <code>SecretVersionId</code> attached to each one. Staging labels are used to keep
-     *       track of the different versions during the rotation process.</p>
-     *          <note>
-     *             <p>A version that does not have any <code>SecretVersionStage</code> is considered
-     *         deprecated and subject to deletion. Such versions are not included in this list.</p>
-     *          </note>
-     */
-    SecretVersionsToStages?: {
-        [key: string]: string[];
-    };
-    /**
-     * <p>Returns the name of the service that created the secret.</p>
-     */
-    OwningService?: string;
-    /**
-     * <p>The date and time when a secret was created.</p>
-     */
-    CreatedDate?: Date;
-    /**
-     * <p>The Region where Secrets Manager originated the secret.</p>
-     */
-    PrimaryRegion?: string;
-}
-export declare namespace SecretListEntry {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: SecretListEntry) => any;
-}
-export interface ListSecretsResponse {
-    /**
-     * <p>A list of the secrets in the account.</p>
-     */
-    SecretList?: SecretListEntry[];
-    /**
-     * <p>If present in the response, this value indicates that
-     *     there's more output available than included in the current response. This can
-     *     occur even when the response includes no values at all, such as when you ask for a filtered view
-     *     of a very long list. Use this value in the <code>NextToken</code> request parameter in a
-     *     subsequent call to the operation to continue processing and get the next part of the output. You
-     *     should repeat this until the <code>NextToken</code> response element comes back empty (as
-     *     <code>null</code>).</p>
-     */
-    NextToken?: string;
-}
-export declare namespace ListSecretsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListSecretsResponse) => any;
-}
-export interface ListSecretVersionIdsRequest {
-    /**
-     * <p>The identifier for the secret containing the versions you want to list. You can specify
-     *       either the Amazon Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>(Optional) Limits the number of results you want to include in
-     *     the response. If you don't include this parameter, it defaults to a value that's
-     *     specific to the operation. If additional items exist beyond the maximum you specify, the
-     *     <code>NextToken</code> response element is present and has a value (isn't null). Include
-     *     that value as the <code>NextToken</code> request parameter in the next call to the operation to
-     *     get the next part of the results. Note that Secrets Manager might return fewer results than the maximum
-     *     even when there are more results available. You should check <code>NextToken</code> after every
-     *     operation to ensure that you receive all of the results.</p>
-     */
-    MaxResults?: number;
-    /**
-     * <p>(Optional) Use this parameter in a request if you receive a
-     *     <code>NextToken</code> response in a previous request indicating there's more
-     *     output available. In a subsequent call, set it to the value of the previous call
-     *     <code>NextToken</code> response to indicate where the output should continue from.</p>
-     */
-    NextToken?: string;
-    /**
-     * <p>(Optional) Specifies that you want the results to include versions that do not have any
-     *       staging labels attached to them. Such versions are considered deprecated and are subject to
-     *       deletion by Secrets Manager as needed.</p>
-     */
-    IncludeDeprecated?: boolean;
-}
-export declare namespace ListSecretVersionIdsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListSecretVersionIdsRequest) => any;
-}
-/**
- * <p>A structure that contains information about one version of a secret.</p>
- */
-export interface SecretVersionsListEntry {
-    /**
-     * <p>The unique version identifier of this version of the secret.</p>
-     */
-    VersionId?: string;
-    /**
-     * <p>An array of staging labels that are currently associated with this version of the
-     *       secret.</p>
-     */
-    VersionStages?: string[];
-    /**
-     * <p>The date that this version of the secret was last accessed. Note that the resolution of
-     *       this field is at the date level and does not include the time.</p>
-     */
-    LastAccessedDate?: Date;
-    /**
-     * <p>The date and time this version of the secret was created.</p>
-     */
-    CreatedDate?: Date;
-    /**
-     * <p>The KMS keys used to encrypt the secret version.</p>
-     */
-    KmsKeyIds?: string[];
-}
-export declare namespace SecretVersionsListEntry {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: SecretVersionsListEntry) => any;
-}
-export interface ListSecretVersionIdsResponse {
-    /**
-     * <p>The list of the currently available versions of the specified secret.</p>
-     */
-    Versions?: SecretVersionsListEntry[];
-    /**
-     * <p>If present in the response, this value indicates that
-     *     there's more output available than included in the current response. This can
-     *     occur even when the response includes no values at all, such as when you ask for a filtered view
-     *     of a very long list. Use this value in the <code>NextToken</code> request parameter in a
-     *     subsequent call to the operation to continue processing and get the next part of the output. You
-     *     should repeat this until the <code>NextToken</code> response element comes back empty (as
-     *     <code>null</code>).</p>
-     */
-    NextToken?: string;
-    /**
-     * <p>The Amazon Resource Name (ARN) for the secret.</p>
-     *          <note>
-     *             <p>Secrets Manager automatically adds several random characters to the name at the end of the ARN when
-     *         you initially create a secret. This affects only the ARN and not the actual friendly name.
