@aws-sdk/client-secrets-manager 3.48.0 → 3.52.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +35 -0
- package/README.md +0 -27
- package/dist-cjs/endpoints.js +9 -0
- package/dist-cjs/protocols/Aws_json1_1.js +31 -0
- package/dist-es/endpoints.js +9 -0
- package/dist-es/protocols/Aws_json1_1.js +183 -155
- package/dist-types/SecretsManager.d.ts +148 -45
- package/dist-types/SecretsManagerClient.d.ts +8 -28
- package/dist-types/commands/CancelRotateSecretCommand.d.ts +6 -0
- package/dist-types/commands/CreateSecretCommand.d.ts +6 -0
- package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +6 -0
- package/dist-types/commands/DeleteSecretCommand.d.ts +6 -0
- package/dist-types/commands/DescribeSecretCommand.d.ts +6 -0
- package/dist-types/commands/GetRandomPasswordCommand.d.ts +6 -0
- package/dist-types/commands/GetResourcePolicyCommand.d.ts +6 -0
- package/dist-types/commands/GetSecretValueCommand.d.ts +11 -3
- package/dist-types/commands/ListSecretVersionIdsCommand.d.ts +5 -5
- package/dist-types/commands/ListSecretsCommand.d.ts +5 -4
- package/dist-types/commands/PutResourcePolicyCommand.d.ts +6 -0
- package/dist-types/commands/PutSecretValueCommand.d.ts +6 -0
- package/dist-types/commands/RemoveRegionsFromReplicationCommand.d.ts +6 -0
- package/dist-types/commands/ReplicateSecretToRegionsCommand.d.ts +6 -0
- package/dist-types/commands/RestoreSecretCommand.d.ts +6 -0
- package/dist-types/commands/RotateSecretCommand.d.ts +8 -2
- package/dist-types/commands/StopReplicationToReplicaCommand.d.ts +6 -0
- package/dist-types/commands/TagResourceCommand.d.ts +6 -0
- package/dist-types/commands/UntagResourceCommand.d.ts +6 -0
- package/dist-types/commands/UpdateSecretCommand.d.ts +9 -3
- package/dist-types/commands/UpdateSecretVersionStageCommand.d.ts +6 -0
- package/dist-types/commands/ValidateResourcePolicyCommand.d.ts +6 -0
- package/dist-types/models/models_0.d.ts +69 -20
- package/dist-types/ts3.4/models/models_0.d.ts +12 -6
- package/package.json +40 -34
|
@@ -28,6 +28,12 @@ export interface PutSecretValueCommandOutput extends PutSecretValueResponse, __M
|
|
|
28
28
|
* same secret data, the operation succeeds but does nothing. However, if the secret data is
|
|
29
29
|
* different, then the operation fails because you can't modify an existing version; you can
|
|
30
30
|
* only create new ones.</p>
|
|
31
|
+
* <p>
|
|
32
|
+
* <b>Required permissions: </b>
|
|
33
|
+
* <code>secretsmanager:PutSecretValue</code>.
|
|
34
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
35
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
36
|
+
* and access control in Secrets Manager</a>. </p>
|
|
31
37
|
* @example
|
|
32
38
|
* Use a bare-bones client and the command you need to make an API call.
|
|
33
39
|
* ```javascript
|
|
@@ -8,6 +8,12 @@ export interface RemoveRegionsFromReplicationCommandOutput extends RemoveRegions
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>For a secret that is replicated to other Regions, deletes the secret replicas from the Regions you specify.</p>
|
|
11
|
+
* <p>
|
|
12
|
+
* <b>Required permissions: </b>
|
|
13
|
+
* <code>secretsmanager:RemoveRegionsFromReplication</code>.
