@aws-sdk/client-secrets-manager 3.87.0 → 3.94.0

package/CHANGELOG.md

@@ -3,6 +3,30 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.94.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.93.0...v3.94.0) (2022-05-18)
+
+**Note:** Version bump only for package @aws-sdk/client-secrets-manager
+
+
+
+
+
+# [3.92.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.91.0...v3.92.0) (2022-05-16)
+
+**Note:** Version bump only for package @aws-sdk/client-secrets-manager
+
+
+
+
+
+# [3.89.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.88.0...v3.89.0) (2022-05-11)
+
+**Note:** Version bump only for package @aws-sdk/client-secrets-manager
+
+
+
+
+
 # [3.87.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.86.0...v3.87.0) (2022-05-09)
 
 **Note:** Version bump only for package @aws-sdk/client-secrets-manager

package/dist-types/SecretsManager.d.ts

@@ -71,15 +71,16 @@ export declare class SecretsManager extends SecretsManagerClient {
     /**
      * <p>Turns off automatic rotation, and if a rotation is currently in
      *       progress, cancels the rotation.</p>
+     *          <p>If you cancel a rotation in progress, it can leave the <code>VersionStage</code>
+     *       labels in an unexpected state. You might
+     *       need to remove the staging label <code>AWSPENDING</code> from the partially created version.
+     *       You also need to determine whether to roll back to the previous version of the secret
+     *       by moving the staging label <code>AWSCURRENT</code> to the version that has <code>AWSPENDING</code>.
+     *       To determine
+     *       which version has a specific staging label, call <a>ListSecretVersionIds</a>. Then use
+     *      <a>UpdateSecretVersionStage</a> to change staging labels.
+     *      For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html">How rotation works</a>.</p>
      *          <p>To turn on automatic rotation again, call <a>RotateSecret</a>.</p>
-     *          <note>
-     *             <p>If you cancel a rotation in progress, it can leave the <code>VersionStage</code>
-     *         labels in an unexpected state. Depending on the step of the rotation in progress, you might
-     *         need to remove the staging label <code>AWSPENDING</code> from the partially created version, specified
-     *         by the <code>VersionId</code> response value. We recommend you also evaluate the partially rotated
-     *         new version to see if it should be deleted. You can delete a version by removing all staging labels
-     *         from it.</p>
-     *          </note>
      *          <p>
      *             <b>Required permissions: </b>
      *             <code>secretsmanager:CancelRotateSecret</code>.
@@ -146,14 +147,23 @@ export declare class SecretsManager extends SecretsManagerClient {
      *       The default recovery window is 30 days. Secrets Manager attaches a <code>DeletionDate</code> stamp to
      *       the secret that specifies the end of the recovery window. At the end of the recovery window,
      *       Secrets Manager deletes the secret permanently.</p>
-     *          <p>For information about deleting a secret in the console, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_delete-secret.html">https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_delete-secret.html</a>. </p>
+     *          <p>You can't delete a primary secret that is replicated to other Regions. You must first delete the
+     *     replicas using <a>RemoveRegionsFromReplication</a>, and then delete the primary secret.
+     *     When you delete a replica, it is deleted immediately.</p>
+     *          <p>You can't directly delete a version of a secret. Instead, you remove all staging labels
+     *     from the version using <a>UpdateSecretVersionStage</a>. This marks the version as deprecated,
+     *     and then Secrets Manager can automatically delete the version in the background.</p>
+     *          <p>To determine whether an application still uses a secret, you can create an Amazon CloudWatch alarm
+     *     to alert you to any attempts to access a secret during the recovery window. For more information,
+     *     see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/monitoring_cloudwatch_deleted-secrets.html">
+     *     Monitor secrets scheduled for deletion</a>.</p>
      *          <p>Secrets Manager performs the permanent secret deletion at the end of the waiting period as a
      *         background task with low priority. There is no guarantee of a specific time after the
      *         recovery window for the permanent delete to occur.</p>
      *          <p>At any time before recovery window ends, you can use <a>RestoreSecret</a> to
      *       remove the <code>DeletionDate</code> and cancel the deletion of the secret.</p>
-     *          <p>In a secret scheduled for deletion, you cannot access the encrypted secret value.
-     *       To access that information, first cancel the deletion with <a>RestoreSecret</a> and then retrieve the information.</p>
+     *          <p>When a secret is scheduled for deletion, you cannot retrieve the secret value.
+     *       You must first cancel the deletion with <a>RestoreSecret</a> and then you can retrieve the secret.</p>
      *          <p>
      *             <b>Required permissions: </b>
      *             <code>secretsmanager:DeleteSecret</code>.
@@ -232,8 +242,7 @@ export declare class SecretsManager extends SecretsManagerClient {
      *          <p>To list the versions of a secret, use <a>ListSecretVersionIds</a>.</p>
      *          <p>To get the secret value from <code>SecretString</code> or <code>SecretBinary</code>,
      *       call <a>GetSecretValue</a>.</p>
-     *          <p>For information about finding secrets in the console, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_search-secret.html">Enhanced search capabilities
-     *       for secrets in Secrets Manager</a>.</p>
+     *          <p>For information about finding secrets in the console, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_search-secret.html">Find secrets in Secrets Manager</a>.</p>
      *          <p>
      *             <b>Required permissions: </b>
      *             <code>secretsmanager:ListSecrets</code>.
@@ -245,10 +254,10 @@ export declare class SecretsManager extends SecretsManagerClient {
     listSecrets(args: ListSecretsCommandInput, cb: (err: any, data?: ListSecretsCommandOutput) => void): void;
     listSecrets(args: ListSecretsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListSecretsCommandOutput) => void): void;
     /**
-     * <p>Lists the versions for a secret. </p>
+     * <p>Lists the versions of a secret. Secrets Manager uses staging labels to indicate the different versions
+     *     of a secret. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/getting-started.html#term_version">
+     *     Secrets Manager concepts: Versions</a>.</p>
      *          <p>To list the secrets in the account, use <a>ListSecrets</a>.</p>
-     *          <p>To get the secret value from <code>SecretString</code> or <code>SecretBinary</code>,
-     *       call <a>GetSecretValue</a>.</p>
      *          <p>
      *             <b>Required permissions: </b>
      *             <code>secretsmanager:ListSecretVersionIds</code>.