-     *         This ensures that if you create a new secret with the same name as an old secret that you
-     *         previously deleted, then users with access to the old secret <i>don't</i>
-     *         automatically get access to the new secret because the ARNs are different.</p>
-     *          </note>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret.</p>
-     */
-    Name?: string;
-}
-export declare namespace ListSecretVersionIdsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListSecretVersionIdsResponse) => any;
-}
-/**
- * <p>The BlockPublicPolicy parameter is set to true and the resource policy did not prevent broad access to the secret.</p>
- */
-export interface PublicPolicyException extends __SmithyException, $MetadataBearer {
-    name: "PublicPolicyException";
-    $fault: "client";
-    Message?: string;
-}
-export declare namespace PublicPolicyException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PublicPolicyException) => any;
-}
-export interface PutResourcePolicyRequest {
-    /**
-     * <p>Specifies the secret that you want to attach the resource-based policy. You can specify
-     *       either the ARN or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>A JSON-formatted string constructed according to the grammar and syntax for an Amazon Web Services
-     *       resource-based policy. The policy in the string identifies who can access or manage this
-     *       secret and its versions. For information on how to format a JSON parameter for the various
-     *       command line tool environments, see <a href="http://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json">Using
-     *         JSON for Parameters</a> in the <i>CLI User Guide</i>.</p>
-     */
-    ResourcePolicy: string | undefined;
-    /**
-     * <p>(Optional) If you set the parameter, <code>BlockPublicPolicy</code> to true, then you
-     *       block resource-based policies that allow broad access to the secret.</p>
-     */
-    BlockPublicPolicy?: boolean;
-}
-export declare namespace PutResourcePolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PutResourcePolicyRequest) => any;
-}
-export interface PutResourcePolicyResponse {
-    /**
-     * <p>The ARN of the secret retrieved by the resource-based policy.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret retrieved by the resource-based policy.</p>
-     */
-    Name?: string;
-}
-export declare namespace PutResourcePolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PutResourcePolicyResponse) => any;
-}
-export interface PutSecretValueRequest {
-    /**
-     * <p>Specifies the secret to which you want to add a new version. You can specify either the
-     *       Amazon Resource Name (ARN) or the friendly name of the secret. The secret must already
-     *       exist.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>(Optional) Specifies a unique identifier for the new version of the secret. </p>
-     *          <note>
-     *             <p>If you use the Amazon Web Services CLI or one of the Amazon Web Services SDK to call this operation, then you can
-     *         leave this parameter empty. The CLI or SDK generates a random UUID for you and includes that
-     *         in the request. If you don't use the SDK and instead generate a raw HTTP request to the
-     *         Secrets Manager service endpoint, then you must generate a <code>ClientRequestToken</code> yourself
-     *         for new versions and include that value in the request. </p>
-     *          </note>
-     *          <p>This value helps ensure idempotency. Secrets Manager uses this value to prevent the accidental
-     *       creation of duplicate versions if there are failures and retries during the Lambda rotation
-     *       function's processing. We recommend that you generate a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID-type</a> value to
-     *       ensure uniqueness within the specified secret. </p>
-     *          <ul>
-     *             <li>
-     *                <p>If the <code>ClientRequestToken</code> value isn't already associated with a version
-     *           of the secret then a new version of the secret is created. </p>
-     *             </li>
-     *             <li>
-     *                <p>If a version with this value already exists and that version's
-     *             <code>SecretString</code> or <code>SecretBinary</code> values are the same as those in