|
|
14
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
15
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
16
|
+
* and access control in Secrets Manager</a>. </p>
|
|
11
17
|
* @example
|
|
12
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
19
|
* ```javascript
|
|
@@ -8,6 +8,12 @@ export interface ReplicateSecretToRegionsCommandOutput extends ReplicateSecretTo
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Replicates the secret to a new Regions. See <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/create-manage-multi-region-secrets.html">Multi-Region secrets</a>.</p>
|
|
11
|
+
* <p>
|
|
12
|
+
* <b>Required permissions: </b>
|
|
13
|
+
* <code>secretsmanager:ReplicateSecretToRegions</code>.
|
|
14
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
15
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
16
|
+
* and access control in Secrets Manager</a>. </p>
|
|
11
17
|
* @example
|
|
12
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
19
|
* ```javascript
|
|
@@ -9,6 +9,12 @@ export interface RestoreSecretCommandOutput extends RestoreSecretResponse, __Met
|
|
|
9
9
|
/**
|
|
10
10
|
* <p>Cancels the scheduled deletion of a secret by removing the <code>DeletedDate</code> time
|
|
11
11
|
* stamp. You can access a secret again after it has been restored.</p>
|
|
12
|
+
* <p>
|
|
13
|
+
* <b>Required permissions: </b>
|
|
14
|
+
* <code>secretsmanager:RestoreSecret</code>.
|
|
15
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
16
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
17
|
+
* and access control in Secrets Manager</a>. </p>
|
|
12
18
|
* @example
|
|
13
19
|
* Use a bare-bones client and the command you need to make an API call.
|
|
14
20
|
* ```javascript
|
|
@@ -24,8 +24,14 @@ export interface RotateSecretCommandOutput extends RotateSecretResponse, __Metad
|
|
|
24
24
|
* <p>If the <code>AWSPENDING</code> staging label is present but not attached to the same version as
|
|
25
25
|
* <code>AWSCURRENT</code>, then any later invocation of <code>RotateSecret</code> assumes that a previous
|
|
26
26
|
* rotation request is still in progress and returns an error.</p>
|
|
27
|
-
* <p>
|
|
28
|
-
*
|
|
27
|
+
* <p>
|
|
28
|
+
* <b>Required permissions: </b>
|
|
29
|
+
* <code>secretsmanager:RotateSecret</code>.
|
|
30
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
31
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
32
|
+
* and access control in Secrets Manager</a>. You also need <code>lambda:InvokeFunction</code> permissions on the rotation function.
|
|
33
|
+
* For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets-required-permissions-function.html">
|
|
34
|
+
* Permissions for rotation</a>.</p>
|
|
29
35
|
* @example
|
|
30
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
31
37
|
* ```javascript
|
|
@@ -9,6 +9,12 @@ export interface StopReplicationToReplicaCommandOutput extends StopReplicationTo
|
|
|
9
9
|
/**
|
|
10
10
|
* <p>Removes the link between the replica secret and the primary secret and promotes the replica to a primary secret in the replica Region.</p>
|
|
11
11
|
* <p>You must call this operation from the Region in which you want to promote the replica to a primary secret.</p>
|
|
12
|
+
* <p>
|
|
13
|
+
* <b>Required permissions: </b>
|
|
14
|
+
* <code>secretsmanager:StopReplicationToReplica</code>.
|
|
15
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
16
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
17
|
+
* and access control in Secrets Manager</a>. </p>
|
|
12
18
|
* @example
|
|
13
19
|
* Use a bare-bones client and the command you need to make an API call.
|
|
14
20
|
* ```javascript
|
|
@@ -42,6 +42,12 @@ export interface TagResourceCommandOutput extends __MetadataBearer {
|
|
|
42
42
|
* your permissions for this secret, then the operation is blocked and returns an Access Denied
|
|
43
43
|
* error.</p>
|
|
44
44
|
* </important>
|
|
45
|
+
* <p>
|
|
46
|
+
* <b>Required permissions: </b>
|
|
47
|
+
* <code>secretsmanager:TagResource</code>.
