@aws-sdk/client-secrets-manager 3.590.0 → 3.596.0

package/dist-cjs/index.js

@@ -226,7 +226,6 @@ var SecretsManagerClient = _SecretsManagerClient;
 
 var import_middleware_serde = require("@smithy/middleware-serde");
 
-var import_types = require("@smithy/types");
 
 // src/models/models_0.ts
 
@@ -506,7 +505,8 @@ var GetSecretValueResponseFilterSensitiveLog = /* @__PURE__ */ __name((obj) => (
 var PutSecretValueRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
   ...obj.SecretBinary && { SecretBinary: import_smithy_client.SENSITIVE_STRING },
-  ...obj.SecretString && { SecretString: import_smithy_client.SENSITIVE_STRING }
+  ...obj.SecretString && { SecretString: import_smithy_client.SENSITIVE_STRING },
+  ...obj.RotationToken && { RotationToken: import_smithy_client.SENSITIVE_STRING }
 }), "PutSecretValueRequestFilterSensitiveLog");
 var UpdateSecretRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
@@ -1126,6 +1126,7 @@ var se_CreateSecretRequest = /* @__PURE__ */ __name((input, context) => {
 var se_PutSecretValueRequest = /* @__PURE__ */ __name((input, context) => {
   return (0, import_smithy_client.take)(input, {
     ClientRequestToken: [true, (_) => _ ?? (0, import_uuid.v4)()],
+    RotationToken: [],
     SecretBinary: context.base64Encoder,
     SecretId: [],
     SecretString: [],
@@ -1356,7 +1357,6 @@ var BatchGetSecretValueCommand = _BatchGetSecretValueCommand;
 
 
 
-
 var _CancelRotateSecretCommand = class _CancelRotateSecretCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1373,7 +1373,6 @@ var CancelRotateSecretCommand = _CancelRotateSecretCommand;
 
 
 
-
 var _CreateSecretCommand = class _CreateSecretCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1390,7 +1389,6 @@ var CreateSecretCommand = _CreateSecretCommand;
 
 
 
-
 var _DeleteResourcePolicyCommand = class _DeleteResourcePolicyCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1407,7 +1405,6 @@ var DeleteResourcePolicyCommand = _DeleteResourcePolicyCommand;
 
 
 
-
 var _DeleteSecretCommand = class _DeleteSecretCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1424,7 +1421,6 @@ var DeleteSecretCommand = _DeleteSecretCommand;
 
 
 
-
 var _DescribeSecretCommand = class _DescribeSecretCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1441,7 +1437,6 @@ var DescribeSecretCommand = _DescribeSecretCommand;
 
 
 
-
 var _GetRandomPasswordCommand = class _GetRandomPasswordCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1458,7 +1453,6 @@ var GetRandomPasswordCommand = _GetRandomPasswordCommand;
 
 
 
-
 var _GetResourcePolicyCommand = class _GetResourcePolicyCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1475,7 +1469,6 @@ var GetResourcePolicyCommand = _GetResourcePolicyCommand;
 
 
 
-
 var _GetSecretValueCommand = class _GetSecretValueCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1492,7 +1485,6 @@ var GetSecretValueCommand = _GetSecretValueCommand;
 
 
 
-
 var _ListSecretsCommand = class _ListSecretsCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1509,7 +1501,6 @@ var ListSecretsCommand = _ListSecretsCommand;
 
 
 
-
 var _ListSecretVersionIdsCommand = class _ListSecretVersionIdsCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1526,7 +1517,6 @@ var ListSecretVersionIdsCommand = _ListSecretVersionIdsCommand;
 
 
 
-
 var _PutResourcePolicyCommand = class _PutResourcePolicyCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1543,7 +1533,6 @@ var PutResourcePolicyCommand = _PutResourcePolicyCommand;
 
 
 
-
 var _PutSecretValueCommand = class _PutSecretValueCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1560,7 +1549,6 @@ var PutSecretValueCommand = _PutSecretValueCommand;
 
 
 
-
 var _RemoveRegionsFromReplicationCommand = class _RemoveRegionsFromReplicationCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1577,7 +1565,6 @@ var RemoveRegionsFromReplicationCommand = _RemoveRegionsFromReplicationCommand;
 
 
 
-
 var _ReplicateSecretToRegionsCommand = class _ReplicateSecretToRegionsCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1594,7 +1581,6 @@ var ReplicateSecretToRegionsCommand = _ReplicateSecretToRegionsCommand;
 
 
 
