@ibm-cloud/secrets-manager 0.1.0 → 1.0.2

package/secrets-manager/v1.d.ts

@@ -20,6 +20,9 @@ import { BaseService, UserOptions } from 'ibm-cloud-sdk-core';
  * With IBM Cloud® Secrets Manager, you can create, lease, and centrally manage secrets that are used in IBM Cloud
  * services or your custom-built applications. Secrets are stored in a dedicated instance of Secrets Manager, built on
  * open source HashiCorp Vault.
+ *
+ * API Version: 1.0.0
+ * See: https://cloud.ibm.com/docs/secrets-manager
  */
 declare class SecretsManagerV1 extends BaseService {
     static DEFAULT_SERVICE_URL: string;
@@ -48,65 +51,6 @@ declare class SecretsManagerV1 extends BaseService {
      * @returns {SecretsManagerV1}
      */
     constructor(options: UserOptions);
-    /*************************
-     * config
-     ************************/
-    /**
-     * Configure secrets of a given type.
-     *
-     * Updates the configuration for the given secret type.
-     *
-     * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretType - The secret type.
-     * @param {EngineConfigOneOf} params.engineConfigOneOf - The base request for setting secret engine configuration.
-     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
-     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
-     */
-    putConfig(params: SecretsManagerV1.PutConfigParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>;
-    /**
-     * Get the configuration for a secret type.
-     *
-     * Retrieves the configuration that is associated with the given secret type.
-     *
-     * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretType - The secret type.
-     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
-     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.EngineConfigOneOf>>}
-     */
-    getConfig(params: SecretsManagerV1.GetConfigParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.EngineConfigOneOf>>;
-    /*************************
-     * policies
-     ************************/
-    /**
-     * Set secret policies.
-     *
-     * Creates or updates one or more policies, such as an [automatic rotation
-     * policy](http://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-rotate-secrets#auto-rotate-secret), for the
-     * specified secret.
-     *
-     * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretType - The secret type.
-     * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
-     * @param {CollectionMetadata} params.metadata - The metadata that describes the resource array.
-     * @param {SecretPolicyRotation[]} params.resources - A collection of resources.
-     * @param {string} [params.policy] - The type of policy that is associated with the specified secret.
-     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
-     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretPoliciesOneOf>>}
-     */
-    putPolicy(params: SecretsManagerV1.PutPolicyParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretPoliciesOneOf>>;
-    /**
-     * List secret policies.
-     *
-     * Retrieves a list of policies that are associated with a specified secret.
-     *
-     * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretType - The secret type.
-     * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
-     * @param {string} [params.policy] - The type of policy that is associated with the specified secret.
-     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
-     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretPoliciesOneOf>>}
-     */
-    getPolicy(params: SecretsManagerV1.GetPolicyParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretPoliciesOneOf>>;
     /*************************
      * secretGroups
      ************************/
@@ -180,13 +124,15 @@ declare class SecretsManagerV1 extends BaseService {
     /**
      * Create a secret.
      *
-     * Creates a secret that you can use to access or authenticate to a protected resource.
+     * Creates a secret or imports an existing value that you can use to access or authenticate to a protected resource.
      *
-     * A successful request stores the secret in your dedicated instance based on the secret type and data that you
-     * specify. The response returns the ID value of the secret, along with other metadata.
+     * Use this method to either generate or import an existing secret, such as an arbitrary value or a TLS certificate,
+     * that you can manage in your Secrets Manager service instance. A successful request stores the secret in your
+     * dedicated instance based on the secret type and data that you specify. The response returns the ID value of the
+     * secret, along with other metadata.
      *
      * To learn more about the types of secrets that you can create with Secrets Manager, check out the
-     * [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-secret-basics).
+     * [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-what-is-secret).
      *
      * @param {Object} params - The parameters to send to the service.
      * @param {string} params.secretType - The secret type.
@@ -244,6 +190,13 @@ declare class SecretsManagerV1 extends BaseService {
      *
      * **Usage:** To sort a list of secrets by their creation date, use
      * `../secrets/{secret-type}?sort_by=creation_date`.
+     * @param {string[]} [params.groups] - Filter secrets by groups.
+     *
+     * You can apply multiple filters by using a comma-separated list of secret group IDs. If you need to filter secrets
+     * that are in the default secret group, use the `default` keyword.
+     *
+     * **Usage:** To retrieve a list of secrets that are associated with an existing secret group or the default group,
+     * use `../secrets?groups={secret_group_ID},default`.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.ListSecrets>>}
      */
@@ -269,14 +222,14 @@ declare class SecretsManagerV1 extends BaseService {
      *
      * Invokes an action on a specified secret. This method supports the following actions:
      *
-     * - `rotate`: Replace the value of an `arbitrary` or `username_password` secret.
+     * - `rotate`: Replace the value of an `arbitrary`, `username_password`, `public_cert` or `imported_cert` secret.
      * - `delete_credentials`: Delete the API key that is associated with an `iam_credentials` secret.
      *
      * @param {Object} params - The parameters to send to the service.
      * @param {string} params.secretType - The secret type.
      * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
      * @param {string} params.action - The action to perform on the specified secret.
-     * @param {SecretActionOneOf} params.secretActionOneOf - The base request for invoking an action on a secret.
+     * @param {SecretAction} params.secretAction - The properties to update for the secret.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecret>>}
      */
@@ -293,13 +246,52 @@ declare class SecretsManagerV1 extends BaseService {
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
      */
     deleteSecret(params: SecretsManagerV1.DeleteSecretParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>;
+    /**
+     * Get a version of a secret.
+     *
+     * Retrieves a version of a secret by specifying the ID of the version or the alias `previous`.
+     *
+     * A successful request returns the secret data that is associated with the specified version of your secret, along
+     * with other metadata.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
+     * @param {string} params.versionId - The v4 UUID that uniquely identifies the secret version. You can also use
+     * `previous` to retrieve the previous version.
+     *
+     * **Note:** To find the version ID of a secret, use the [Get secret metadata](#get-secret-metadata) method and check
+     * the response details.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretVersion>>}
+     */
+    getSecretVersion(params: SecretsManagerV1.GetSecretVersionParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretVersion>>;
+    /**
+     * Get secret version metadata.
+     *
+     * Retrieves secret version metadata by specifying the ID of the version or the alias `previous`.
+     *
+     * A successful request returns the metadata that is associated with the specified version of your secret.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
+     * @param {string} params.versionId - The v4 UUID that uniquely identifies the secret version. You can also use
+     * `previous` to retrieve the previous version.
+     *
+     * **Note:** To find the version ID of a secret, use the [Get secret metadata](#get-secret-metadata) method and check
+     * the response details.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretVersionMetadata>>}
+     */
+    getSecretVersionMetadata(params: SecretsManagerV1.GetSecretVersionMetadataParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretVersionMetadata>>;
     /**
      * Get secret metadata.
      *
      * Retrieves the details of a secret by specifying the ID.
      *
      * A successful request returns only metadata about the secret, such as its name and creation date. To retrieve the
-     * value of a secret, use the [Get a secret](#get-secret) method.
+     * value of a secret, use the [Get a secret](#get-secret) or [Get a version of a secret](#get-secret-version) methods.
      *
      * @param {Object} params - The parameters to send to the service.
      * @param {string} params.secretType - The secret type.
@@ -325,6 +317,142 @@ declare class SecretsManagerV1 extends BaseService {
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.SecretMetadataRequest>>}
      */
     updateSecretMetadata(params: SecretsManagerV1.UpdateSecretMetadataParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.SecretMetadataRequest>>;
+    /*************************
+     * policies
+     ************************/
+    /**
+     * Set secret policies.
+     *
+     * Creates or updates one or more policies, such as an [automatic rotation
+     * policy](http://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-rotate-secrets#auto-rotate-secret), for the
+     * specified secret.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
+     * @param {CollectionMetadata} params.metadata - The metadata that describes the resource array.
+     * @param {SecretPolicyRotation[]} params.resources - A collection of resources.