|
|
48
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
49
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
50
|
+
* and access control in Secrets Manager</a>. </p>
|
|
45
51
|
* @example
|
|
46
52
|
* Use a bare-bones client and the command you need to make an API call.
|
|
47
53
|
* ```javascript
|
|
@@ -16,6 +16,12 @@ export interface UntagResourceCommandOutput extends __MetadataBearer {
|
|
|
16
16
|
* permissions for this secret, then the operation is blocked and returns an Access Denied
|
|
17
17
|
* error.</p>
|
|
18
18
|
* </important>
|
|
19
|
+
* <p>
|
|
20
|
+
* <b>Required permissions: </b>
|
|
21
|
+
* <code>secretsmanager:UntagResource</code>.
|
|
22
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
23
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
24
|
+
* and access control in Secrets Manager</a>. </p>
|
|
19
25
|
* @example
|
|
20
26
|
* Use a bare-bones client and the command you need to make an API call.
|
|
21
27
|
* ```javascript
|
|
@@ -30,9 +30,15 @@ export interface UpdateSecretCommandOutput extends UpdateSecretResponse, __Metad
|
|
|
30
30
|
* significant delay in returning the result. </p>
|
|
31
31
|
* <p>If the secret is in a different Amazon Web Services account from the credentials calling the API, then you can't
|
|
32
32
|
* use <code>aws/secretsmanager</code> to encrypt the secret, and you must create and use a customer managed key. </p>
|
|
33
|
-
*
|
|
34
|
-
*
|
|
35
|
-
*
|
|
33
|
+
* <p>
|
|
34
|
+
* <b>Required permissions: </b>
|
|
35
|
+
* <code>secretsmanager:UpdateSecret</code>.
|
|
36
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
37
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
38
|
+
* and access control in Secrets Manager</a>.
|
|
39
|
+
* If you use a customer managed key, you must also have <code>kms:GenerateDataKey</code> and
|
|
40
|
+
* <code>kms:Decrypt</code> permissions on the key. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/security-encryption.html">
|
|
41
|
+
* Secret encryption and decryption</a>.</p>
|
|
36
42
|
* @example
|
|
37
43
|
* Use a bare-bones client and the command you need to make an API call.
|
|
38
44
|
* ```javascript
|
|
@@ -22,6 +22,12 @@ export interface UpdateSecretVersionStageCommandOutput extends UpdateSecretVersi
|
|
|
22
22
|
* </note>
|
|
23
23
|
* <p>If this action results in the last label being removed from a version, then the version is
|
|
24
24
|
* considered to be 'deprecated' and can be deleted by Secrets Manager.</p>
|
|
25
|
+
* <p>
|
|
26
|
+
* <b>Required permissions: </b>
|
|
27
|
+
* <code>secretsmanager:UpdateSecretVersionStage</code>.
|
|
28
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
29
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
30
|
+
* and access control in Secrets Manager</a>. </p>
|
|
25
31
|
* @example
|
|
26
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
27
33
|
* ```javascript
|
|
@@ -22,6 +22,12 @@ export interface ValidateResourcePolicyCommandOutput extends ValidateResourcePol
|
|
|
22
22
|
* <p>Verifies the policy does not lock out a caller.</p>
|
|
23
23
|
* </li>
|
|
24
24
|
* </ul>
|
|
25
|
+
* <p>
|
|
26
|
+
* <b>Required permissions: </b>
|
|
27
|
+
* <code>secretsmanager:ValidateResourcePolicy</code>.