-     *           the request then the request is ignored (the operation is idempotent). </p>
-     *             </li>
-     *             <li>
-     *                <p>If a version with this value already exists and the version of the
-     *             <code>SecretString</code> and <code>SecretBinary</code> values are different from those
-     *           in the request then the request fails because you cannot modify an existing secret
-     *           version. You can only create new versions to store new secret values.</p>
-     *             </li>
-     *          </ul>
-     *          <p>This value becomes the <code>VersionId</code> of the new version.</p>
-     */
-    ClientRequestToken?: string;
-    /**
-     * <p>(Optional) Specifies binary data that you want to encrypt and store in the new version of
-     *       the secret. To use this parameter in the command-line tools, we recommend that you store your
-     *       binary data in a file and then use the appropriate technique for your tool to pass the
-     *       contents of the file as a parameter. Either <code>SecretBinary</code> or
-     *         <code>SecretString</code> must have a value, but not both. They cannot both be empty.</p>
-     *
-     *          <p>This parameter is not accessible if the secret using the Secrets Manager console.</p>
-     *          <p></p>
-     */
-    SecretBinary?: Uint8Array;
-    /**
-     * <p>(Optional) Specifies text data that you want to encrypt and store in this new version of
-     *       the secret. Either <code>SecretString</code> or <code>SecretBinary</code> must have a value,
-     *       but not both. They cannot both be empty.</p>
-     *
-     *          <p>If you create this secret by using the Secrets Manager console then Secrets Manager puts the
-     *       protected secret text in only the <code>SecretString</code> parameter. The Secrets Manager console
-     *       stores the information as a JSON structure of key/value pairs that the default Lambda rotation
-     *       function knows how to parse.</p>
-     *          <p>For storing multiple values, we recommend that you use a JSON text string argument and
-     *       specify key/value pairs. For information on how to format a JSON parameter for the various
-     *       command line tool environments, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json">Using JSON for
-     *         Parameters</a> in the <i>CLI User Guide</i>.</p>
-     *          <p> For example:</p>
-     *          <p>
-     *             <code>[{"username":"bob"},{"password":"abc123xyz456"}]</code>
-     *          </p>
-     *          <p>If your command-line tool or SDK requires quotation marks around the parameter, you should
-     *       use single quotes to avoid confusion with the double quotes required in the JSON text.</p>
-     */
-    SecretString?: string;
-    /**
-     * <p>(Optional) Specifies a list of staging labels that are attached to this version of the
-     *       secret. These staging labels are used to track the versions through the rotation process by
-     *       the Lambda rotation function.</p>
-     *          <p>A staging label must be unique to a single version of the secret. If you specify a staging
-     *       label that's already associated with a different version of the same secret then that staging
-     *       label is automatically removed from the other version and attached to this version.</p>
-     *          <p>If you do not specify a value for <code>VersionStages</code> then Secrets Manager automatically
-     *       moves the staging label <code>AWSCURRENT</code> to this new version.</p>
-     */
-    VersionStages?: string[];
-}
-export declare namespace PutSecretValueRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PutSecretValueRequest) => any;
-}
-export interface PutSecretValueResponse {
-    /**
-     * <p>The Amazon Resource Name (ARN) for the secret for which you just created a version.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret for which you just created or updated a version.</p>
-     */
-    Name?: string;
-    /**
-     * <p>The unique identifier of the version of the secret you just created or updated.</p>
-     */
-    VersionId?: string;
-    /**
-     * <p>The list of staging labels that are currently attached to this version of the secret.