package/dist-types/commands/CancelRotateSecretCommand.d.ts

@@ -9,15 +9,16 @@ export interface CancelRotateSecretCommandOutput extends CancelRotateSecretRespo
 /**
  * <p>Turns off automatic rotation, and if a rotation is currently in
  *       progress, cancels the rotation.</p>
+ *          <p>If you cancel a rotation in progress, it can leave the <code>VersionStage</code>
+ *       labels in an unexpected state. You might
+ *       need to remove the staging label <code>AWSPENDING</code> from the partially created version.
+ *       You also need to determine whether to roll back to the previous version of the secret
+ *       by moving the staging label <code>AWSCURRENT</code> to the version that has <code>AWSPENDING</code>.
+ *       To determine
+ *       which version has a specific staging label, call <a>ListSecretVersionIds</a>. Then use
+ *      <a>UpdateSecretVersionStage</a> to change staging labels.
+ *      For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html">How rotation works</a>.</p>
  *          <p>To turn on automatic rotation again, call <a>RotateSecret</a>.</p>
- *          <note>
- *             <p>If you cancel a rotation in progress, it can leave the <code>VersionStage</code>
- *         labels in an unexpected state. Depending on the step of the rotation in progress, you might
- *         need to remove the staging label <code>AWSPENDING</code> from the partially created version, specified
- *         by the <code>VersionId</code> response value. We recommend you also evaluate the partially rotated
- *         new version to see if it should be deleted. You can delete a version by removing all staging labels
- *         from it.</p>
- *          </note>
  *          <p>
  *             <b>Required permissions: </b>
  *             <code>secretsmanager:CancelRotateSecret</code>.

