@depup/aws-sdk__client-secrets-manager 3.1010.0-depup.0

package/dist-types/commands/PutResourcePolicyCommand.d.ts

@@ -0,0 +1,147 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { PutResourcePolicyRequest, PutResourcePolicyResponse } from "../models/models_0";
+import type { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link PutResourcePolicyCommand}.
+ */
+export interface PutResourcePolicyCommandInput extends PutResourcePolicyRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link PutResourcePolicyCommand}.
+ */
+export interface PutResourcePolicyCommandOutput extends PutResourcePolicyResponse, __MetadataBearer {
+}
+declare const PutResourcePolicyCommand_base: {
+    new (input: PutResourcePolicyCommandInput): import("@smithy/smithy-client").CommandImpl<PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput, SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: PutResourcePolicyCommandInput): import("@smithy/smithy-client").CommandImpl<PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput, SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>Attaches a resource-based permission policy to a secret. A resource-based policy is
+ *             optional. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication and access control for Secrets Manager</a>
+ *          </p>
+ *          <p>For information about attaching a policy in the console, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_resource-based-policies.html">Attach a permissions policy to a secret</a>.</p>
+ *          <p>Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters because it might be logged. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html">Logging Secrets Manager events with CloudTrail</a>.</p>
+ *          <p>
+ *             <b>Required permissions:
+ *                 </b>
+ *             <code>secretsmanager:PutResourcePolicy</code>. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions">
+ *       IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
+ *       and access control in Secrets Manager</a>. </p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SecretsManagerClient, PutResourcePolicyCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
+ * // const { SecretsManagerClient, PutResourcePolicyCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
+ * // import type { SecretsManagerClientConfig } from "@aws-sdk/client-secrets-manager";
+ * const config = {}; // type is SecretsManagerClientConfig
+ * const client = new SecretsManagerClient(config);
+ * const input = { // PutResourcePolicyRequest
+ *   SecretId: "STRING_VALUE", // required
+ *   ResourcePolicy: "STRING_VALUE", // required
+ *   BlockPublicPolicy: true || false,
+ * };
+ * const command = new PutResourcePolicyCommand(input);
+ * const response = await client.send(command);
+ * // { // PutResourcePolicyResponse
+ * //   ARN: "STRING_VALUE",
+ * //   Name: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param PutResourcePolicyCommandInput - {@link PutResourcePolicyCommandInput}
+ * @returns {@link PutResourcePolicyCommandOutput}
+ * @see {@link PutResourcePolicyCommandInput} for command's `input` shape.
+ * @see {@link PutResourcePolicyCommandOutput} for command's `response` shape.
+ * @see {@link SecretsManagerClientResolvedConfig | config} for SecretsManagerClient's `config` shape.
+ *
+ * @throws {@link InternalServiceError} (server fault)
+ *  <p>An error occurred on the server side.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The parameter name or value is invalid.</p>
+ *
+ * @throws {@link InvalidRequestException} (client fault)
+ *  <p>A parameter value is not valid for the current state of the
+ *       resource.</p>
+ *          <p>Possible causes:</p>
+ *          <ul>
+ *             <li>
+ *                <p>The secret is scheduled for deletion.</p>
+ *             </li>
+ *             <li>
+ *                <p>You tried to enable rotation on a secret that doesn't already have a Lambda function
+ *           ARN configured and you didn't include such an ARN as a parameter in this call. </p>
+ *             </li>
+ *             <li>
+ *                <p>The secret is managed by another service, and you must use that service to update it.
+ *           For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html">Secrets managed by other Amazon Web Services services</a>.</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link MalformedPolicyDocumentException} (client fault)
+ *  <p>The resource policy has syntax errors.</p>
+ *
+ * @throws {@link PublicPolicyException} (client fault)
+ *  <p>The <code>BlockPublicPolicy</code> parameter is set to true, and the resource policy did not prevent broad access to the secret.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>Secrets Manager can't find the resource that you asked for.</p>
+ *
+ * @throws {@link SecretsManagerServiceException}
+ * <p>Base exception class for all service exceptions from SecretsManager service.</p>
+ *
+ *
+ * @example To add a resource-based policy to a secret
+ * ```javascript
+ * // The following example shows how to add a resource-based policy to a secret.