+     * @param {string} [params.policy] - The type of policy that is associated with the specified secret.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretPolicies>>}
+     */
+    putPolicy(params: SecretsManagerV1.PutPolicyParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretPolicies>>;
+    /**
+     * List secret policies.
+     *
+     * Retrieves a list of policies that are associated with a specified secret.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
+     * @param {string} [params.policy] - The type of policy that is associated with the specified secret.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretPolicies>>}
+     */
+    getPolicy(params: SecretsManagerV1.GetPolicyParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecretPolicies>>;
+    /*************************
+     * config
+     ************************/
+    /**
+     * Set the configuration of a secret type.
+     *
+     * Sets the configuration for the specified secret type.
+     *
+     * Use this method to configure the IAM credentials (`iam_credentials`) engine for your service instance. Looking to
+     * set up certificate ordering? To configure the public certificates (`public_cert`) engine, use the [Add a
+     * configuration](#create_config_element) method.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType -
+     * @param {EngineConfig} params.engineConfig - Properties to update for a secrets engine.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
+     */
+    putConfig(params: SecretsManagerV1.PutConfigParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>;
+    /**
+     * Get the configuration of a secret type.
+     *
+     * Retrieves the configuration that is associated with the specified secret type.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetConfig>>}
+     */
+    getConfig(params: SecretsManagerV1.GetConfigParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetConfig>>;
+    /**
+     * Add a configuration.
+     *
+     * Adds a configuration element to the specified secret type.
+     *
+     * Use this method to define the configurations that are required to enable the  public certificates (`public_cert`)
+     * engine. You can add up to 10 certificate authority and DNS provider configurations for your instance.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.configElement - The configuration element to define or manage.
+     * @param {string} params.name - The human-readable name to assign to your configuration.
+     * @param {string} params.type - The type of configuration. Value options differ depending on the `config_element`
+     * property that you want to define.
+     * @param {ConfigElementDefConfig} params.config - The configuration to define for the specified secret type.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>}
+     */
+    createConfigElement(params: SecretsManagerV1.CreateConfigElementParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>;
+    /**
+     * List configurations.
+     *
+     * Lists the configuration elements that are associated with a specified secret type.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.configElement - The configuration element to define or manage.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetConfigElements>>}
+     */
+    getConfigElements(params: SecretsManagerV1.GetConfigElementsParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetConfigElements>>;
+    /**
+     * Get a configuration.
+     *
+     * Retrieves the details of a specific configuration that is associated with a secret type.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.configElement - The configuration element to define or manage.
+     * @param {string} params.configName - The name of your configuration.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>}
+     */
+    getConfigElement(params: SecretsManagerV1.GetConfigElementParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>;
+    /**
+     * Update a configuration.
+     *
+     * Updates a configuration element that is associated with the specified secret type.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.configElement - The configuration element to define or manage.
+     * @param {string} params.configName - The name of your configuration.
+     * @param {string} params.type - The type of configuration. Value options differ depending on the `config_element`
+     * property that you want to define.
+     * @param {JsonObject} params.config -
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>}
+     */
+    updateConfigElement(params: SecretsManagerV1.UpdateConfigElementParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>;
+    /**
+     * Delete a configuration.
+     *
+     * Deletes a configuration element from the specified secret type.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.configElement - The configuration element to define or manage.
+     * @param {string} params.configName - The name of your configuration.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
+     */
+    deleteConfigElement(params: SecretsManagerV1.DeleteConfigElementParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>;
 }
 /*************************
  * interfaces
@@ -349,80 +477,6 @@ declare namespace SecretsManagerV1 {
     /*************************
      * request interfaces
      ************************/
-    /** Parameters for the `putConfig` operation. */
-    interface PutConfigParams {
-        /** The secret type. */
-        secretType: PutConfigConstants.SecretType | string;
-        /** The base request for setting secret engine configuration. */
-        engineConfigOneOf: EngineConfigOneOf;
-        headers?: OutgoingHttpHeaders;
-    }
-    /** Constants for the `putConfig` operation. */
-    namespace PutConfigConstants {
-        /** The secret type. */
-        enum SecretType {
-            IAM_CREDENTIALS = "iam_credentials"
-        }
-    }
-    /** Parameters for the `getConfig` operation. */
-    interface GetConfigParams {
-        /** The secret type. */
-        secretType: GetConfigConstants.SecretType | string;
-        headers?: OutgoingHttpHeaders;
-    }
-    /** Constants for the `getConfig` operation. */
-    namespace GetConfigConstants {
-        /** The secret type. */
-        enum SecretType {
-            IAM_CREDENTIALS = "iam_credentials"
-        }
-    }
-    /** Parameters for the `putPolicy` operation. */
-    interface PutPolicyParams {
-        /** The secret type. */
-        secretType: PutPolicyConstants.SecretType | string;
-        /** The v4 UUID that uniquely identifies the secret. */
-        id: string;
-        /** The metadata that describes the resource array. */
-        metadata: CollectionMetadata;
-        /** A collection of resources. */
-        resources: SecretPolicyRotation[];
-        /** The type of policy that is associated with the specified secret. */
-        policy?: PutPolicyConstants.Policy | string;
-        headers?: OutgoingHttpHeaders;
-    }
-    /** Constants for the `putPolicy` operation. */
-    namespace PutPolicyConstants {
-        /** The secret type. */
-        enum SecretType {
-            USERNAME_PASSWORD = "username_password"
-        }
-        /** The type of policy that is associated with the specified secret. */
-        enum Policy {
-            ROTATION = "rotation"
-        }
-    }
-    /** Parameters for the `getPolicy` operation. */
-    interface GetPolicyParams {
-        /** The secret type. */
-        secretType: GetPolicyConstants.SecretType | string;
-        /** The v4 UUID that uniquely identifies the secret. */
-        id: string;
-        /** The type of policy that is associated with the specified secret. */
-        policy?: GetPolicyConstants.Policy | string;
-        headers?: OutgoingHttpHeaders;
-    }
-    /** Constants for the `getPolicy` operation. */
-    namespace GetPolicyConstants {
-        /** The secret type. */
-        enum SecretType {
-            USERNAME_PASSWORD = "username_password"
-        }
-        /** The type of policy that is associated with the specified secret. */
-        enum Policy {
-            ROTATION = "rotation"
-        }
-    }
     /** Parameters for the `createSecretGroup` operation. */
     interface CreateSecretGroupParams {
         /** The metadata that describes the resource array. */
@@ -472,8 +526,10 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             ARBITRARY = "arbitrary",
-            USERNAME_PASSWORD = "username_password",
-            IAM_CREDENTIALS = "iam_credentials"
+            IAM_CREDENTIALS = "iam_credentials",
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert",
+            USERNAME_PASSWORD = "username_password"
         }
     }
     /** Parameters for the `listSecrets` operation. */
@@ -501,8 +557,10 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             ARBITRARY = "arbitrary",
-            USERNAME_PASSWORD = "username_password",
-            IAM_CREDENTIALS = "iam_credentials"
+            IAM_CREDENTIALS = "iam_credentials",
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert",
+            USERNAME_PASSWORD = "username_password"
         }
     }
     /** Parameters for the `listAllSecrets` operation. */
@@ -534,6 +592,15 @@ declare namespace SecretsManagerV1 {
          *  `../secrets/{secret-type}?sort_by=creation_date`.
          */
         sortBy?: ListAllSecretsConstants.SortBy | string;
+        /** Filter secrets by groups.
+         *
+         *  You can apply multiple filters by using a comma-separated list of secret group IDs. If you need to filter
+         *  secrets that are in the default secret group, use the `default` keyword.
+         *
+         *  **Usage:** To retrieve a list of secrets that are associated with an existing secret group or the default group,
+         *  use `../secrets?groups={secret_group_ID},default`.