|
|
28
|
+
* For more information, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions">
|
|
29
|
+
* IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
|
|
30
|
+
* and access control in Secrets Manager</a>. </p>
|
|
25
31
|
* @example
|
|
26
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
27
33
|
* ```javascript
|
|
@@ -65,7 +65,7 @@ export interface InternalServiceError extends __SmithyException, $MetadataBearer
|
|
|
65
65
|
Message?: string;
|
|
66
66
|
}
|
|
67
67
|
/**
|
|
68
|
-
* <p>The parameter name is invalid
|
|
68
|
+
* <p>The parameter name or value is invalid.</p>
|
|
69
69
|
*/
|
|
70
70
|
export interface InvalidParameterException extends __SmithyException, $MetadataBearer {
|
|
71
71
|
name: "InvalidParameterException";
|
|
@@ -340,6 +340,14 @@ export declare namespace CreateSecretResponse {
|
|
|
340
340
|
*/
|
|
341
341
|
const filterSensitiveLog: (obj: CreateSecretResponse) => any;
|
|
342
342
|
}
|
|
343
|
+
/**
|
|
344
|
+
* <p>Secrets Manager can't decrypt the protected secret text using the provided KMS key. </p>
|
|
345
|
+
*/
|
|
346
|
+
export interface DecryptionFailure extends __SmithyException, $MetadataBearer {
|
|
347
|
+
name: "DecryptionFailure";
|
|
348
|
+
$fault: "client";
|
|
349
|
+
Message?: string;
|
|
350
|
+
}
|
|
343
351
|
/**
|
|
344
352
|
* <p>Secrets Manager can't encrypt the protected secret text using the provided KMS key. Check that the
|
|
345
353
|
* KMS key is available, enabled, and not in an invalid state. For more
|
|
@@ -382,14 +390,6 @@ export interface ResourceExistsException extends __SmithyException, $MetadataBea
|
|
|
382
390
|
$fault: "client";
|
|
383
391
|
Message?: string;
|
|
384
392
|
}
|
|
385
|
-
/**
|
|
386
|
-
* <p>Secrets Manager can't decrypt the protected secret text using the provided KMS key. </p>
|
|
387
|
-
*/
|
|
388
|
-
export interface DecryptionFailure extends __SmithyException, $MetadataBearer {
|
|
389
|
-
name: "DecryptionFailure";
|
|
390
|
-
$fault: "client";
|
|
391
|
-
Message?: string;
|
|
392
|
-
}
|
|
393
393
|
export interface DeleteResourcePolicyRequest {
|
|
394
394
|
/**
|
|
395
395
|
* <p>The ARN or name of the secret to delete the attached resource-based policy for.</p>
|
|
@@ -497,14 +497,43 @@ export declare namespace DescribeSecretRequest {
|
|
|
497
497
|
*/
|
|
498
498
|
export interface RotationRulesType {
|
|
499
499
|
/**
|
|
500
|
-
* <p>
|
|
501
|
-
*
|
|
502
|
-
*
|
|
503
|
-
*
|
|
504
|
-
*
|
|
505
|
-
*
|
|
500
|
+
* <p>The number of days between automatic scheduled rotations of the secret. You can use this
|
|
501
|
+
* value to check that your secret meets your compliance guidelines for how often secrets must
|
|
502
|
+
* be rotated.</p>
|
|
503
|
+
* <p>In <code>DescribeSecret</code> and <code>ListSecrets</code>, this value is calculated from
|
|
504
|
+
* the rotation schedule after every successful rotation. In <code>RotateSecret</code>, you can
|
|
505
|
+
* set the rotation schedule in <code>RotationRules</code> with <code>AutomaticallyAfterDays</code>
|
|
506
|
+
* or <code>ScheduleExpression</code>, but not both.</p>
|
|
506
507
|
*/
|
|
507
508
|
AutomaticallyAfterDays?: number;
|
|
509
|
+
/**
|
|
510
|
+
* <p>The length of the rotation window in hours, for example <code>3h</code> for a three hour window. Secrets Manager
|
|
511
|
+
* rotates your secret at any time during this window. The window must not go into the next UTC
|
|
512
|
+
* day. If you don't specify this value, the window automatically ends at the end of
|
|
513
|
+
* the UTC day. The window begins according to the <code>ScheduleExpression</code>. For more
|
|
514
|
+
* information, including examples, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_schedule.html">Schedule expressions
|
|
515
|
+
* in Secrets Manager rotation</a>.</p>
|
|
516
|
+
*/
|
|
517
|
+
Duration?: string;
|
|
518
|
+
/**
|
|
519
|
+
* <p>A <code>cron()</code> or <code>rate()</code> expression that defines the schedule for
|
|
520
|
+
* rotating your secret. Secrets Manager rotation schedules use UTC time zone. </p>
|
|
521
|
+
* <p>Secrets Manager <code>rate()</code> expressions
|
|
522
|
+
* represent the interval in days that you want to rotate your secret, for example
|
|
523
|
+
* <code>rate(10 days)</code>. If you use a <code>rate()</code> expression, the rotation
|
|
524
|
+
* window opens at midnight, and Secrets Manager rotates your secret any time that day after midnight.