+ * const input = {
+ *   ResourcePolicy: `{
+ * "Version":"2012-10-17",
+ * "Statement":[{
+ * "Effect":"Allow",
+ * "Principal":{
+ * "AWS":"arn:aws:iam::123456789012:root"
+ * },
+ * "Action":"secretsmanager:GetSecretValue",
+ * "Resource":"*"
+ * }]
+ * }`,
+ *   SecretId: "MyTestDatabaseSecret"
+ * };
+ * const command = new PutResourcePolicyCommand(input);
+ * const response = await client.send(command);
+ * /* response is
+ * {
+ *   ARN: "arn:aws:secretsmanager:us-west-2:123456789012:secret:MyTestDatabaseSecret-a1b2c3",
+ *   Name: "MyTestDatabaseSecret"
+ * }
+ * *\/
+ * ```
+ *
+ * @public
+ */
+export declare class PutResourcePolicyCommand extends PutResourcePolicyCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: PutResourcePolicyRequest;
+            output: PutResourcePolicyResponse;
+        };
+        sdk: {
+            input: PutResourcePolicyCommandInput;
+            output: PutResourcePolicyCommandOutput;
+        };
+    };
+}

package/dist-types/commands/PutSecretValueCommand.d.ts

@@ -0,0 +1,183 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { PutSecretValueRequest, PutSecretValueResponse } from "../models/models_0";
+import type { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link PutSecretValueCommand}.
+ */
+export interface PutSecretValueCommandInput extends PutSecretValueRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link PutSecretValueCommand}.
+ */
+export interface PutSecretValueCommandOutput extends PutSecretValueResponse, __MetadataBearer {
+}
+declare const PutSecretValueCommand_base: {
+    new (input: PutSecretValueCommandInput): import("@smithy/smithy-client").CommandImpl<PutSecretValueCommandInput, PutSecretValueCommandOutput, SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: PutSecretValueCommandInput): import("@smithy/smithy-client").CommandImpl<PutSecretValueCommandInput, PutSecretValueCommandOutput, SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>Creates a new version of your secret by creating a new encrypted value and attaching
+ *             it to the secret. version can contain a new <code>SecretString</code> value or a new
+ *                 <code>SecretBinary</code> value. </p>
+ *          <p>Do not call <code>PutSecretValue</code> at a sustained rate of more than once every 10
+ *             minutes. When you update the secret value, Secrets Manager creates a new version of the secret.
+ *             Secrets Manager keeps 100 of the most recent versions, but it keeps <i>all</i>
+ *             secret versions created in the last 24 hours. If you call <code>PutSecretValue</code>
+ *             more than once every 10 minutes, you will create more versions than Secrets Manager removes, and
+ *             you will reach the quota for secret versions.</p>
+ *          <p>You can specify the staging labels to attach to the new version in
+ *                 <code>VersionStages</code>. If you don't include <code>VersionStages</code>, then
+ *             Secrets Manager automatically moves the staging label <code>AWSCURRENT</code> to this version. If
+ *             this operation creates the first version for the secret, then Secrets Manager automatically
+ *             attaches the staging label <code>AWSCURRENT</code> to it. If this operation moves the
+ *             staging label <code>AWSCURRENT</code> from another version to this version, then Secrets Manager
+ *             also automatically moves the staging label <code>AWSPREVIOUS</code> to the version that
+ *                 <code>AWSCURRENT</code> was removed from.</p>
+ *          <p>This operation is idempotent. If you call this operation with a
+ *                 <code>ClientRequestToken</code> that matches an existing version's VersionId, and
+ *             you specify the same secret data, the operation succeeds but does nothing. However, if
+ *             the secret data is different, then the operation fails because you can't modify an
+ *             existing version; you can only create new ones.</p>
+ *          <p>Secrets Manager generates a CloudTrail log entry when you call this action.