+         */
+        groups?: string[];
         headers?: OutgoingHttpHeaders;
     }
     /** Constants for the `listAllSecrets` operation. */
@@ -560,8 +627,10 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             ARBITRARY = "arbitrary",
-            USERNAME_PASSWORD = "username_password",
-            IAM_CREDENTIALS = "iam_credentials"
+            IAM_CREDENTIALS = "iam_credentials",
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert",
+            USERNAME_PASSWORD = "username_password"
         }
     }
     /** Parameters for the `updateSecret` operation. */
@@ -572,8 +641,8 @@ declare namespace SecretsManagerV1 {
         id: string;
         /** The action to perform on the specified secret. */
         action: UpdateSecretConstants.Action | string;
-        /** The base request for invoking an action on a secret. */
-        secretActionOneOf: SecretActionOneOf;
+        /** The properties to update for the secret. */
+        secretAction: SecretAction;
         headers?: OutgoingHttpHeaders;
     }
     /** Constants for the `updateSecret` operation. */
@@ -581,8 +650,10 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             ARBITRARY = "arbitrary",
-            USERNAME_PASSWORD = "username_password",
-            IAM_CREDENTIALS = "iam_credentials"
+            IAM_CREDENTIALS = "iam_credentials",
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert",
+            USERNAME_PASSWORD = "username_password"
         }
         /** The action to perform on the specified secret. */
         enum Action {
@@ -603,25 +674,75 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             ARBITRARY = "arbitrary",
-            USERNAME_PASSWORD = "username_password",
-            IAM_CREDENTIALS = "iam_credentials"
+            IAM_CREDENTIALS = "iam_credentials",
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert",
+            USERNAME_PASSWORD = "username_password"
         }
     }
-    /** Parameters for the `getSecretMetadata` operation. */
-    interface GetSecretMetadataParams {
+    /** Parameters for the `getSecretVersion` operation. */
+    interface GetSecretVersionParams {
         /** The secret type. */
-        secretType: GetSecretMetadataConstants.SecretType | string;
+        secretType: GetSecretVersionConstants.SecretType | string;
         /** The v4 UUID that uniquely identifies the secret. */
         id: string;
+        /** The v4 UUID that uniquely identifies the secret version. You can also use `previous` to retrieve the
+         *  previous version.
+         *
+         *  **Note:** To find the version ID of a secret, use the [Get secret metadata](#get-secret-metadata) method and
+         *  check the response details.
+         */
+        versionId: string;
         headers?: OutgoingHttpHeaders;
     }
-    /** Constants for the `getSecretMetadata` operation. */
-    namespace GetSecretMetadataConstants {
+    /** Constants for the `getSecretVersion` operation. */
+    namespace GetSecretVersionConstants {
         /** The secret type. */
         enum SecretType {
-            ARBITRARY = "arbitrary",
-            USERNAME_PASSWORD = "username_password",
-            IAM_CREDENTIALS = "iam_credentials"
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert"
+        }
+    }
+    /** Parameters for the `getSecretVersionMetadata` operation. */
+    interface GetSecretVersionMetadataParams {
+        /** The secret type. */
+        secretType: GetSecretVersionMetadataConstants.SecretType | string;
+        /** The v4 UUID that uniquely identifies the secret. */
+        id: string;
+        /** The v4 UUID that uniquely identifies the secret version. You can also use `previous` to retrieve the
+         *  previous version.
+         *
+         *  **Note:** To find the version ID of a secret, use the [Get secret metadata](#get-secret-metadata) method and
+         *  check the response details.
+         */
+        versionId: string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `getSecretVersionMetadata` operation. */
+    namespace GetSecretVersionMetadataConstants {
+        /** The secret type. */
+        enum SecretType {
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert"
+        }
+    }
+    /** Parameters for the `getSecretMetadata` operation. */
+    interface GetSecretMetadataParams {
+        /** The secret type. */
+        secretType: GetSecretMetadataConstants.SecretType | string;
+        /** The v4 UUID that uniquely identifies the secret. */
+        id: string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `getSecretMetadata` operation. */
+    namespace GetSecretMetadataConstants {
+        /** The secret type. */
+        enum SecretType {
+            ARBITRARY = "arbitrary",
+            IAM_CREDENTIALS = "iam_credentials",
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert",
+            USERNAME_PASSWORD = "username_password"
         }
     }
     /** Parameters for the `updateSecretMetadata` operation. */
@@ -641,13 +762,233 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             ARBITRARY = "arbitrary",
+            IAM_CREDENTIALS = "iam_credentials",
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert",
+            USERNAME_PASSWORD = "username_password"
+        }
+    }
+    /** Parameters for the `putPolicy` operation. */
+    interface PutPolicyParams {
+        /** The secret type. */
+        secretType: PutPolicyConstants.SecretType | string;
+        /** The v4 UUID that uniquely identifies the secret. */
+        id: string;
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: SecretPolicyRotation[];
+        /** The type of policy that is associated with the specified secret. */
+        policy?: PutPolicyConstants.Policy | string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `putPolicy` operation. */
+    namespace PutPolicyConstants {
+        /** The secret type. */
+        enum SecretType {
+            USERNAME_PASSWORD = "username_password",
+            PUBLIC_CERT = "public_cert"
+        }
+        /** The type of policy that is associated with the specified secret. */
+        enum Policy {
+            ROTATION = "rotation"
+        }
+    }
+    /** Parameters for the `getPolicy` operation. */
+    interface GetPolicyParams {
+        /** The secret type. */
+        secretType: GetPolicyConstants.SecretType | string;
+        /** The v4 UUID that uniquely identifies the secret. */
+        id: string;
+        /** The type of policy that is associated with the specified secret. */
+        policy?: GetPolicyConstants.Policy | string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `getPolicy` operation. */
+    namespace GetPolicyConstants {
+        /** The secret type. */
+        enum SecretType {
             USERNAME_PASSWORD = "username_password",
+            PUBLIC_CERT = "public_cert"
+        }
+        /** The type of policy that is associated with the specified secret. */
+        enum Policy {
+            ROTATION = "rotation"
+        }
+    }
+    /** Parameters for the `putConfig` operation. */
+    interface PutConfigParams {
+        secretType: PutConfigConstants.SecretType | string;
+        /** Properties to update for a secrets engine. */
+        engineConfig: EngineConfig;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `putConfig` operation. */
+    namespace PutConfigConstants {
+        /** SecretType */
+        enum SecretType {
             IAM_CREDENTIALS = "iam_credentials"
         }
     }
+    /** Parameters for the `getConfig` operation. */
+    interface GetConfigParams {
+        /** The secret type. */
+        secretType: GetConfigConstants.SecretType | string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `getConfig` operation. */
+    namespace GetConfigConstants {
+        /** The secret type. */
+        enum SecretType {
+            IAM_CREDENTIALS = "iam_credentials",
+            PUBLIC_CERT = "public_cert"
+        }
+    }
+    /** Parameters for the `createConfigElement` operation. */
+    interface CreateConfigElementParams {
+        /** The secret type. */
+        secretType: CreateConfigElementConstants.SecretType | string;
+        /** The configuration element to define or manage. */
+        configElement: CreateConfigElementConstants.ConfigElement | string;
+        /** The human-readable name to assign to your configuration. */
+        name: string;
+        /** The type of configuration. Value options differ depending on the `config_element` property that you want to
+         *  define.