-
 var _RestoreSecretCommand = class _RestoreSecretCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1611,7 +1597,6 @@ var RestoreSecretCommand = _RestoreSecretCommand;
 
 
 
-
 var _RotateSecretCommand = class _RotateSecretCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1628,7 +1613,6 @@ var RotateSecretCommand = _RotateSecretCommand;
 
 
 
-
 var _StopReplicationToReplicaCommand = class _StopReplicationToReplicaCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1645,7 +1629,6 @@ var StopReplicationToReplicaCommand = _StopReplicationToReplicaCommand;
 
 
 
-
 var _TagResourceCommand = class _TagResourceCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1662,7 +1645,6 @@ var TagResourceCommand = _TagResourceCommand;
 
 
 
-
 var _UntagResourceCommand = class _UntagResourceCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1679,7 +1661,6 @@ var UntagResourceCommand = _UntagResourceCommand;
 
 
 
-
 var _UpdateSecretCommand = class _UpdateSecretCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1696,7 +1677,6 @@ var UpdateSecretCommand = _UpdateSecretCommand;
 
 
 
-
 var _UpdateSecretVersionStageCommand = class _UpdateSecretVersionStageCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {
@@ -1713,7 +1693,6 @@ var UpdateSecretVersionStageCommand = _UpdateSecretVersionStageCommand;
 
 
 
-
 var _ValidateResourcePolicyCommand = class _ValidateResourcePolicyCommand extends import_smithy_client.Command.classBuilder().ep({
   ...commonParams
 }).m(function(Command, cs, config, o) {

package/dist-es/models/models_0.js

@@ -201,6 +201,7 @@ export const PutSecretValueRequestFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.SecretBinary && { SecretBinary: SENSITIVE_STRING }),
     ...(obj.SecretString && { SecretString: SENSITIVE_STRING }),
+    ...(obj.RotationToken && { RotationToken: SENSITIVE_STRING }),
 });
 export const UpdateSecretRequestFilterSensitiveLog = (obj) => ({
     ...obj,

package/dist-es/protocols/Aws_json1_1.js

@@ -611,6 +611,7 @@ const se_CreateSecretRequest = (input, context) => {
 const se_PutSecretValueRequest = (input, context) => {
     return take(input, {
         ClientRequestToken: [true, (_) => _ ?? generateIdempotencyToken()],
+        RotationToken: [],
         SecretBinary: context.base64Encoder,
         SecretId: [],
         SecretString: [],

package/dist-types/commands/BatchGetSecretValueCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/CancelRotateSecretCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/CreateSecretCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/DeleteResourcePolicyCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/DeleteSecretCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/DescribeSecretCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/GetRandomPasswordCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/GetResourcePolicyCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/GetSecretValueCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/ListSecretVersionIdsCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/ListSecretsCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/PutResourcePolicyCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/PutSecretValueCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *
@@ -47,7 +48,7 @@ declare const PutSecretValueCommand_base: {
  *       same secret data, the operation succeeds but does nothing. However, if the secret data is
  *       different, then the operation fails because you can't modify an existing version; you can
  *       only create new ones.</p>
- *          <p>Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters except <code>SecretBinary</code> or <code>SecretString</code> because it might be logged. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html">Logging Secrets Manager events with CloudTrail</a>.</p>
+ *          <p>Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters except <code>SecretBinary</code>, <code>SecretString</code>, or <code>RotationToken</code> because it might be logged. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html">Logging Secrets Manager events with CloudTrail</a>.</p>
  *          <p>
  *             <b>Required permissions: </b>
  *             <code>secretsmanager:PutSecretValue</code>.
@@ -68,6 +69,7 @@ declare const PutSecretValueCommand_base: {
  *   VersionStages: [ // SecretVersionStagesType
  *     "STRING_VALUE",
  *   ],
+ *   RotationToken: "STRING_VALUE",
  * };
  * const command = new PutSecretValueCommand(input);
  * const response = await client.send(command);

package/dist-types/commands/RemoveRegionsFromReplicationCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/ReplicateSecretToRegionsCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/RestoreSecretCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/RotateSecretCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/StopReplicationToReplicaCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/TagResourceCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/UntagResourceCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/UpdateSecretCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/UpdateSecretVersionStageCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/ValidateResourcePolicyCommand.d.ts

@@ -5,7 +5,8 @@ import { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTyp
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/index.d.ts