-     *       Staging labels are used to track a version as it progresses through the secret rotation
-     *       process.</p>
-     */
-    VersionStages?: string[];
-}
-export declare namespace PutSecretValueResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PutSecretValueResponse) => any;
-}
-export interface RemoveRegionsFromReplicationRequest {
-    /**
-     * <p>Remove a secret by <code>SecretId</code> from replica Regions.</p>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>Remove replication from specific Regions.</p>
-     */
-    RemoveReplicaRegions: string[] | undefined;
-}
-export declare namespace RemoveRegionsFromReplicationRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RemoveRegionsFromReplicationRequest) => any;
-}
-export interface RemoveRegionsFromReplicationResponse {
-    /**
-     * <p>The secret <code>ARN</code> removed from replication regions.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>Describes the remaining replication status after you remove regions from the replication list.</p>
-     */
-    ReplicationStatus?: ReplicationStatusType[];
-}
-export declare namespace RemoveRegionsFromReplicationResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RemoveRegionsFromReplicationResponse) => any;
-}
-export interface ReplicateSecretToRegionsRequest {
-    /**
-     * <p>Use the <code>Secret Id</code> to replicate a secret to regions.</p>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>Add Regions to replicate the secret.</p>
-     */
-    AddReplicaRegions: ReplicaRegionType[] | undefined;
-    /**
-     * <p>(Optional) If set, Secrets Manager replication overwrites a secret with the same name in the
-     *       destination region.</p>
-     */
-    ForceOverwriteReplicaSecret?: boolean;
-}
-export declare namespace ReplicateSecretToRegionsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ReplicateSecretToRegionsRequest) => any;
-}
-export interface ReplicateSecretToRegionsResponse {
-    /**
-     * <p>Replicate a secret based on the <code>ReplicaRegionType</code>> consisting of a
-     *       Region(required) and a KMSKeyId (optional) which can be the ARN, KeyID, or Alias. </p>
-     */
-    ARN?: string;
-    /**
-     * <p>Describes the secret replication status as <code>PENDING</code>, <code>SUCCESS</code> or <code>FAIL</code>.</p>
-     */
-    ReplicationStatus?: ReplicationStatusType[];
-}
-export declare namespace ReplicateSecretToRegionsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ReplicateSecretToRegionsResponse) => any;
-}
-export interface RestoreSecretRequest {
-    /**
-     * <p>Specifies the secret that you want to restore from a previously scheduled deletion. You
-     *       can specify either the Amazon Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-}
-export declare namespace RestoreSecretRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RestoreSecretRequest) => any;
-}
-export interface RestoreSecretResponse {
-    /**
-     * <p>The ARN of the secret that was restored.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret that was restored.</p>
-     */
-    Name?: string;
-}
-export declare namespace RestoreSecretResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RestoreSecretResponse) => any;
-}
-export interface RotateSecretRequest {
-    /**
-     * <p>Specifies the secret that you want to rotate. You can specify either the Amazon Resource
-     *       Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>(Optional) Specifies a unique identifier for the new version of the secret that helps
-     *       ensure idempotency. </p>
-     *          <p>If you use the Amazon Web Services CLI or one of the Amazon Web Services SDK to call this operation, then you can
-     *       leave this parameter empty. The CLI or SDK generates a random UUID for you and includes that
-     *       in the request for this parameter. If you don't use the SDK and instead generate a raw HTTP
-     *       request to the Secrets Manager service endpoint, then you must generate a
-     *         <code>ClientRequestToken</code> yourself for new versions and include that value in the
-     *       request.</p>
-     *          <p>You only need to specify your own value if you implement your own retry logic and want to
-     *       ensure that a given secret is not created twice. We recommend that you generate a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID-type</a> value to
-     *       ensure uniqueness within the specified secret. </p>
-     *          <p>Secrets Manager uses this value to prevent the accidental creation of duplicate versions if
-     *       there are failures and retries during the function's processing. This value becomes the
-     *         <code>VersionId</code> of the new version.</p>
-     */
-    ClientRequestToken?: string;
-    /**
-     * <p>(Optional) Specifies the ARN of the Lambda function that can rotate the secret.</p>
-     */
-    RotationLambdaARN?: string;
-    /**
-     * <p>A structure that defines the rotation configuration for this secret.</p>
-     */
-    RotationRules?: RotationRulesType;
-}
-export declare namespace RotateSecretRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RotateSecretRequest) => any;
-}
-export interface RotateSecretResponse {
-    /**