+         */
+        type: CreateConfigElementConstants.Type | string;
+        /** The configuration to define for the specified secret type. */
+        config: ConfigElementDefConfig;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `createConfigElement` operation. */
+    namespace CreateConfigElementConstants {
+        /** The secret type. */
+        enum SecretType {
+            PUBLIC_CERT = "public_cert"
+        }
+        /** The configuration element to define or manage. */
+        enum ConfigElement {
+            CERTIFICATE_AUTHORITIES = "certificate_authorities",
+            DNS_PROVIDERS = "dns_providers"
+        }
+        /** The type of configuration. Value options differ depending on the `config_element` property that you want to define. */
+        enum Type {
+            LETSENCRYPT = "letsencrypt",
+            LETSENCRYPT_STAGE = "letsencrypt-stage",
+            CIS = "cis",
+            CLASSIC_INFRASTRUCTURE = "classic_infrastructure"
+        }
+    }
+    /** Parameters for the `getConfigElements` operation. */
+    interface GetConfigElementsParams {
+        /** The secret type. */
+        secretType: GetConfigElementsConstants.SecretType | string;
+        /** The configuration element to define or manage. */
+        configElement: GetConfigElementsConstants.ConfigElement | string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `getConfigElements` operation. */
+    namespace GetConfigElementsConstants {
+        /** The secret type. */
+        enum SecretType {
+            PUBLIC_CERT = "public_cert"
+        }
+        /** The configuration element to define or manage. */
+        enum ConfigElement {
+            CERTIFICATE_AUTHORITIES = "certificate_authorities",
+            DNS_PROVIDERS = "dns_providers"
+        }
+    }
+    /** Parameters for the `getConfigElement` operation. */
+    interface GetConfigElementParams {
+        /** The secret type. */
+        secretType: GetConfigElementConstants.SecretType | string;
+        /** The configuration element to define or manage. */
+        configElement: GetConfigElementConstants.ConfigElement | string;
+        /** The name of your configuration. */
+        configName: string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `getConfigElement` operation. */
+    namespace GetConfigElementConstants {
+        /** The secret type. */
+        enum SecretType {
+            PUBLIC_CERT = "public_cert"
+        }
+        /** The configuration element to define or manage. */
+        enum ConfigElement {
+            CERTIFICATE_AUTHORITIES = "certificate_authorities",
+            DNS_PROVIDERS = "dns_providers"
+        }
+    }
+    /** Parameters for the `updateConfigElement` operation. */
+    interface UpdateConfigElementParams {
+        /** The secret type. */
+        secretType: UpdateConfigElementConstants.SecretType | string;
+        /** The configuration element to define or manage. */
+        configElement: UpdateConfigElementConstants.ConfigElement | string;
+        /** The name of your configuration. */
+        configName: string;
+        /** The type of configuration. Value options differ depending on the `config_element` property that you want to
+         *  define.
+         */
+        type: UpdateConfigElementConstants.Type | string;
+        config: JsonObject;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `updateConfigElement` operation. */
+    namespace UpdateConfigElementConstants {
+        /** The secret type. */
+        enum SecretType {
+            PUBLIC_CERT = "public_cert"
+        }
+        /** The configuration element to define or manage. */
+        enum ConfigElement {
+            CERTIFICATE_AUTHORITIES = "certificate_authorities",
+            DNS_PROVIDERS = "dns_providers"
+        }
+        /** The type of configuration. Value options differ depending on the `config_element` property that you want to define. */
+        enum Type {
+            LETSENCRYPT = "letsencrypt",
+            LETSENCRYPT_STAGE = "letsencrypt-stage",
+            CIS = "cis",
+            CLASSIC_INFRASTRUCTURE = "classic_infrastructure"
+        }
+    }
+    /** Parameters for the `deleteConfigElement` operation. */
+    interface DeleteConfigElementParams {
+        /** The secret type. */
+        secretType: DeleteConfigElementConstants.SecretType | string;
+        /** The configuration element to define or manage. */
+        configElement: DeleteConfigElementConstants.ConfigElement | string;
+        /** The name of your configuration. */
+        configName: string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `deleteConfigElement` operation. */
+    namespace DeleteConfigElementConstants {
+        /** The secret type. */
+        enum SecretType {
+            PUBLIC_CERT = "public_cert"
+        }
+        /** The configuration element to define or manage. */
+        enum ConfigElement {
+            CERTIFICATE_AUTHORITIES = "certificate_authorities",
+            DNS_PROVIDERS = "dns_providers"
+        }
+    }
     /*************************
      * model interfaces
      ************************/
+    /** CertificateSecretData. */
+    interface CertificateSecretData {
+        /** The contents of the certificate. */
+        certificate?: string;
+        /** The private key that is associated with the certificate. */
+        private_key?: string;
+        /** The intermediate certificate that is associated with the certificate. */
+        intermediate?: string;
+    }
     /** The metadata that describes the resource array. */
     interface CollectionMetadata {
         /** The type of resources in the resource array. */
@@ -655,104 +996,812 @@ declare namespace SecretsManagerV1 {
         /** The number of elements in the resource array. */
         collection_total: number;
     }
-    /** The base schema for creating secrets. */
+    /** The configuration to add or update. */
+    interface ConfigElementDef {
+        /** The human-readable name to assign to your configuration. */
+        name: string;
+        /** The type of configuration. Value options differ depending on the `config_element` property that you want to
+         *  define.
+         */
+        type: string;
+        /** The configuration to define for the specified secret type. */
+        config: ConfigElementDefConfig;
+    }
+    /** The configuration to define for the specified secret type. */
+    interface ConfigElementDefConfig {
+    }
+    /** Properties that describe a configuration element. */
+    interface ConfigElementMetadata {
+        /** The human-readable name to assign to your configuration. */
+        name: string;
+        /** The type of configuration. Value options differ depending on the `config_element` property that you want to
+         *  define.
+         */
+        type: string;
+    }
+    /** Properties that describe a secret. */
     interface CreateSecret {
         /** The metadata that describes the resource array. */
         metadata: CollectionMetadata;
         /** A collection of resources. */
         resources: SecretResource[];
     }
-    /** EngineConfigOneOf. */
-    interface EngineConfigOneOf {
+    /** EngineConfig. */
+    interface EngineConfig {
+    }
+    /** Configuration for the specified secret type. */
+    interface GetConfig {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: GetConfigResourcesItem[];
+    }
+    /** Properties that describe a list of configurations. */
+    interface GetConfigElements {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: GetConfigElementsResourcesItem[];
+    }
+    /** GetConfigElementsResourcesItem. */
+    interface GetConfigElementsResourcesItem {
+    }
+    /** GetConfigResourcesItem. */
+    interface GetConfigResourcesItem {
     }
-    /** The base schema for retrieving a secret. */
+    /** Properties that describe a secret. */
     interface GetSecret {
         /** The metadata that describes the resource array. */
         metadata: CollectionMetadata;
         /** A collection of resources. */
         resources: SecretResource[];
     }
-    /** GetSecretPoliciesOneOf. */
-    interface GetSecretPoliciesOneOf {
+    /** GetSecretPolicies. */
+    interface GetSecretPolicies {
     }
-    /** Properties that are associated with a rotation policy. */
-    interface GetSecretPoliciesOneOfGetSecretPolicyRotationResourcesItem {
+    /** Properties that describe a rotation policy. */
+    interface GetSecretPolicyRotationResourcesItem {
         /** The v4 UUID that uniquely identifies the policy. */
         id: string;
         /** The Cloud Resource Name (CRN) that uniquely identifies your cloud resources. */
         crn?: string;
         /** The date the policy was created. The date format follows RFC 3339. */
         creation_date?: string;
-        /** The unique identifier for the entity that created the policy. */
+        /** The unique identifier for the entity that created the policy. */
+        created_by?: string;
+        /** Updates when the policy is replaced or modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The unique identifier for the entity that updated the policy. */
+        updated_by?: string;
+        /** The MIME type that represents the policy. Currently, only the default is supported. */
+        type: string;
+        rotation: SecretPolicyRotationRotation;
+    }
+    /** Properties that describe the version of a secret. */
+    interface GetSecretVersion {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: SecretVersion[];
+    }
+    /** Properties that describe the version of a secret. */
+    interface GetSecretVersionMetadata {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: SecretVersionMetadata[];
+    }
+    /** Properties that describe a configuration. */
+    interface GetSingleConfigElement {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: ConfigElementDef[];
+    }
+    /** Issuance information that is associated with your certificate. */
+    interface IssuanceInfo {
+        /** The date the certificate was ordered. The date format follows RFC 3339. */
+        ordered_on?: string;
+        /** An code that identifies an issuance error.