|
|
525
|
+
* You can set a <code>Duration</code> to shorten the rotation window.</p>
|
|
526
|
+
* <p>You can use a <code>cron()</code> expression to create rotation schedules that are
|
|
527
|
+
* more detailed than a rotation interval. For more information, including examples, see
|
|
528
|
+
* <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_schedule.html">Schedule expressions
|
|
529
|
+
* in Secrets Manager rotation</a>. If you use a <code>cron()</code> expression, Secrets Manager rotates
|
|
530
|
+
* your secret any time during that day after the window opens. For example,
|
|
531
|
+
* <code>cron(0 8 1 * ? *)</code> represents a rotation window that occurs on the first
|
|
532
|
+
* day of every month beginning at 8:00 AM UTC. Secrets Manager rotates the secret any time that day
|
|
533
|
+
* after 8:00 AM. You can set a <code>Duration</code> to shorten
|
|
534
|
+
* the rotation window.</p>
|
|
535
|
+
*/
|
|
536
|
+
ScheduleExpression?: string;
|
|
508
537
|
}
|
|
509
538
|
export declare namespace RotationRulesType {
|
|
510
539
|
/**
|
|
@@ -906,8 +935,9 @@ export declare namespace ListSecretsRequest {
|
|
|
906
935
|
}
|
|
907
936
|
/**
|
|
908
937
|
* <p>A structure that contains the details about a secret. It does not include the encrypted
|
|
909
|
-
* <code>SecretString</code> and <code>SecretBinary</code> values. To get those values, use
|
|
910
|
-
*
|
|
938
|
+
* <code>SecretString</code> and <code>SecretBinary</code> values. To get those values, use
|
|
939
|
+
* <a href="https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_GetSecretValue.html">GetSecretValue</a>
|
|
940
|
+
* .</p>
|
|
911
941
|
*/
|
|
912
942
|
export interface SecretListEntry {
|
|
913
943
|
/**
|
|
@@ -936,7 +966,9 @@ export interface SecretListEntry {
|
|
|
936
966
|
RotationEnabled?: boolean;
|
|
937
967
|
/**
|
|
938
968
|
* <p>The ARN of an Amazon Web Services Lambda function invoked by Secrets Manager to rotate and expire the
|
|
939
|
-
* secret either automatically per the schedule or manually by a call to <a>
|
|
969
|
+
* secret either automatically per the schedule or manually by a call to <a href="https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_RotateSecret.html">
|
|
970
|
+
* <code>RotateSecret</code>
|
|
971
|
+
* </a>.</p>
|
|
940
972
|
*/
|
|
941
973
|
RotationLambdaARN?: string;
|
|
942
974
|
/**
|
|
@@ -959,12 +991,19 @@ export interface SecretListEntry {
|
|
|
959
991
|
/**
|
|
960
992
|
* <p>The date and time the deletion of the secret occurred. Not present on active secrets. The
|
|
961
993
|
* secret can be recovered until the number of days in the recovery window has passed, as
|
|
962
|
-
* specified in the <code>RecoveryWindowInDays</code> parameter of the <a
|
|
994
|
+
* specified in the <code>RecoveryWindowInDays</code> parameter of the <a href="https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_DeleteSecret.html">
|
|
995
|
+
* <code>DeleteSecret</code>
|
|
996
|
+
* </a> operation.</p>
|
|
963
997
|
*/
|
|
964
998
|
DeletedDate?: Date;
|
|
965
999
|
/**
|
|
966
1000
|
* <p>The list of user-defined tags associated with the secret. To add tags to a
|
|
967
|
-
* secret, use <a
|
|
1001
|
+
* secret, use <a href="https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_TagResource.html">
|
|
1002
|
+
* <code>TagResource</code>
|
|
1003
|
+
* </a>.