@@ -31,8 +31,8 @@
 export * from "./SecretsManagerClient";
 export * from "./SecretsManager";
 export { ClientInputEndpointParameters } from "./endpoint/EndpointParameters";
-export { RuntimeExtension } from "./runtimeExtensions";
-export { SecretsManagerExtensionConfiguration } from "./extensionConfiguration";
+export type { RuntimeExtension } from "./runtimeExtensions";
+export type { SecretsManagerExtensionConfiguration } from "./extensionConfiguration";
 export * from "./commands";
 export * from "./pagination";
 export * from "./models";

package/dist-types/models/SecretsManagerServiceException.d.ts

@@ -1,5 +1,6 @@
 import { ServiceException as __ServiceException, ServiceExceptionOptions as __ServiceExceptionOptions } from "@smithy/smithy-client";
-export { __ServiceException, __ServiceExceptionOptions };
+export type { __ServiceExceptionOptions };
+export { __ServiceException };
 /**
  * @public
  *

package/dist-types/models/models_0.d.ts

@@ -416,6 +416,7 @@ export interface CreateSecretRequest {
      *          <p>Either <code>SecretString</code> or <code>SecretBinary</code> must have a value, but not
      *       both.</p>
      *          <p>This parameter is not available in the Secrets Manager console.</p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
      * @public
      */
     SecretBinary?: Uint8Array;
@@ -427,6 +428,7 @@ export interface CreateSecretRequest {
      *          <p>If you create a secret by using the Secrets Manager console then Secrets Manager puts the protected
      *       secret text in only the <code>SecretString</code> parameter. The Secrets Manager console stores the
      *       information as a JSON structure of key/value pairs that a Lambda rotation function can parse.</p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
      * @public
      */
     SecretString?: string;
@@ -798,7 +800,7 @@ export interface DescribeSecretResponse {
      */
     KmsKeyId?: string;
     /**
-     * <p>Specifies whether automatic rotation is turned on for this secret.</p>
+     * <p>Specifies whether automatic rotation is turned on for this secret.  If the secret has never been configured for rotation, Secrets Manager returns null.</p>
      *          <p>To turn on rotation, use <a>RotateSecret</a>. To turn off
      *       rotation, use <a>CancelRotateSecret</a>.</p>
      * @public
@@ -1021,7 +1023,7 @@ export interface GetResourcePolicyResponse {
  */
 export interface GetSecretValueRequest {
     /**
-     * <p>The ARN or name of the secret to retrieve.</p>
+     * <p>The ARN or name of the secret to retrieve. To retrieve a secret from another account, you must use an ARN.</p>
      *          <p>For an ARN, we recommend that you specify a complete ARN rather
      *       than a partial ARN. See <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot.html#ARN_secretnamehyphen">Finding a secret from a partial ARN</a>.</p>
      * @public
@@ -1072,6 +1074,7 @@ export interface GetSecretValueResponse {
      *          <p>If the secret was created by using the Secrets Manager console, or if the secret value was
      *       originally provided as a string, then this field is omitted. The secret value appears in
      *       <code>SecretString</code> instead.</p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
      * @public
      */
     SecretBinary?: Uint8Array;
@@ -1080,6 +1083,7 @@ export interface GetSecretValueResponse {
      *       through the Secrets Manager console.</p>
      *          <p>If this secret was created by using the console, then Secrets Manager stores the information as a
      *       JSON structure of key/value pairs. </p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
      * @public
      */
     SecretString?: string;
@@ -1482,6 +1486,7 @@ export interface PutSecretValueRequest {
      *       contents of the file as a parameter. </p>
      *          <p>You must include <code>SecretBinary</code> or <code>SecretString</code>, but not both.</p>
      *          <p>You can't access this value from the Secrets Manager console.</p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
      * @public
      */
     SecretBinary?: Uint8Array;
@@ -1489,6 +1494,7 @@ export interface PutSecretValueRequest {
      * <p>The text to encrypt and store in the new version of the secret. </p>
      *          <p>You must include <code>SecretBinary</code> or <code>SecretString</code>, but not both.</p>
      *          <p>We recommend you create the secret string as JSON key/value pairs, as shown in the example.</p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
      * @public
      */
     SecretString?: string;
@@ -1506,6 +1512,12 @@ export interface PutSecretValueRequest {
      * @public
      */
     VersionStages?: string[];
+    /**
+     * <p>A unique identifier that indicates the source of the request. For cross-account rotation (when you rotate a secret in one account by using a Lambda rotation function in another account) and the Lambda rotation function assumes an IAM role to call Secrets Manager, Secrets Manager validates the identity with the rotation token. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html">How rotation works</a>.</p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
+     * @public
+     */
+    RotationToken?: string;
 }
 /**
  * @public
@@ -1812,6 +1824,7 @@ export interface UpdateSecretRequest {
      *          <p>Either <code>SecretBinary</code> or
      *         <code>SecretString</code> must have a value, but not both.</p>
      *          <p>You can't access this parameter in the Secrets Manager console.</p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
      * @public
      */
     SecretBinary?: Uint8Array;
@@ -1820,6 +1833,7 @@ export interface UpdateSecretRequest {
      *       version of the secret. We recommend you use a JSON structure of key/value pairs for your secret value. </p>
      *          <p>Either <code>SecretBinary</code> or <code>SecretString</code> must have
      *       a value, but not both. </p>
+     *          <p>Sensitive: This field contains sensitive information, so the service does not include it in CloudTrail log entries. If you create your own log entries, you must also avoid logging the information in this field.</p>
      * @public
      */
     SecretString?: string;
@@ -1899,7 +1913,7 @@ export interface UpdateSecretVersionStageResponse {
  */
 export interface ValidateResourcePolicyRequest {
     /**
-     * <p>This field is reserved for internal use.</p>
+     * <p>The ARN or name of the secret with the resource-based policy you want to validate.</p>
      * @public
      */
     SecretId?: string;