+         *
+         *  This field, along with `error_message`, is returned when Secrets Manager successfully processes your request,
+         *  but a certificate is unable to be issued by the certificate authority.
+         */
+        error_code?: string;
+        /** A human-readable message that provides details about the issuance error. */
+        error_message?: string;
+        /** Indicates whether the issued certificate is bundled with intermediate certificates. */
+        bundle_certs?: boolean;
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** Indicates whether the issued certificate is configured with an automatic rotation policy. */
+        auto_rotated?: boolean;
+        /** The name that was assigned to the certificate authority configuration. */
+        ca?: string;
+        /** The name that was assigned to the DNS provider configuration. */
+        dns?: string;
+    }
+    /** Properties that describe a list of secrets. */
+    interface ListSecrets {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources?: SecretResource[];
+    }
+    /** Rotation. */
+    interface Rotation {
+        /** Determines whether Secrets Manager rotates your certificate automatically.
+         *
+         *  If set to `true`, the service reorders your certificate 31 days before it expires. To access the previous
+         *  version of the certifcate, you can use the [Get a version of a secret](#get-secret-version) method.
+         */
+        auto_rotate?: boolean;
+        /** Determines whether Secrets Manager rotates the private key for your certificate automatically.
+         *
+         *  If set to `true`, the service generates and stores a new private key for your rotated certificate.
+         */
+        rotate_keys?: boolean;
+    }
+    /** SecretAction. */
+    interface SecretAction {
+    }
+    /** Properties that describe a secret group. */
+    interface SecretGroupDef {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: SecretGroupResource[];
+    }
+    /** Metadata properties to update for a secret group. */
+    interface SecretGroupMetadataUpdatable {
+        /** A human-readable name to assign to your secret group.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a name for your secret
+         *  group.
+         */
+        name?: string;
+        /** An extended description of your secret group.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret group.
+         */
+        description?: string;
+    }
+    /** Properties that describe a secret group. */
+    interface SecretGroupResource {
+        /** The v4 UUID that uniquely identifies the secret group. */
+        id?: string;
+        /** A human-readable name to assign to your secret group.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a name for your secret
+         *  group.
+         */
+        name?: string;
+        /** An extended description of your secret group.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret group.
+         */
+        description?: string;
+        /** The date the secret group was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** Updates when the metadata of the secret group is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The MIME type that represents the secret group. */
+        type?: string;
+        /** SecretGroupResource accepts additional properties. */
+        [propName: string]: any;
+    }
+    /** SecretMetadata. */
+    interface SecretMetadata {
+    }
+    /** The metadata of a secret. */
+    interface SecretMetadataRequest {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: SecretMetadata[];
+    }
+    /** Properties that describe a rotation policy. */
+    interface SecretPolicyRotation {
+        /** The MIME type that represents the policy. Currently, only the default is supported. */
+        type: string;
+        rotation: SecretPolicyRotationRotation;
+    }
+    /** SecretPolicyRotationRotation. */
+    interface SecretPolicyRotationRotation {
+    }
+    /** SecretResource. */
+    interface SecretResource {
+    }
+    /** SecretVersion. */
+    interface SecretVersion {
+    }
+    /** SecretVersionMetadata. */
+    interface SecretVersionMetadata {
+    }
+    /** CertificateValidity. */
+    interface CertificateValidity {
+        /** The date the certificate validity period begins. */
+        not_before?: string;
+        /** The date the certificate validity period ends. */
+        not_after?: string;
+    }
+    /** Metadata properties that describe an arbitrary secret. */
+    interface ArbitrarySecretMetadata extends SecretMetadata {
+        /** The unique ID of the secret. */
+        id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
+         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies the resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
+        created_by?: string;
+        /** Updates when any part of the secret metadata is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The number of versions the secret has. */
+        versions_total?: number;
+        /** The date the secret material expires. The date format follows RFC 3339.
+         *
+         *  You can set an expiration date on supported secret types at their creation. If you create a secret without
+         *  specifying an expiration date, the secret does not expire. The `expiration_date` field is supported for the
+         *  following secret types:
+         *
+         *  - `arbitrary`
+         *  - `username_password`.
+         */
+        expiration_date?: string;
+    }
+    /** Properties that describe a secret. */
+    interface ArbitrarySecretResource extends SecretResource {
+        /** The v4 UUID that uniquely identifies the secret. */
+        id?: string;
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
+         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies your Secrets Manager resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
+        created_by?: string;
+        /** Updates when the actual secret is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The number of versions that are associated with a secret. */
+        versions_total?: number;
+        /** An array that contains metadata for each secret version. For more information on the metadata properties,
+         *  see [Get secret version metadata](#get-secret-version-metadata).
+         */
+        versions?: JsonObject[];
+        /** The date the secret material expires. The date format follows RFC 3339.
+         *
+         *  You can set an expiration date on supported secret types at their creation. If you create a secret without
+         *  specifying an expiration date, the secret does not expire. The `expiration_date` field is supported for the
+         *  following secret types:
+         *
+         *  - `arbitrary`
+         *  - `username_password`.
+         */
+        expiration_date?: string;
+        /** The new secret data to assign to the secret. */
+        payload?: string;
+        secret_data?: JsonObject;
+    }
+    /** Properties that describe a secret version. */
+    interface ArbitrarySecretVersionMetadata extends SecretVersionMetadata {
+        /** The ID of the secret version. */
+        id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+    }
+    /** Metadata properties that describe a certificate secret. */
+    interface CertificateSecretMetadata extends SecretMetadata {
+        /** The unique ID of the secret. */
+        id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
+         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies the resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
+        created_by?: string;
+        /** Updates when any part of the secret metadata is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The number of versions the secret has. */
+        versions_total?: number;
+        /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
+        serial_number?: string;
+        /** The identifier for the cryptographic algorthim that was used by the issuing certificate authority to sign
+         *  the ceritificate.
+         */
+        algorithm?: string;
+        /** The identifier for the cryptographic algorithm that was used to generate the public key that is associated
+         *  with the certificate.
+         */
+        key_algorithm?: string;
+        /** The distinguished name that identifies the entity that signed and issued the certificate. */
+        issuer?: string;
+        validity?: CertificateValidity;
+        /** The fully qualified domain name or host domain name that is defined for the certificate. */
+        common_name?: string;
+        /** Indicates whether the certificate was imported with an associated intermediate certificate. */
+        intermediate_included?: boolean;
+        /** Indicates whether the certificate was imported with an associated private key. */
+        private_key_included?: boolean;
+        /** The alternative names that are defined for the certificate. */
+        alt_names?: string[];
+        /** The date that the certificate expires. The date format follows RFC 3339. */
+        expiration_date?: string;
+    }
+    /** Properties that describe a secret. */
+    interface CertificateSecretResource extends SecretResource {
+        /** The v4 UUID that uniquely identifies the secret. */
+        id?: string;
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
+         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies your Secrets Manager resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
+        created_by?: string;
+        /** Updates when the actual secret is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The number of versions that are associated with a secret. */
+        versions_total?: number;
+        /** An array that contains metadata for each secret version. For more information on the metadata properties,
+         *  see [Get secret version metadata](#get-secret-version-metadata).
+         */
+        versions?: JsonObject[];
+        /** The contents of your certificate. The data must be formatted on a single line with embedded newline
+         *  characters.
+         */
+        certificate?: string;
+        /** The private key to associate with the certificate. The data must be formatted on a single line with embedded
+         *  newline characters.
+         */
+        private_key?: string;
+        /** The intermediate certificate to associate with the root certificate. The data must be formatted on a single
+         *  line with embedded newline characters.
+         */
+        intermediate?: string;
+        secret_data?: JsonObject;
+        /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
+        serial_number?: string;
+        /** The identifier for the cryptographic algorthim that was used by the issuing certificate authority to sign
+         *  the ceritificate.
+         */
+        algorithm?: string;
+        /** The identifier for the cryptographic algorithm that was used to generate the public key that is associated
+         *  with the certificate.