-     * <p>The ARN of the secret.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret.</p>
-     */
-    Name?: string;
-    /**
-     * <p>The ID of the new version of the secret created by the rotation started by this
-     *       request.</p>
-     */
-    VersionId?: string;
-}
-export declare namespace RotateSecretResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: RotateSecretResponse) => any;
-}
-export interface StopReplicationToReplicaRequest {
-    /**
-     * <p>Response to <code>StopReplicationToReplica</code> of a secret, based on the <code>SecretId</code>.</p>
-     */
-    SecretId: string | undefined;
-}
-export declare namespace StopReplicationToReplicaRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StopReplicationToReplicaRequest) => any;
-}
-export interface StopReplicationToReplicaResponse {
-    /**
-     * <p>Response <code>StopReplicationToReplica</code> of a secret, based on the <code>ARN,</code>.</p>
-     */
-    ARN?: string;
-}
-export declare namespace StopReplicationToReplicaResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: StopReplicationToReplicaResponse) => any;
-}
-export interface TagResourceRequest {
-    /**
-     * <p>The identifier for the secret that you want to attach tags to. You can specify either the
-     *       Amazon Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>The tags to attach to the secret. Each element in the list consists of a <code>Key</code>
-     *       and a <code>Value</code>.</p>
-     *          <p>This parameter to the API requires a JSON text string argument. For information on how to
-     *       format a JSON parameter for the various command line tool environments, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json">Using JSON for Parameters</a> in the <i>CLI User Guide</i>. For the
-     *       CLI, you can also use the syntax: <code>--Tags Key="Key1",Value="Value1"
-     *         Key="Key2",Value="Value2"[,…]</code>
-     *          </p>
-     */
-    Tags: Tag[] | undefined;
-}
-export declare namespace TagResourceRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: TagResourceRequest) => any;
-}
-export interface UntagResourceRequest {
-    /**
-     * <p>The identifier for the secret that you want to remove tags from. You can specify either
-     *       the Amazon Resource Name (ARN) or the friendly name of the secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>A list of tag key names to remove from the secret. You don't specify the value. Both the
-     *       key and its associated value are removed.</p>
-     *          <p>This parameter to the API requires a JSON text string argument. For information on how to
-     *       format a JSON parameter for the various command line tool environments, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json">Using JSON for Parameters</a> in the <i>CLI User Guide</i>.</p>
-     */
-    TagKeys: string[] | undefined;
-}
-export declare namespace UntagResourceRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UntagResourceRequest) => any;
-}
-export interface UpdateSecretRequest {
-    /**
-     * <p>Specifies the secret that you want to modify or to which you want to add a new version.
-     *       You can specify either the Amazon Resource Name (ARN) or the friendly name of the
-     *       secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>(Optional) If you want to add a new version to the secret, this parameter specifies a
-     *       unique identifier for the new version that helps ensure idempotency. </p>
-     *          <p>If you use the Amazon Web Services CLI or one of the Amazon Web Services SDK to call this operation, then you can
-     *       leave this parameter empty. The CLI or SDK generates a random UUID for you and includes that
-     *       in the request. If you don't use the SDK and instead generate a raw HTTP request to the Secrets Manager
-     *       service endpoint, then you must generate a <code>ClientRequestToken</code> yourself for new
-     *       versions and include that value in the request.</p>
-     *          <p>You typically only need to interact with this value if you implement your own retry logic
-     *       and want to ensure that a given secret is not created twice. We recommend that you generate a
-     *         <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID-type</a>
-     *       value to ensure uniqueness within the specified secret. </p>
-     *          <p>Secrets Manager uses this value to prevent the accidental creation of duplicate versions if
-     *       there are failures and retries during the Lambda rotation function's processing.</p>
-     *          <ul>
-     *             <li>
-     *                <p>If the <code>ClientRequestToken</code> value isn't already associated with a version
-     *           of the secret then a new version of the secret is created. </p>
-     *             </li>
-     *             <li>
-     *                <p>If a version with this value already exists and that version's
-     *             <code>SecretString</code> and <code>SecretBinary</code> values are the same as those in
-     *           the request then the request is ignored (the operation is idempotent). </p>
-     *             </li>
-     *             <li>