package/dist-types/ts3.4/commands/BatchGetSecretValueCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface BatchGetSecretValueCommandInput
   extends BatchGetSecretValueRequest {}
 export interface BatchGetSecretValueCommandOutput

package/dist-types/ts3.4/commands/CancelRotateSecretCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface CancelRotateSecretCommandInput
   extends CancelRotateSecretRequest {}
 export interface CancelRotateSecretCommandOutput

package/dist-types/ts3.4/commands/CreateSecretCommand.d.ts

@@ -6,7 +6,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface CreateSecretCommandInput extends CreateSecretRequest {}
 export interface CreateSecretCommandOutput
   extends CreateSecretResponse,

package/dist-types/ts3.4/commands/DeleteResourcePolicyCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface DeleteResourcePolicyCommandInput
   extends DeleteResourcePolicyRequest {}
 export interface DeleteResourcePolicyCommandOutput

package/dist-types/ts3.4/commands/DeleteSecretCommand.d.ts

@@ -6,7 +6,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface DeleteSecretCommandInput extends DeleteSecretRequest {}
 export interface DeleteSecretCommandOutput
   extends DeleteSecretResponse,

package/dist-types/ts3.4/commands/DescribeSecretCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface DescribeSecretCommandInput extends DescribeSecretRequest {}
 export interface DescribeSecretCommandOutput
   extends DescribeSecretResponse,

package/dist-types/ts3.4/commands/GetRandomPasswordCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface GetRandomPasswordCommandInput
   extends GetRandomPasswordRequest {}
 export interface GetRandomPasswordCommandOutput

package/dist-types/ts3.4/commands/GetResourcePolicyCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface GetResourcePolicyCommandInput
   extends GetResourcePolicyRequest {}
 export interface GetResourcePolicyCommandOutput

package/dist-types/ts3.4/commands/GetSecretValueCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface GetSecretValueCommandInput extends GetSecretValueRequest {}
 export interface GetSecretValueCommandOutput
   extends GetSecretValueResponse,

package/dist-types/ts3.4/commands/ListSecretVersionIdsCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface ListSecretVersionIdsCommandInput
   extends ListSecretVersionIdsRequest {}
 export interface ListSecretVersionIdsCommandOutput

package/dist-types/ts3.4/commands/ListSecretsCommand.d.ts

@@ -6,7 +6,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface ListSecretsCommandInput extends ListSecretsRequest {}
 export interface ListSecretsCommandOutput
   extends ListSecretsResponse,

package/dist-types/ts3.4/commands/PutResourcePolicyCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface PutResourcePolicyCommandInput
   extends PutResourcePolicyRequest {}
 export interface PutResourcePolicyCommandOutput

package/dist-types/ts3.4/commands/PutSecretValueCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface PutSecretValueCommandInput extends PutSecretValueRequest {}
 export interface PutSecretValueCommandOutput
   extends PutSecretValueResponse,

package/dist-types/ts3.4/commands/RemoveRegionsFromReplicationCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface RemoveRegionsFromReplicationCommandInput
   extends RemoveRegionsFromReplicationRequest {}
 export interface RemoveRegionsFromReplicationCommandOutput

package/dist-types/ts3.4/commands/ReplicateSecretToRegionsCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface ReplicateSecretToRegionsCommandInput
   extends ReplicateSecretToRegionsRequest {}
 export interface ReplicateSecretToRegionsCommandOutput