|
|
1004
|
+
* To remove tags, use <a href="https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_UntagResource.html">
|
|
1005
|
+
* <code>UntagResource</code>
|
|
1006
|
+
* </a>.</p>
|
|
968
1007
|
*/
|
|
969
1008
|
Tags?: Tag[];
|
|
970
1009
|
/**
|
|
@@ -1389,6 +1428,16 @@ export interface RotateSecretRequest {
|
|
|
1389
1428
|
* <p>A structure that defines the rotation configuration for this secret.</p>
|
|
1390
1429
|
*/
|
|
1391
1430
|
RotationRules?: RotationRulesType;
|
|
1431
|
+
/**
|
|
1432
|
+
* <p>Specifies whether to rotate the secret immediately or wait until the next scheduled rotation window.
|
|
1433
|
+
* The rotation schedule is defined in <a>RotateSecretRequest$RotationRules</a>.</p>
|
|
1434
|
+
* <p>If you don't immediately rotate the secret, Secrets Manager tests the rotation configuration by running the
|
|
1435
|
+
* <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html">
|
|
1436
|
+
* <code>testSecret</code>
|
|
1437
|
+
* step</a> of the Lambda rotation function. The test creates an <code>AWSPENDING</code> version of the secret and then removes it.</p>
|
|
1438
|
+
* <p>If you don't specify this value, then by default, Secrets Manager rotates the secret immediately.</p>
|
|
1439
|
+
*/
|
|
1440
|
+
RotateImmediately?: boolean;
|
|
1392
1441
|
}
|
|
1393
1442
|
export declare namespace RotateSecretRequest {
|
|
1394
1443
|
/**
|
|
@@ -126,6 +126,12 @@ export declare namespace CreateSecretResponse {
|
|
|
126
126
|
const filterSensitiveLog: (obj: CreateSecretResponse) => any;
|
|
127
127
|
}
|
|
128
128
|
|
|
129
|
+
export interface DecryptionFailure extends __SmithyException, $MetadataBearer {
|
|
130
|
+
name: "DecryptionFailure";
|
|
131
|
+
$fault: "client";
|
|
132
|
+
Message?: string;
|
|
133
|
+
}
|
|
134
|
+
|
|
129
135
|
export interface EncryptionFailure extends __SmithyException, $MetadataBearer {
|
|
130
136
|
name: "EncryptionFailure";
|
|
131
137
|
$fault: "client";
|
|
@@ -155,12 +161,6 @@ export interface ResourceExistsException extends __SmithyException, $MetadataBea
|
|
|
155
161
|
$fault: "client";
|
|
156
162
|
Message?: string;
|
|
157
163
|
}
|
|
158
|
-
|
|
159
|
-
export interface DecryptionFailure extends __SmithyException, $MetadataBearer {
|
|
160
|
-
name: "DecryptionFailure";
|
|
161
|
-
$fault: "client";
|
|
162
|
-
Message?: string;
|
|
163
|
-
}
|
|
164
164
|
export interface DeleteResourcePolicyRequest {
|
|
165
165
|
|
|
166
166
|
SecretId: string | undefined;
|
|
@@ -215,6 +215,10 @@ export declare namespace DescribeSecretRequest {
|
|
|
215
215
|
export interface RotationRulesType {
|
|
216
216
|
|
|
217
217
|
AutomaticallyAfterDays?: number;