+         */
+        key_algorithm?: string;
+        /** The distinguished name that identifies the entity that signed and issued the certificate. */
+        issuer?: string;
+        validity?: CertificateValidity;
+        /** The fully qualified domain name or host domain name that is defined for the certificate. */
+        common_name?: string;
+        /** Indicates whether the certificate was imported with an associated intermediate certificate. */
+        intermediate_included?: boolean;
+        /** Indicates whether the certificate was imported with an associated private key. */
+        private_key_included?: boolean;
+        /** The alternative names that are defined for the certificate. */
+        alt_names?: string[];
+        /** The date that the certificate expires. The date format follows RFC 3339. */
+        expiration_date?: string;
+    }
+    /** CertificateSecretVersion. */
+    interface CertificateSecretVersion extends SecretVersion {
+        /** The v4 UUID that uniquely identifies the secret. */
+        id?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies the secret. */
+        crn?: string;
+        /** The ID of the secret version. */
+        version_id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        validity?: CertificateValidity;
+        /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
+        serial_number?: string;
+        /** The date that the certificate expires. The date format follows RFC 3339. */
+        expiration_date?: string;
+        secret_data?: CertificateSecretData;
+    }
+    /** Properties that describe a secret version. */
+    interface CertificateSecretVersionMetadata extends SecretVersionMetadata {
+        /** The ID of the secret version. */
+        id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
+        serial_number?: string;
+        /** The date that the certificate expires. The date format follows RFC 3339. */
+        expiration_date?: string;
+        validity?: CertificateValidity;
+    }
+    /** Properties that describe an IBM Cloud classic infrastructure (SoftLayer) configuration. */
+    interface ConfigElementDefConfigClassicInfrastructureConfig extends ConfigElementDefConfig {
+        /** The username that is associated with your classic infrastructure account.
+         *
+         *  In most cases, your classic infrastructure username is your `<account_id>_<email_address>`. In the console, you
+         *  can find your username by going to **Manage > Access (IAM) > Users > name > VPN password.** For more
+         *  information, see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-prepare-order-certificates#authorize-classic-infrastructure).
+         */
+        classic_infrastructure_username: string;
+        /** Your classic infrastructure API key.
+         *
+         *  In the console, you can view or create a classic infrastructure API key by going to **Manage > Access (IAM)
+         *  > Users > name > API keys.** For more information, see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-prepare-order-certificates#authorize-classic-infrastructure).
+         */
+        classic_infrastructure_password: string;
+    }
+    /** Properties that describe an IBM Cloud Internet Services (CIS) configuration. */
+    interface ConfigElementDefConfigCloudInternetServicesConfig extends ConfigElementDefConfig {
+        /** The Cloud Resource Name (CRN) that is associated with the CIS instance. */
+        cis_crn: string;
+        /** An IBM Cloud API key that has the capability to list domains in your CIS instance.
+         *
+         *  To grant Secrets Manager the ability to view the CIS instance and all of its domains, the API key must be
+         *  assigned the Reader service role on Internet Services (`internet-svcs`).
+         *
+         *  If you need to manage specific domains, you can assign the Manager role. For production environments, it is
+         *  recommended that you assign the Reader access role, and then use the
+         *  [IAM Policy Management API](https://cloud.ibm.com/apidocs/iam-policy-management#create-policy) to control
+         *  specific domains. For more information, see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-prepare-order-certificates#authorize-specific-domains).
+         */
+        cis_apikey?: string;
+    }
+    /** Properties that describe a Let's Encrypt configuration. */
+    interface ConfigElementDefConfigLetsEncryptConfig extends ConfigElementDefConfig {
+        /** The private key that is associated with your Automatic Certificate Management Environment (ACME) account.
+         *
+         *  If you have a working ACME client or account for Let's Encrypt, you can use the existing private key to  enable
+         *  communications with Secrets Manager. If you don't have an account yet, you can create one. For more information,
+         *  see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-prepare-order-certificates#create-acme-account).
+         */
+        private_key: string;
+    }
+    /** Configuration for the IAM credentials engine. */
+    interface CreateIAMCredentialsSecretEngineRootConfig extends EngineConfig {
+        /** An IBM Cloud API key that has the capability to create and manage service IDs.
+         *
+         *  The API key must be assigned the Editor platform role on the Access Groups Service and the Operator platform
+         *  role on the IAM Identity Service. For more information, see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-configure-iam-engine).
+         */
+        api_key: string;
+        /** The hash value of the IBM Cloud API key that is used to create and manage service IDs. */
+        api_key_hash?: string;
+    }
+    /** Delete the credentials that are associated with an `iam_credentials` secret. */
+    interface DeleteCredentialsForIAMCredentialsSecret extends SecretAction {
+        /** The service ID that you want to delete. It is deleted together with its API key. */
+        service_id: string;
+    }
+    /** Certificate authorities configuration. */
+    interface GetConfigElementsResourcesItemCertificateAuthoritiesConfig extends GetConfigElementsResourcesItem {
+        certificate_authorities: ConfigElementMetadata[];
+    }
+    /** DNS providers configuration. */
+    interface GetConfigElementsResourcesItemDnsProvidersConfig extends GetConfigElementsResourcesItem {
+        dns_providers: ConfigElementMetadata[];
+    }
+    /** Properties that describe a rotation policy. */
+    interface GetSecretPolicyRotation extends GetSecretPolicies {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: GetSecretPolicyRotationResourcesItem[];
+    }
+    /** Configuration for the IAM credentials engine. */
+    interface IAMCredentialsSecretEngineRootConfig extends GetConfigResourcesItem {
+        /** An IBM Cloud API key that has the capability to create and manage service IDs.
+         *
+         *  The API key must be assigned the Editor platform role on the Access Groups Service and the Operator platform
+         *  role on the IAM Identity Service. For more information, see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-configure-iam-engine).
+         */
+        api_key: string;
+        /** The hash value of the IBM Cloud API key that is used to create and manage service IDs. */
+        api_key_hash?: string;
+    }
+    /** Metadata properties that describe a iam_credentials secret. */
+    interface IAMCredentialsSecretMetadata extends SecretMetadata {
+        /** The unique ID of the secret. */
+        id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
+         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies the resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
+        created_by?: string;
+        /** Updates when any part of the secret metadata is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The number of versions the secret has. */
+        versions_total?: number;
+        /** The time-to-live (TTL) or lease duration to assign to generated credentials.
+         *
+         *  For `iam_credentials` secrets, the TTL defines for how long each generated API key remains valid. The value can
+         *  be either an integer that specifies the number of seconds, or the string representation of a duration, such as
+         *  `120m` or `24h`.
+         */
+        ttl?: any;
+        /** For `iam_credentials` secrets, this field controls whether to use the same service ID and API key for future
+         *  read operations on this secret. If set to `true`, the service reuses the current credentials. If set to `false`,
+         *  a new service ID and API key is generated each time that the secret is read or accessed.
+         */
+        reuse_api_key?: boolean;
+    }
+    /** Properties that describe a secret. */
+    interface IAMCredentialsSecretResource extends SecretResource {
+        /** The v4 UUID that uniquely identifies the secret. */
+        id?: string;
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
+         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies your Secrets Manager resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
         created_by?: string;
-        /** Updates when the policy is replaced or modified. The date format follows RFC 3339. */
+        /** Updates when the actual secret is modified. The date format follows RFC 3339. */
         last_update_date?: string;
-        /** The unique identifier for the entity that updated the policy. */
-        updated_by?: string;
-        /** The MIME type that represents the policy. Currently, only the default is supported. */
-        type: string;
-        /** The secret rotation time interval. */
-        rotation: SecretPolicyRotationRotation;
-    }
-    /** The base schema for listing secrets. */
-    interface ListSecrets {
-        /** The metadata that describes the resource array. */
-        metadata: CollectionMetadata;
-        /** A collection of resources. */
-        resources?: SecretResource[];
-    }
-    /** SecretActionOneOf. */
-    interface SecretActionOneOf {
-    }
-    /** The base schema definition for a secret group. */
-    interface SecretGroupDef {
-        /** The metadata that describes the resource array. */
-        metadata: CollectionMetadata;
-        /** A collection of resources. */
-        resources: SecretGroupResource[];
-    }
-    /** Metadata properties that describe a secret group. */
-    interface SecretGroupMetadataUpdatable {
-        /** A human-readable name to assign to your secret group.