+ *             Do not include sensitive information in request parameters except
+ *                 <code>SecretBinary</code>, <code>SecretString</code>, or <code>RotationToken</code>
+ *             because it might be logged. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html">Logging Secrets Manager events with CloudTrail</a>.</p>
+ *          <p>
+ *             <b>Required permissions:
+ *                 </b>
+ *             <code>secretsmanager:PutSecretValue</code>. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions">
+ *       IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
+ *       and access control in Secrets Manager</a>. </p>
+ *          <important>
+ *             <p>When you enter commands in a command shell, there is a risk of the command history being accessed or utilities having access to your command parameters. This is a concern if the command includes the value of a secret. Learn how to <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/security_cli-exposure-risks.html">Mitigate the risks of using command-line tools to store Secrets Manager secrets</a>.</p>
+ *          </important>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SecretsManagerClient, PutSecretValueCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
+ * // const { SecretsManagerClient, PutSecretValueCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
+ * // import type { SecretsManagerClientConfig } from "@aws-sdk/client-secrets-manager";
+ * const config = {}; // type is SecretsManagerClientConfig
+ * const client = new SecretsManagerClient(config);
+ * const input = { // PutSecretValueRequest
+ *   SecretId: "STRING_VALUE", // required
+ *   ClientRequestToken: "STRING_VALUE",
+ *   SecretBinary: new Uint8Array(), // e.g. Buffer.from("") or new TextEncoder().encode("")
+ *   SecretString: "STRING_VALUE",
+ *   VersionStages: [ // SecretVersionStagesType
+ *     "STRING_VALUE",
+ *   ],
+ *   RotationToken: "STRING_VALUE",
+ * };
+ * const command = new PutSecretValueCommand(input);
+ * const response = await client.send(command);
+ * // { // PutSecretValueResponse
+ * //   ARN: "STRING_VALUE",
+ * //   Name: "STRING_VALUE",
+ * //   VersionId: "STRING_VALUE",
+ * //   VersionStages: [ // SecretVersionStagesType
+ * //     "STRING_VALUE",
+ * //   ],
+ * // };
+ *
+ * ```
+ *
+ * @param PutSecretValueCommandInput - {@link PutSecretValueCommandInput}
+ * @returns {@link PutSecretValueCommandOutput}
+ * @see {@link PutSecretValueCommandInput} for command's `input` shape.
+ * @see {@link PutSecretValueCommandOutput} for command's `response` shape.
+ * @see {@link SecretsManagerClientResolvedConfig | config} for SecretsManagerClient's `config` shape.
+ *
+ * @throws {@link DecryptionFailure} (client fault)
+ *  <p>Secrets Manager can't decrypt the protected secret text using the provided KMS key. </p>
+ *
+ * @throws {@link EncryptionFailure} (client fault)
+ *  <p>Secrets Manager can't encrypt the protected secret text using the provided KMS key. Check that the
+ *       KMS key is available, enabled, and not in an invalid state. For more
+ *       information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html">Key state: Effect on your KMS key</a>.</p>
+ *
+ * @throws {@link InternalServiceError} (server fault)
+ *  <p>An error occurred on the server side.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The parameter name or value is invalid.</p>
+ *
+ * @throws {@link InvalidRequestException} (client fault)
+ *  <p>A parameter value is not valid for the current state of the
+ *       resource.</p>
+ *          <p>Possible causes:</p>
+ *          <ul>
+ *             <li>
+ *                <p>The secret is scheduled for deletion.</p>
+ *             </li>
+ *             <li>
+ *                <p>You tried to enable rotation on a secret that doesn't already have a Lambda function
+ *           ARN configured and you didn't include such an ARN as a parameter in this call. </p>
+ *             </li>
+ *             <li>
+ *                <p>The secret is managed by another service, and you must use that service to update it.
+ *           For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html">Secrets managed by other Amazon Web Services services</a>.</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link LimitExceededException} (client fault)
+ *  <p>The request failed because it would exceed one of the Secrets Manager quotas.</p>
+ *
+ * @throws {@link ResourceExistsException} (client fault)
+ *  <p>A resource with the ID you requested already exists.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>Secrets Manager can't find the resource that you asked for.</p>
+ *
+ * @throws {@link SecretsManagerServiceException}
+ * <p>Base exception class for all service exceptions from SecretsManager service.</p>
+ *
+ *
+ * @example To store a secret value in a new version of a secret
+ * ```javascript
+ * // The following example shows how to create a new version of the secret. Alternatively, you can use the update-secret command.