|
|
218
|
+
|
|
219
|
+
Duration?: string;
|
|
220
|
+
|
|
221
|
+
ScheduleExpression?: string;
|
|
218
222
|
}
|
|
219
223
|
export declare namespace RotationRulesType {
|
|
220
224
|
|
|
@@ -603,6 +607,8 @@ export interface RotateSecretRequest {
|
|
|
603
607
|
RotationLambdaARN?: string;
|
|
604
608
|
|
|
605
609
|
RotationRules?: RotationRulesType;
|
|
610
|
+
|
|
611
|
+
RotateImmediately?: boolean;
|
|
606
612
|
}
|
|
607
613
|
export declare namespace RotateSecretRequest {
|
|
608
614
|
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-secrets-manager",
|
|
3
3
|
"description": "AWS SDK for JavaScript Secrets Manager Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.52.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "tsc -p tsconfig.cjs.json",
|
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
"build:es": "tsc -p tsconfig.es.json",
|
|
10
10
|
"build:types": "tsc -p tsconfig.types.json",
|
|
11
11
|
"build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
|
|
12
|
-
"clean": "rimraf ./dist-*"
|
|
12
|
+
"clean": "rimraf ./dist-* && rimraf *.tsbuildinfo"
|
|
13
13
|
},
|
|
14
14
|
"main": "./dist-cjs/index.js",
|
|
15
15
|
"types": "./dist-types/index.d.ts",
|
|
@@ -18,43 +18,49 @@
|
|
|
18
18
|
"dependencies": {
|
|
19
19
|
"@aws-crypto/sha256-browser": "2.0.0",
|
|
20
20
|
"@aws-crypto/sha256-js": "2.0.0",
|
|
21
|
-
"@aws-sdk/client-sts": "3.
|
|
22
|
-
"@aws-sdk/config-resolver": "3.
|
|
23
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
24
|
-
"@aws-sdk/fetch-http-handler": "3.
|
|
25
|
-
"@aws-sdk/hash-node": "3.
|
|
26
|
-
"@aws-sdk/invalid-dependency": "3.
|
|
27
|
-
"@aws-sdk/middleware-content-length": "3.
|
|
28
|
-
"@aws-sdk/middleware-host-header": "3.
|
|
29
|
-
"@aws-sdk/middleware-logger": "3.
|
|
30
|
-
"@aws-sdk/middleware-retry": "3.
|
|
31
|
-
"@aws-sdk/middleware-serde": "3.
|
|
32
|
-
"@aws-sdk/middleware-signing": "3.
|
|
33
|
-
"@aws-sdk/middleware-stack": "3.
|
|
34
|
-
"@aws-sdk/middleware-user-agent": "3.
|
|
35
|
-
"@aws-sdk/node-config-provider": "3.
|
|
36
|
-
"@aws-sdk/node-http-handler": "3.
|
|
37
|
-
"@aws-sdk/protocol-http": "3.
|
|
38
|
-
"@aws-sdk/smithy-client": "3.
|
|
39
|
-
"@aws-sdk/types": "3.
|
|
40
|
-
"@aws-sdk/url-parser": "3.
|
|
41
|
-
"@aws-sdk/util-base64-browser": "3.
|
|
42
|
-
"@aws-sdk/util-base64-node": "3.
|
|
43
|
-
"@aws-sdk/util-body-length-browser": "3.
|
|
44
|
-
"@aws-sdk/util-body-length-node": "3.
|
|
45
|
-
"@aws-sdk/util-defaults-mode-browser": "3.
|
|
46
|
-
"@aws-sdk/util-defaults-mode-node": "3.
|
|
47
|
-
"@aws-sdk/util-user-agent-browser": "3.
|
|
48
|
-
"@aws-sdk/util-user-agent-node": "3.