+        /** The number of versions that are associated with a secret. */
+        versions_total?: number;
+        /** An array that contains metadata for each secret version. For more information on the metadata properties,
+         *  see [Get secret version metadata](#get-secret-version-metadata).
+         */
+        versions?: JsonObject[];
+        /** The time-to-live (TTL) or lease duration to assign to generated credentials.
          *
-         *  To protect your privacy, do not use personal data, such as your name or location, as a name for your secret
-         *  group.
+         *  For `iam_credentials` secrets, the TTL defines for how long each generated API key remains valid. The value can
+         *  be either an integer that specifies the number of seconds, or the string representation of a duration, such as
+         *  `120m` or `24h`.
          */
-        name?: string;
-        /** An extended description of your secret group.
+        ttl?: any;
+        /** The access groups that define the capabilities of the service ID and API key that are generated for an
+         *  `iam_credentials` secret.
          *
-         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
-         *  secret group.
+         *  **Tip:** To list the access groups that are available in an account, you can use the [IAM Access Groups
+         *  API](https://cloud.ibm.com/apidocs/iam-access-groups#list-access-groups). To find the ID of an access group in
+         *  the console, go to **Manage > Access (IAM) > Access groups**. Select the access group to inspect, and click
+         *  **Details** to view its ID.
          */
-        description?: string;
-    }
-    /** Properties that describe a secret group. */
-    interface SecretGroupResource {
-        /** The v4 UUID that uniquely identifies the secret group. */
-        id?: string;
-        /** A human-readable name to assign to your secret group.
+        access_groups?: string[];
+        /** The API key that is generated for this secret.
          *
-         *  To protect your privacy, do not use personal data, such as your name or location, as a name for your secret
-         *  group.
+         *  After the secret reaches the end of its lease (see the `ttl` field), the API key is deleted automatically. If
+         *  you want to continue to use the same API key for future read operations, see the `reuse_api_key` field.
          */
-        name?: string;
-        /** An extended description of your secret group.
+        api_key?: string;
+        /** The service ID under which the API key (see the `api_key` field) is created. This service ID is added to the
+         *  access groups that you assign for this secret.
+         */
+        service_id?: string;
+        /** Set to `true` to reuse the service ID and API key for this secret.
          *
-         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
-         *  secret group.
+         *  Use this field to control whether to use the same service ID and API key for future read operations on this
+         *  secret. If set to `true`, the service reuses the current credentials. If set to `false`, a new service ID and
+         *  API key is generated each time that the secret is read or accessed.
          */
-        description?: string;
-        /** The date the secret group was created. The date format follows RFC 3339. */
+        reuse_api_key?: boolean;
+    }
+    /** Properties that describe a secret version. */
+    interface IAMCredentialsSecretVersionMetadata extends SecretVersionMetadata {
+        /** The ID of the secret version. */
+        id?: string;
+        /** The date that the version of the secret was created. */
         creation_date?: string;
-        /** Updates when the metadata of the secret group is modified. The date format follows RFC 3339. */
-        last_update_date?: string;
-        /** The MIME type that represents the secret group. */
-        type?: string;
-        /** SecretGroupResource accepts additional properties. */
-        [propName: string]: any;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
     }
-    /** Metadata properties that describe a secret. */
-    interface SecretMetadata {
+    /** Configuration for the public certificates engine. */
+    interface PublicCertSecretEngineRootConfig extends GetConfigResourcesItem {
+        /** The certificate authority configurations that are associated with your instance. */
+        certificate_authorities?: ConfigElementMetadata[];
+        /** The DNS provider configurations that are associated with your instance. */
+        dns_providers?: ConfigElementMetadata[];
+    }
+    /** Metadata properties that describe a public certificate secret. */
+    interface PublicCertificateMetadataSecretResource extends SecretMetadata {
         /** The unique ID of the secret. */
         id?: string;
         /** Labels that you can use to filter for secrets in your instance.
@@ -787,23 +1836,6 @@ declare namespace SecretsManagerV1 {
         state_description?: string;
         /** The secret type. */
         secret_type?: string;
-        /** The date the secret material expires. The date format follows RFC 3339.
-         *
-         *  You can set an expiration date on supported secret types at their creation. If you create a secret without
-         *  specifying an expiration date, the secret does not expire. The `expiration_date` field is supported for the
-         *  following secret types:
-         *
-         *  - `arbitrary`
-         *  - `username_password`.
-         */
-        expiration_date?: string;
-        /** The time-to-live (TTL) or lease duration to assign to generated credentials.
-         *
-         *  For `iam_credentials` secrets, the TTL defines for how long each generated API key remains valid. The value can
-         *  be either an integer that specifies the number of seconds, or the string representation of a duration, such as
-         *  `120m` or `24h`.
-         */
-        ttl?: any;
         /** The Cloud Resource Name (CRN) that uniquely identifies the resource. */
         crn?: string;
         /** The date the secret was created. The date format follows RFC 3339. */
@@ -812,80 +1844,37 @@ declare namespace SecretsManagerV1 {
         created_by?: string;
         /** Updates when any part of the secret metadata is modified. The date format follows RFC 3339. */
         last_update_date?: string;
-    }
-    /** The metadata of a secret. */
-    interface SecretMetadataRequest {
-        /** The metadata that describes the resource array. */
-        metadata: CollectionMetadata;
-        /** A collection of resources. */
-        resources: SecretMetadata[];
-    }
-    /** Properties that are associated with a rotation policy. */
-    interface SecretPolicyRotation {
-        /** The MIME type that represents the policy. Currently, only the default is supported. */
-        type: string;
-        /** The secret rotation time interval. */
-        rotation: SecretPolicyRotationRotation;
-    }
-    /** The secret rotation time interval. */
-    interface SecretPolicyRotationRotation {
-        /** Specifies the length of the secret rotation time interval. */
-        interval: number;
-        /** Specifies the units for the secret rotation time interval. */
-        unit: string;
-    }
-    /** SecretResource. */
-    interface SecretResource {
-    }
-    /** Properties that are associated with a specific secret version. */
-    interface SecretVersion {
-        /** The ID of the secret version. */
-        id?: string;
-        /** The date that the version of the secret was created. */
-        creation_date?: string;
-        /** The unique identifier for the entity that created the secret. */
-        created_by?: string;
-        /** Indicates whether the version of the secret was created by automatic rotation. */
-        auto_rotated?: boolean;
-    }
-    /** Configuration that is used to generate IAM credentials. */
-    interface EngineConfigOneOfIAMSecretEngineRootConfig extends EngineConfigOneOf {
-        /** An IBM Cloud API key that has the capability to create and manage service IDs.
+        /** The number of versions the secret has. */
+        versions_total?: number;
+        /** The distinguished name that identifies the entity that signed and issued the certificate. */
+        issuer?: string;
+        /** Determines whether your issued certificate is bundled with intermediate certificates.
          *
-         *  The API key must be assigned the Editor platform role on the Access Groups Service and the Operator platform
-         *  role on the IAM Identity Service. For more information, see [Enabling the IAM secrets
-         *  engine](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-secret-engines#configure-iam-engine).
+         *  Set to `false` for the certificate file to contain only the issued certificate.