+ * const input = {
+ *   ClientRequestToken: "EXAMPLE2-90ab-cdef-fedc-ba987EXAMPLE",
+ *   SecretId: "MyTestDatabaseSecret",
+ *   SecretString: `{"username":"david","password":"EXAMPLE-PASSWORD"}`
+ * };
+ * const command = new PutSecretValueCommand(input);
+ * const response = await client.send(command);
+ * /* response is
+ * {
+ *   ARN: "arn:aws:secretsmanager:us-west-2:123456789012:secret:MyTestDatabaseSecret-a1b2c3",
+ *   Name: "MyTestDatabaseSecret",
+ *   VersionId: "EXAMPLE2-90ab-cdef-fedc-ba987EXAMPLE",
+ *   VersionStages: [
+ *     "AWSCURRENT"
+ *   ]
+ * }
+ * *\/
+ * ```
+ *
+ * @public
+ */
+export declare class PutSecretValueCommand extends PutSecretValueCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: PutSecretValueRequest;
+            output: PutSecretValueResponse;
+        };
+        sdk: {
+            input: PutSecretValueCommandInput;
+            output: PutSecretValueCommandOutput;
+        };
+    };
+}

package/dist-types/commands/RemoveRegionsFromReplicationCommand.d.ts

@@ -0,0 +1,122 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { RemoveRegionsFromReplicationRequest, RemoveRegionsFromReplicationResponse } from "../models/models_0";
+import type { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link RemoveRegionsFromReplicationCommand}.
+ */
+export interface RemoveRegionsFromReplicationCommandInput extends RemoveRegionsFromReplicationRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link RemoveRegionsFromReplicationCommand}.
+ */
+export interface RemoveRegionsFromReplicationCommandOutput extends RemoveRegionsFromReplicationResponse, __MetadataBearer {
+}
+declare const RemoveRegionsFromReplicationCommand_base: {
+    new (input: RemoveRegionsFromReplicationCommandInput): import("@smithy/smithy-client").CommandImpl<RemoveRegionsFromReplicationCommandInput, RemoveRegionsFromReplicationCommandOutput, SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: RemoveRegionsFromReplicationCommandInput): import("@smithy/smithy-client").CommandImpl<RemoveRegionsFromReplicationCommandInput, RemoveRegionsFromReplicationCommandOutput, SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>For a secret that is replicated to other Regions, deletes the secret replicas from the
+ *             Regions you specify.</p>
+ *          <p>Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters because it might be logged. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html">Logging Secrets Manager events with CloudTrail</a>.</p>
+ *          <p>
+ *             <b>Required permissions:
+ *                 </b>
+ *             <code>secretsmanager:RemoveRegionsFromReplication</code>.
+ *             For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions">
+ *       IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
+ *       and access control in Secrets Manager</a>. </p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SecretsManagerClient, RemoveRegionsFromReplicationCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
+ * // const { SecretsManagerClient, RemoveRegionsFromReplicationCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
+ * // import type { SecretsManagerClientConfig } from "@aws-sdk/client-secrets-manager";
+ * const config = {}; // type is SecretsManagerClientConfig
+ * const client = new SecretsManagerClient(config);
+ * const input = { // RemoveRegionsFromReplicationRequest
+ *   SecretId: "STRING_VALUE", // required
+ *   RemoveReplicaRegions: [ // RemoveReplicaRegionListType // required
+ *     "STRING_VALUE",
+ *   ],
+ * };
+ * const command = new RemoveRegionsFromReplicationCommand(input);
+ * const response = await client.send(command);
+ * // { // RemoveRegionsFromReplicationResponse
+ * //   ARN: "STRING_VALUE",
+ * //   ReplicationStatus: [ // ReplicationStatusListType
+ * //     { // ReplicationStatusType
+ * //       Region: "STRING_VALUE",
+ * //       KmsKeyId: "STRING_VALUE",
+ * //       Status: "InSync" || "Failed" || "InProgress",
+ * //       StatusMessage: "STRING_VALUE",
+ * //       LastAccessedDate: new Date("TIMESTAMP"),
+ * //     },
+ * //   ],
+ * // };
+ *
+ * ```
+ *
+ * @param RemoveRegionsFromReplicationCommandInput - {@link RemoveRegionsFromReplicationCommandInput}
+ * @returns {@link RemoveRegionsFromReplicationCommandOutput}
+ * @see {@link RemoveRegionsFromReplicationCommandInput} for command's `input` shape.
+ * @see {@link RemoveRegionsFromReplicationCommandOutput} for command's `response` shape.