|
|
49
|
-
"@aws-sdk/util-utf8-browser": "3.
|
|
50
|
-
"@aws-sdk/util-utf8-node": "3.
|
|
21
|
+
"@aws-sdk/client-sts": "3.52.0",
|
|
22
|
+
"@aws-sdk/config-resolver": "3.52.0",
|
|
23
|
+
"@aws-sdk/credential-provider-node": "3.52.0",
|
|
24
|
+
"@aws-sdk/fetch-http-handler": "3.52.0",
|
|
25
|
+
"@aws-sdk/hash-node": "3.52.0",
|
|
26
|
+
"@aws-sdk/invalid-dependency": "3.52.0",
|
|
27
|
+
"@aws-sdk/middleware-content-length": "3.52.0",
|
|
28
|
+
"@aws-sdk/middleware-host-header": "3.52.0",
|
|
29
|
+
"@aws-sdk/middleware-logger": "3.52.0",
|
|
30
|
+
"@aws-sdk/middleware-retry": "3.52.0",
|
|
31
|
+
"@aws-sdk/middleware-serde": "3.52.0",
|
|
32
|
+
"@aws-sdk/middleware-signing": "3.52.0",
|
|
33
|
+
"@aws-sdk/middleware-stack": "3.52.0",
|
|
34
|
+
"@aws-sdk/middleware-user-agent": "3.52.0",
|
|
35
|
+
"@aws-sdk/node-config-provider": "3.52.0",
|
|
36
|
+
"@aws-sdk/node-http-handler": "3.52.0",
|
|
37
|
+
"@aws-sdk/protocol-http": "3.52.0",
|
|
38
|
+
"@aws-sdk/smithy-client": "3.52.0",
|
|
39
|
+
"@aws-sdk/types": "3.52.0",
|
|
40
|
+
"@aws-sdk/url-parser": "3.52.0",
|
|
41
|
+
"@aws-sdk/util-base64-browser": "3.52.0",
|
|
42
|
+
"@aws-sdk/util-base64-node": "3.52.0",
|
|
43
|
+
"@aws-sdk/util-body-length-browser": "3.52.0",
|
|
44
|
+
"@aws-sdk/util-body-length-node": "3.52.0",
|
|
45
|
+
"@aws-sdk/util-defaults-mode-browser": "3.52.0",
|
|
46
|
+
"@aws-sdk/util-defaults-mode-node": "3.52.0",
|
|
47
|
+
"@aws-sdk/util-user-agent-browser": "3.52.0",
|
|
48
|
+
"@aws-sdk/util-user-agent-node": "3.52.0",
|
|
49
|
+
"@aws-sdk/util-utf8-browser": "3.52.0",
|
|
50
|
+
"@aws-sdk/util-utf8-node": "3.52.0",
|
|
51
51
|
"tslib": "^2.3.0",
|
|
52
52
|
"uuid": "^8.3.2"
|
|
53
53
|
},
|
|
54
54
|
"devDependencies": {
|
|
55
|
-
"@aws-sdk/service-client-documentation-generator": "3.
|
|
55
|
+
"@aws-sdk/service-client-documentation-generator": "3.52.0",
|
|
56
|
+
"@tsconfig/recommended": "1.0.1",
|
|
56
57
|
"@types/node": "^12.7.5",
|
|
57
|
-
"@types/uuid": "^8.3.0"
|
|
58
|
+
"@types/uuid": "^8.3.0",
|
|
59
|
+
"concurrently": "7.0.0",
|
|
60
|
+
"downlevel-dts": "0.7.0",
|
|
61
|
+
"rimraf": "3.0.2",
|
|
62
|
+
"typedoc": "0.19.2",
|
|
63
|
+
"typescript": "~4.3.5"
|
|
58
64
|
},
|
|
59
65
|
"engines": {
|
|
60
66
|
"node": ">=12.0.0"
|