-     *                <p>If a version with this value already exists and that version's
-     *             <code>SecretString</code> and <code>SecretBinary</code> values are different from the
-     *           request then an error occurs because you cannot modify an existing secret value.</p>
-     *             </li>
-     *          </ul>
-     *          <p>This value becomes the <code>VersionId</code> of the new version.</p>
-     */
-    ClientRequestToken?: string;
-    /**
-     * <p>(Optional) Specifies an updated user-provided description of the secret.</p>
-     */
-    Description?: string;
-    /**
-     * <p>(Optional) Specifies an updated ARN or alias of the Amazon Web Services KMS customer master key (CMK) to be
-     *       used to encrypt the protected text in new versions of this secret.</p>
-     *          <important>
-     *             <p>You can only use the account's default CMK to encrypt and decrypt if you call this
-     *         operation using credentials from the same account that owns the secret. If the secret is in
-     *         a different account, then you must create a custom CMK and provide the ARN of that CMK in
-     *         this field. The user making the call must have permissions to both the secret and the CMK in
-     *         their respective accounts.</p>
-     *          </important>
-     */
-    KmsKeyId?: string;
-    /**
-     * <p>(Optional) Specifies updated binary data that you want to encrypt and store in the new
-     *       version of the secret. To use this parameter in the command-line tools, we recommend that you
-     *       store your binary data in a file and then use the appropriate technique for your tool to pass
-     *       the contents of the file as a parameter. Either <code>SecretBinary</code> or
-     *         <code>SecretString</code> must have a value, but not both. They cannot both be empty.</p>
-     *          <p>This parameter is not accessible using the Secrets Manager console.</p>
-     */
-    SecretBinary?: Uint8Array;
-    /**
-     * <p>(Optional) Specifies updated text data that you want to encrypt and store in this new
-     *       version of the secret. Either <code>SecretBinary</code> or <code>SecretString</code> must have
-     *       a value, but not both. They cannot both be empty.</p>
-     *          <p>If you create this secret by using the Secrets Manager console then Secrets Manager puts the
-     *       protected secret text in only the <code>SecretString</code> parameter. The Secrets Manager console
-     *       stores the information as a JSON structure of key/value pairs that the default Lambda rotation
-     *       function knows how to parse.</p>
-     *          <p>For storing multiple values, we recommend that you use a JSON text string argument and
-     *       specify key/value pairs. For information on how to format a JSON parameter for the various
-     *       command line tool environments, see <a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json">Using JSON for
-     *         Parameters</a> in the <i>CLI User Guide</i>. For example:</p>
-     *          <p>
-     *             <code>[{"username":"bob"},{"password":"abc123xyz456"}]</code>
-     *          </p>
-     *          <p>If your command-line tool or SDK requires quotation marks around the parameter, you should
-     *       use single quotes to avoid confusion with the double quotes required in the JSON text. You can
-     *       also 'escape' the double quote character in the embedded JSON text by prefacing each with a
-     *       backslash. For example, the following string is surrounded by double-quotes. All of the
-     *       embedded double quotes are escaped:</p>
-     *          <p>
-     *             <code>"[{\"username\":\"bob\"},{\"password\":\"abc123xyz456\"}]"</code>
-     *          </p>
-     */
-    SecretString?: string;
-}
-export declare namespace UpdateSecretRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateSecretRequest) => any;
-}
-export interface UpdateSecretResponse {
-    /**
-     * <p>The ARN of the secret that was updated.</p>
-     *          <note>
-     *             <p>Secrets Manager automatically adds several random characters to the name at the end of the ARN when
-     *         you initially create a secret. This affects only the ARN and not the actual friendly name.
-     *         This ensures that if you create a new secret with the same name as an old secret that you
-     *         previously deleted, then users with access to the old secret <i>don't</i>
-     *         automatically get access to the new secret because the ARNs are different.</p>
-     *          </note>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret that was updated.</p>
-     */
-    Name?: string;
-    /**
-     * <p>If a new version of the secret was created by this operation, then <code>VersionId</code>
-     *       contains the unique identifier of the new version.</p>
-     */
-    VersionId?: string;
-}
-export declare namespace UpdateSecretResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateSecretResponse) => any;
-}
-export interface UpdateSecretVersionStageRequest {
-    /**
-     * <p>Specifies the secret with the version with the list of staging labels you want to modify.