package/dist-types/commands/DeleteSecretCommand.d.ts

@@ -12,14 +12,23 @@ export interface DeleteSecretCommandOutput extends DeleteSecretResponse, __Metad
  *       The default recovery window is 30 days. Secrets Manager attaches a <code>DeletionDate</code> stamp to
  *       the secret that specifies the end of the recovery window. At the end of the recovery window,
  *       Secrets Manager deletes the secret permanently.</p>
- *          <p>For information about deleting a secret in the console, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_delete-secret.html">https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_delete-secret.html</a>. </p>
+ *          <p>You can't delete a primary secret that is replicated to other Regions. You must first delete the
+ *     replicas using <a>RemoveRegionsFromReplication</a>, and then delete the primary secret.
+ *     When you delete a replica, it is deleted immediately.</p>
+ *          <p>You can't directly delete a version of a secret. Instead, you remove all staging labels
+ *     from the version using <a>UpdateSecretVersionStage</a>. This marks the version as deprecated,
+ *     and then Secrets Manager can automatically delete the version in the background.</p>
+ *          <p>To determine whether an application still uses a secret, you can create an Amazon CloudWatch alarm
+ *     to alert you to any attempts to access a secret during the recovery window. For more information,
+ *     see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/monitoring_cloudwatch_deleted-secrets.html">
+ *     Monitor secrets scheduled for deletion</a>.</p>
  *          <p>Secrets Manager performs the permanent secret deletion at the end of the waiting period as a
  *         background task with low priority. There is no guarantee of a specific time after the
  *         recovery window for the permanent delete to occur.</p>
  *          <p>At any time before recovery window ends, you can use <a>RestoreSecret</a> to
  *       remove the <code>DeletionDate</code> and cancel the deletion of the secret.</p>
- *          <p>In a secret scheduled for deletion, you cannot access the encrypted secret value.
- *       To access that information, first cancel the deletion with <a>RestoreSecret</a> and then retrieve the information.</p>
+ *          <p>When a secret is scheduled for deletion, you cannot retrieve the secret value.
+ *       You must first cancel the deletion with <a>RestoreSecret</a> and then you can retrieve the secret.</p>
  *          <p>
  *             <b>Required permissions: </b>
  *             <code>secretsmanager:DeleteSecret</code>.

package/dist-types/commands/ListSecretVersionIdsCommand.d.ts

@@ -7,10 +7,10 @@ export interface ListSecretVersionIdsCommandInput extends ListSecretVersionIdsRe
 export interface ListSecretVersionIdsCommandOutput extends ListSecretVersionIdsResponse, __MetadataBearer {
 }
 /**
- * <p>Lists the versions for a secret. </p>
+ * <p>Lists the versions of a secret. Secrets Manager uses staging labels to indicate the different versions
+ *     of a secret. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/getting-started.html#term_version">
+ *     Secrets Manager concepts: Versions</a>.</p>
  *          <p>To list the secrets in the account, use <a>ListSecrets</a>.</p>
- *          <p>To get the secret value from <code>SecretString</code> or <code>SecretBinary</code>,
- *       call <a>GetSecretValue</a>.</p>
  *          <p>
  *             <b>Required permissions: </b>
  *             <code>secretsmanager:ListSecretVersionIds</code>.

package/dist-types/commands/ListSecretsCommand.d.ts

@@ -12,8 +12,7 @@ export interface ListSecretsCommandOutput extends ListSecretsResponse, __Metadat
  *          <p>To list the versions of a secret, use <a>ListSecretVersionIds</a>.</p>
  *          <p>To get the secret value from <code>SecretString</code> or <code>SecretBinary</code>,
  *       call <a>GetSecretValue</a>.</p>
- *          <p>For information about finding secrets in the console, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_search-secret.html">Enhanced search capabilities
- *       for secrets in Secrets Manager</a>.</p>
+ *          <p>For information about finding secrets in the console, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_search-secret.html">Find secrets in Secrets Manager</a>.</p>
  *          <p>
  *             <b>Required permissions: </b>
  *             <code>secretsmanager:ListSecrets</code>.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-secrets-manager",
   "description": "AWS SDK for JavaScript Secrets Manager Client for Node.js, Browser and React Native",
-  "version": "3.87.0",
+  "version": "3.94.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -18,9 +18,9 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "2.0.0",
     "@aws-crypto/sha256-js": "2.0.0",
-    "@aws-sdk/client-sts": "3.87.0",
+    "@aws-sdk/client-sts": "3.94.0",
     "@aws-sdk/config-resolver": "3.80.0",
-    "@aws-sdk/credential-provider-node": "3.87.0",
+    "@aws-sdk/credential-provider-node": "3.94.0",
     "@aws-sdk/fetch-http-handler": "3.78.0",
     "@aws-sdk/hash-node": "3.78.0",
     "@aws-sdk/invalid-dependency": "3.78.0",
@@ -33,7 +33,7 @@
     "@aws-sdk/middleware-stack": "3.78.0",
     "@aws-sdk/middleware-user-agent": "3.78.0",
     "@aws-sdk/node-config-provider": "3.80.0",
-    "@aws-sdk/node-http-handler": "3.82.0",
+    "@aws-sdk/node-http-handler": "3.94.0",
     "@aws-sdk/protocol-http": "3.78.0",
     "@aws-sdk/smithy-client": "3.85.0",
     "@aws-sdk/types": "3.78.0",