+ * @see {@link SecretsManagerClientResolvedConfig | config} for SecretsManagerClient's `config` shape.
+ *
+ * @throws {@link InternalServiceError} (server fault)
+ *  <p>An error occurred on the server side.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The parameter name or value is invalid.</p>
+ *
+ * @throws {@link InvalidRequestException} (client fault)
+ *  <p>A parameter value is not valid for the current state of the
+ *       resource.</p>
+ *          <p>Possible causes:</p>
+ *          <ul>
+ *             <li>
+ *                <p>The secret is scheduled for deletion.</p>
+ *             </li>
+ *             <li>
+ *                <p>You tried to enable rotation on a secret that doesn't already have a Lambda function
+ *           ARN configured and you didn't include such an ARN as a parameter in this call. </p>
+ *             </li>
+ *             <li>
+ *                <p>The secret is managed by another service, and you must use that service to update it.
+ *           For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html">Secrets managed by other Amazon Web Services services</a>.</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>Secrets Manager can't find the resource that you asked for.</p>
+ *
+ * @throws {@link SecretsManagerServiceException}
+ * <p>Base exception class for all service exceptions from SecretsManager service.</p>
+ *
+ *
+ * @public
+ */
+export declare class RemoveRegionsFromReplicationCommand extends RemoveRegionsFromReplicationCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: RemoveRegionsFromReplicationRequest;
+            output: RemoveRegionsFromReplicationResponse;
+        };
+        sdk: {
+            input: RemoveRegionsFromReplicationCommandInput;
+            output: RemoveRegionsFromReplicationCommandOutput;
+        };
+    };
+}

package/dist-types/commands/ReplicateSecretToRegionsCommand.d.ts

@@ -0,0 +1,157 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { ReplicateSecretToRegionsRequest, ReplicateSecretToRegionsResponse } from "../models/models_0";
+import type { SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecretsManagerClient";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link ReplicateSecretToRegionsCommand}.
+ */
+export interface ReplicateSecretToRegionsCommandInput extends ReplicateSecretToRegionsRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link ReplicateSecretToRegionsCommand}.
+ */
+export interface ReplicateSecretToRegionsCommandOutput extends ReplicateSecretToRegionsResponse, __MetadataBearer {
+}
+declare const ReplicateSecretToRegionsCommand_base: {
+    new (input: ReplicateSecretToRegionsCommandInput): import("@smithy/smithy-client").CommandImpl<ReplicateSecretToRegionsCommandInput, ReplicateSecretToRegionsCommandOutput, SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: ReplicateSecretToRegionsCommandInput): import("@smithy/smithy-client").CommandImpl<ReplicateSecretToRegionsCommandInput, ReplicateSecretToRegionsCommandOutput, SecretsManagerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>Replicates the secret to a new Regions. See <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/create-manage-multi-region-secrets.html">Multi-Region secrets</a>.</p>
+ *          <p>Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters because it might be logged. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html">Logging Secrets Manager events with CloudTrail</a>.</p>
+ *          <p>
+ *             <b>Required permissions:
+ *                 </b>
+ *             <code>secretsmanager:ReplicateSecretToRegions</code>. If the primary
+ *             secret is encrypted with a KMS key other than <code>aws/secretsmanager</code>, you also
+ *             need <code>kms:Decrypt</code> permission to the key. To encrypt the replicated secret
+ *             with a KMS key other than <code>aws/secretsmanager</code>, you need
+ *                 <code>kms:GenerateDataKey</code> and <code>kms:Encrypt</code> to the key.