package/dist-types/ts3.4/commands/RestoreSecretCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface RestoreSecretCommandInput extends RestoreSecretRequest {}
 export interface RestoreSecretCommandOutput
   extends RestoreSecretResponse,

package/dist-types/ts3.4/commands/RotateSecretCommand.d.ts

@@ -6,7 +6,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface RotateSecretCommandInput extends RotateSecretRequest {}
 export interface RotateSecretCommandOutput
   extends RotateSecretResponse,

package/dist-types/ts3.4/commands/StopReplicationToReplicaCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface StopReplicationToReplicaCommandInput
   extends StopReplicationToReplicaRequest {}
 export interface StopReplicationToReplicaCommandOutput

package/dist-types/ts3.4/commands/TagResourceCommand.d.ts

@@ -6,7 +6,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface TagResourceCommandInput extends TagResourceRequest {}
 export interface TagResourceCommandOutput extends __MetadataBearer {}
 declare const TagResourceCommand_base: {

package/dist-types/ts3.4/commands/UntagResourceCommand.d.ts

@@ -6,7 +6,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface UntagResourceCommandInput extends UntagResourceRequest {}
 export interface UntagResourceCommandOutput extends __MetadataBearer {}
 declare const UntagResourceCommand_base: {

package/dist-types/ts3.4/commands/UpdateSecretCommand.d.ts

@@ -6,7 +6,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface UpdateSecretCommandInput extends UpdateSecretRequest {}
 export interface UpdateSecretCommandOutput
   extends UpdateSecretResponse,

package/dist-types/ts3.4/commands/UpdateSecretVersionStageCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface UpdateSecretVersionStageCommandInput
   extends UpdateSecretVersionStageRequest {}
 export interface UpdateSecretVersionStageCommandOutput

package/dist-types/ts3.4/commands/ValidateResourcePolicyCommand.d.ts

@@ -9,7 +9,8 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../SecretsManagerClient";
-export { __MetadataBearer, $Command };
+export { __MetadataBearer };
+export { $Command };
 export interface ValidateResourcePolicyCommandInput
   extends ValidateResourcePolicyRequest {}
 export interface ValidateResourcePolicyCommandOutput

package/dist-types/ts3.4/models/SecretsManagerServiceException.d.ts

@@ -2,7 +2,8 @@ import {
   ServiceException as __ServiceException,
   ServiceExceptionOptions as __ServiceExceptionOptions,
 } from "@smithy/smithy-client";
-export { __ServiceException, __ServiceExceptionOptions };
+export { __ServiceExceptionOptions };
+export { __ServiceException };
 export declare class SecretsManagerServiceException extends __ServiceException {
   constructor(options: __ServiceExceptionOptions);
 }

package/dist-types/ts3.4/models/models_0.d.ts

@@ -330,6 +330,7 @@ export interface PutSecretValueRequest {
   SecretBinary?: Uint8Array;
   SecretString?: string;
   VersionStages?: string[];
+  RotationToken?: string;
 }
 export interface PutSecretValueResponse {
   ARN?: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-secrets-manager",
   "description": "AWS SDK for JavaScript Secrets Manager Client for Node.js, Browser and React Native",
-  "version": "3.590.0",
+  "version": "3.596.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-secrets-manager",
@@ -20,10 +20,10 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sso-oidc": "3.590.0",
-    "@aws-sdk/client-sts": "3.590.0",
-    "@aws-sdk/core": "3.588.0",
-    "@aws-sdk/credential-provider-node": "3.590.0",
+    "@aws-sdk/client-sso-oidc": "3.596.0",
+    "@aws-sdk/client-sts": "3.596.0",
+    "@aws-sdk/core": "3.592.0",
+    "@aws-sdk/credential-provider-node": "3.596.0",
     "@aws-sdk/middleware-host-header": "3.577.0",
     "@aws-sdk/middleware-logger": "3.577.0",
     "@aws-sdk/middleware-recursion-detection": "3.577.0",
@@ -34,7 +34,7 @@
     "@aws-sdk/util-user-agent-browser": "3.577.0",
     "@aws-sdk/util-user-agent-node": "3.587.0",
     "@smithy/config-resolver": "^3.0.1",
-    "@smithy/core": "^2.1.1",
+    "@smithy/core": "^2.2.0",
     "@smithy/fetch-http-handler": "^3.0.1",
     "@smithy/hash-node": "^3.0.0",
     "@smithy/invalid-dependency": "^3.0.0",