-     *       You can specify either the Amazon Resource Name (ARN) or the friendly name of the
-     *       secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId: string | undefined;
-    /**
-     * <p>The staging label to add to this version.</p>
-     */
-    VersionStage: string | undefined;
-    /**
-     * <p>Specifies the secret version ID of the version that the staging label is to be removed
-     *       from. If the staging label you are trying to attach to one version is already attached to a
-     *       different version, then you must include this parameter and specify the version that the label
-     *       is to be removed from. If the label is attached and you either do not specify this parameter,
-     *       or the version ID does not match, then the operation fails.</p>
-     */
-    RemoveFromVersionId?: string;
-    /**
-     * <p>(Optional) The secret version ID that you want to add the staging label. If you want to
-     *       remove a label from a version, then do not specify this parameter.</p>
-     *          <p>If the staging label is already attached to a different version of the secret, then you
-     *       must also specify the <code>RemoveFromVersionId</code> parameter. </p>
-     */
-    MoveToVersionId?: string;
-}
-export declare namespace UpdateSecretVersionStageRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateSecretVersionStageRequest) => any;
-}
-export interface UpdateSecretVersionStageResponse {
-    /**
-     * <p>The ARN of the secret with the modified staging label.</p>
-     */
-    ARN?: string;
-    /**
-     * <p>The friendly name of the secret with the modified staging label.</p>
-     */
-    Name?: string;
-}
-export declare namespace UpdateSecretVersionStageResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateSecretVersionStageResponse) => any;
-}
-export interface ValidateResourcePolicyRequest {
-    /**
-     * <p> (Optional) The identifier of the secret with the resource-based policy you want to
-     *       validate. You can specify either the Amazon Resource Name (ARN) or the friendly name of the
-     *       secret.</p>
-     *          <note>
-     *             <p>If you specify an ARN, we generally recommend that you specify a complete ARN. You can
-     *         specify a partial ARN too—for example, if you don’t include the final hyphen and six random
-     *         characters that Secrets Manager adds at the end of the ARN when you created the secret. A partial ARN
-     *         match can work as long as it uniquely matches only one secret. However, if your secret has a
-     *         name that ends in a hyphen followed by six characters (before Secrets Manager adds the hyphen and six
-     *         characters to the ARN) and you try to use that as a partial ARN, then those characters cause
-     *         Secrets Manager to assume that you’re specifying a complete ARN. This confusion can cause unexpected
-     *         results. To avoid this situation, we recommend that you don’t create secret names ending
-     *         with a hyphen followed by six characters.</p>
-     *             <p>If you specify an incomplete ARN without the random suffix, and instead provide the
-     *         'friendly name', you <i>must</i> not include the random suffix. If you do include the random suffix added by Secrets Manager,
-     *         you receive either a <i>ResourceNotFoundException</i> or an <i>AccessDeniedException</i> error, depending on your permissions.</p>
-     *         </note>
-     */
-    SecretId?: string;
-    /**
-     * <p>A JSON-formatted string constructed according to the grammar and syntax for an Amazon Web Services
-     *       resource-based policy. The policy in the string identifies who can access or manage this
-     *       secret and its versions. For information on how to format a JSON parameter for the various
-     *       command line tool environments, see <a href="http://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json">Using
-     *         JSON for Parameters</a> in the <i>CLI User Guide</i>.publi</p>
-     */
-    ResourcePolicy: string | undefined;
-}
-export declare namespace ValidateResourcePolicyRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ValidateResourcePolicyRequest) => any;
-}
-/**
- * <p>Displays errors that occurred during validation of the resource policy.</p>
- */
-export interface ValidationErrorsEntry {
-    /**
-     * <p>Checks the name of the policy.</p>
-     */
-    CheckName?: string;
-    /**
-     * <p>Displays error messages if validation encounters problems during validation of the resource policy.</p>
-     */
-    ErrorMessage?: string;
-}
-export declare namespace ValidationErrorsEntry {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ValidationErrorsEntry) => any;
-}
-export interface ValidateResourcePolicyResponse {
-    /**
-     * <p>Returns a message stating that your Reource Policy passed validation. </p>
-     */
-    PolicyValidationPassed?: boolean;
-    /**
-     * <p>Returns an error message if your policy doesn't pass validatation.</p>
-     */
-    ValidationErrors?: ValidationErrorsEntry[];
-}
-export declare namespace ValidateResourcePolicyResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ValidateResourcePolicyResponse) => any;
-}