+ *             For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_iam-permissions.html#reference_iam-permissions_actions">
+ *       IAM policy actions for Secrets Manager</a> and <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html">Authentication
+ *       and access control in Secrets Manager</a>. </p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SecretsManagerClient, ReplicateSecretToRegionsCommand } from "@aws-sdk/client-secrets-manager"; // ES Modules import
+ * // const { SecretsManagerClient, ReplicateSecretToRegionsCommand } = require("@aws-sdk/client-secrets-manager"); // CommonJS import
+ * // import type { SecretsManagerClientConfig } from "@aws-sdk/client-secrets-manager";
+ * const config = {}; // type is SecretsManagerClientConfig
+ * const client = new SecretsManagerClient(config);
+ * const input = { // ReplicateSecretToRegionsRequest
+ *   SecretId: "STRING_VALUE", // required
+ *   AddReplicaRegions: [ // AddReplicaRegionListType // required
+ *     { // ReplicaRegionType
+ *       Region: "STRING_VALUE",
+ *       KmsKeyId: "STRING_VALUE",
+ *     },
+ *   ],
+ *   ForceOverwriteReplicaSecret: true || false,
+ * };
+ * const command = new ReplicateSecretToRegionsCommand(input);
+ * const response = await client.send(command);
+ * // { // ReplicateSecretToRegionsResponse
+ * //   ARN: "STRING_VALUE",
+ * //   ReplicationStatus: [ // ReplicationStatusListType
+ * //     { // ReplicationStatusType
+ * //       Region: "STRING_VALUE",
+ * //       KmsKeyId: "STRING_VALUE",
+ * //       Status: "InSync" || "Failed" || "InProgress",
+ * //       StatusMessage: "STRING_VALUE",
+ * //       LastAccessedDate: new Date("TIMESTAMP"),
+ * //     },
+ * //   ],
+ * // };
+ *
+ * ```
+ *
+ * @param ReplicateSecretToRegionsCommandInput - {@link ReplicateSecretToRegionsCommandInput}
+ * @returns {@link ReplicateSecretToRegionsCommandOutput}
+ * @see {@link ReplicateSecretToRegionsCommandInput} for command's `input` shape.
+ * @see {@link ReplicateSecretToRegionsCommandOutput} for command's `response` shape.
+ * @see {@link SecretsManagerClientResolvedConfig | config} for SecretsManagerClient's `config` shape.
+ *
+ * @throws {@link InternalServiceError} (server fault)
+ *  <p>An error occurred on the server side.</p>
+ *
+ * @throws {@link InvalidParameterException} (client fault)
+ *  <p>The parameter name or value is invalid.</p>
+ *
+ * @throws {@link InvalidRequestException} (client fault)
+ *  <p>A parameter value is not valid for the current state of the
+ *       resource.</p>
+ *          <p>Possible causes:</p>
+ *          <ul>
+ *             <li>
+ *                <p>The secret is scheduled for deletion.</p>
+ *             </li>
+ *             <li>
+ *                <p>You tried to enable rotation on a secret that doesn't already have a Lambda function
+ *           ARN configured and you didn't include such an ARN as a parameter in this call. </p>
+ *             </li>
+ *             <li>
+ *                <p>The secret is managed by another service, and you must use that service to update it.
+ *           For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/service-linked-secrets.html">Secrets managed by other Amazon Web Services services</a>.</p>
+ *             </li>
+ *          </ul>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>Secrets Manager can't find the resource that you asked for.</p>
+ *
+ * @throws {@link SecretsManagerServiceException}
+ * <p>Base exception class for all service exceptions from SecretsManager service.</p>
+ *
+ *
+ * @example Example
+ * ```javascript
+ * // The following example replicates a secret to eu-west-3. The replica is encrypted with the AWS managed key aws/secretsmanager.
+ * const input = {
+ *   AddReplicaRegions: [
+ *     {
+ *       Region: "eu-west-3"
+ *     }
+ *   ],
+ *   ForceOverwriteReplicaSecret: true,
+ *   SecretId: "MyTestSecret"
+ * };
+ * const command = new ReplicateSecretToRegionsCommand(input);
+ * const response = await client.send(command);
+ * /* response is
+ * {
+ *   ARN: "arn:aws:secretsmanager:us-west-2:123456789012:secret:MyTestSecret-1a2b3c",
+ *   ReplicationStatus: [
+ *     {
+ *       KmsKeyId: "alias/aws/secretsmanager",
+ *       Region: "eu-west-3",
+ *       Status: "InProgress"
+ *     }
+ *   ]
+ * }
+ * *\/
+ * ```
+ *
+ * @public
+ */
+export declare class ReplicateSecretToRegionsCommand extends ReplicateSecretToRegionsCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: ReplicateSecretToRegionsRequest;
+            output: ReplicateSecretToRegionsResponse;
+        };
+        sdk: {
+            input: ReplicateSecretToRegionsCommandInput;
+            output: ReplicateSecretToRegionsCommandOutput;
+        };
+    };
+}