          */
-        api_key: string;
-        /** The hash value of the IBM Cloud API key that is used to create and manage service IDs. */
-        api_key_hash?: string;
-    }
-    /** The base schema for retrieving a policy that is associated with a secret. */
-    interface GetSecretPoliciesOneOfGetSecretPolicyRotation extends GetSecretPoliciesOneOf {
-        /** The metadata that describes the resource array. */
-        metadata: CollectionMetadata;
-        /** A collection of resources. */
-        resources: GetSecretPoliciesOneOfGetSecretPolicyRotationResourcesItem[];
-    }
-    /** Delete the credentials that are associated with an `iam_credentials` secret. */
-    interface SecretActionOneOfDeleteCredentialsForIAMSecret extends SecretActionOneOf {
-        /** The service ID that you want to delete. It is deleted together with its API key. */
-        service_id: string;
-    }
-    /** The request body of a `rotate` action. */
-    interface SecretActionOneOfRotateArbitrarySecretBody extends SecretActionOneOf {
-        /** The new secret data to assign to an `arbitrary` secret. */
-        payload: string;
-    }
-    /** The request body of a `rotate` action. */
-    interface SecretActionOneOfRotateUsernamePasswordSecretBody extends SecretActionOneOf {
-        /** The new password to assign to a `username_password` secret. */
-        password: string;
+        bundle_certs?: boolean;
+        /** The identifier for the cryptographic algorthim to be used by the issuing certificate authority to sign the
+         *  ceritificate.
+         */
+        algorithm?: string;
+        /** The identifier for the cryptographic algorithm to be used to generate the public key that is associated with
+         *  the certificate.
+         */
+        key_algorithm?: string;
+        /** The alternative names that are defined for the certificate. */
+        alt_names?: string[];
+        /** The fully qualified domain name or host domain name for the certificate. */
+        common_name?: string;
+        /** Indicates whether the certificate was ordered with an associated intermediate certificate. */
+        intermediate_included?: boolean;
+        /** Indicates whether the certificate was ordered with an associated private key. */
+        private_key_included?: boolean;
+        rotation?: Rotation;
+        /** Issuance information that is associated with your certificate. */
+        issuance_info?: IssuanceInfo;
     }
-    /** The base schema for secrets. */
-    interface SecretResourceArbitrarySecretResource extends SecretResource {
-        /** The MIME type that represents the secret. */
-        type?: string;
+    /** Properties that describe a secret. */
+    interface PublicCertificateSecretResource extends SecretResource {
         /** The v4 UUID that uniquely identifies the secret. */
         id?: string;
         /** A human-readable alias to assign to your secret.
@@ -928,28 +1917,99 @@ declare namespace SecretsManagerV1 {
         created_by?: string;
         /** Updates when the actual secret is modified. The date format follows RFC 3339. */
         last_update_date?: string;
-        /** An array that contains metadata for each secret version. */
-        versions?: SecretVersion[];
-        /** The date the secret material expires. The date format follows RFC 3339.
+        /** The number of versions that are associated with a secret. */
+        versions_total?: number;
+        /** An array that contains metadata for each secret version. For more information on the metadata properties,
+         *  see [Get secret version metadata](#get-secret-version-metadata).
+         */
+        versions?: JsonObject[];
+        /** The distinguished name that identifies the entity that signed and issued the certificate. */
+        issuer?: string;
+        /** Determines whether your issued certificate is bundled with intermediate certificates.
          *
-         *  You can set an expiration date on supported secret types at their creation. If you create a secret without
-         *  specifying an expiration date, the secret does not expire. The `expiration_date` field is supported for the
-         *  following secret types:
+         *  Set to `false` for the certificate file to contain only the issued certificate.
+         */
+        bundle_certs?: boolean;
+        /** The name of the certificate authority configuration.
          *
-         *  - `arbitrary`
-         *  - `username_password`.
+         *  To view a list of your configured authorities, use the [List configurations API](#get-secret-config-element).
          */
-        expiration_date?: string;
-        /** The new secret data to assign to an `arbitrary` secret. */
-        payload?: string;
+        ca?: string;
+        /** The name of the DNS provider configuration.
+         *
+         *  To view a list of your configured authorities, use the [List configurations API](#get-secret-config-element).
+         */
+        dns?: string;
+        /** The identifier for the cryptographic algorthim to be used by the issuing certificate authority to sign the
+         *  ceritificate.
+         */
+        algorithm?: string;
+        /** The identifier for the cryptographic algorithm to be used to generate the public key that is associated with
+         *  the certificate.
+         *
+         *  The algorithm that you select determines the encryption algorthim (`RSA` or `ECDSA`) and key size to be used to
+         *  generate keys and sign certificates. For longer living certificates it is recommended to use longer keys to
+         *  provide more encryption protection.
+         */
+        key_algorithm?: string;
+        /** The alternative names that are defined for the certificate. */
+        alt_names?: string[];
+        /** The fully qualified domain name or host domain name for the certificate. */
+        common_name?: string;
+        rotation?: Rotation;
+        /** Issuance information that is associated with your certificate. */
+        issuance_info?: IssuanceInfo;
+        /** The data that is associated with the secret. */
         secret_data?: JsonObject;
     }
-    /** The base schema for secrets. */
-    interface SecretResourceIAMSecretResource extends SecretResource {
-        /** The MIME type that represents the secret. */
-        type?: string;
-        /** The v4 UUID that uniquely identifies the secret. */
+    /** The request body of a `rotate` action. */
+    interface RotateArbitrarySecretBody extends SecretAction {
+        /** The new secret data to assign to an `arbitrary` secret. */
+        payload: string;
+    }
+    /** The request body of a rotate certificate action. */
+    interface RotateCertificateBody extends SecretAction {
+        /** The new data to associate with the certificate. */
+        certificate: string;
+        /** The new private key to associate with the certificate. */
+        private_key?: string;
+        /** The new intermediate certificate to associate with the certificate. */
+        intermediate?: string;
+    }
+    /** The request body of a `rotate` action. */
+    interface RotatePublicCertBody extends SecretAction {
+        /** Determine whether keys should be rotated. */
+        rotate_keys: boolean;
+    }
+    /** The request body of a `rotate` action. */
+    interface RotateUsernamePasswordSecretBody extends SecretAction {
+        /** The new password to assign to a `username_password` secret. */
+        password: string;
+    }
+    /** The secret rotation time interval. */
+    interface SecretPolicyRotationRotationPolicyRotation extends SecretPolicyRotationRotation {
+        /** Specifies the length of the secret rotation time interval. */
+        interval: number;
+        /** Specifies the units for the secret rotation time interval. */
+        unit: string;
+    }
+    /** The `public_cert` secret rotation policy. */
+    interface SecretPolicyRotationRotationPublicCertPolicyRotation extends SecretPolicyRotationRotation {
+        auto_rotate: boolean;
+        rotate_keys: boolean;
+    }
+    /** Metadata properties that describe a username_password secret. */
+    interface UsernamePasswordSecretMetadata extends SecretMetadata {
+        /** The unique ID of the secret. */
         id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
+         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
         /** A human-readable alias to assign to your secret.
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
@@ -966,14 +2026,6 @@ declare namespace SecretsManagerV1 {
          *  If you omit this parameter, your secret is assigned to the `default` secret group.
          */
         secret_group_id?: string;
-        /** Labels that you can use to filter for secrets in your instance.
-         *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
-         *
-         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
-         */
-        labels?: string[];
         /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
          *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
          */
@@ -982,52 +2034,29 @@ declare namespace SecretsManagerV1 {
         state_description?: string;
         /** The secret type. */
         secret_type?: string;
-        /** The Cloud Resource Name (CRN) that uniquely identifies your Secrets Manager resource. */
+        /** The Cloud Resource Name (CRN) that uniquely identifies the resource. */
         crn?: string;
         /** The date the secret was created. The date format follows RFC 3339. */
         creation_date?: string;
         /** The unique identifier for the entity that created the secret. */
         created_by?: string;
-        /** Updates when the actual secret is modified. The date format follows RFC 3339. */
+        /** Updates when any part of the secret metadata is modified. The date format follows RFC 3339. */
         last_update_date?: string;
-        /** An array that contains metadata for each secret version. */
-        versions?: SecretVersion[];
-        /** The time-to-live (TTL) or lease duration to assign to generated credentials.
-         *
-         *  For `iam_credentials` secrets, the TTL defines for how long each generated API key remains valid. The value can
-         *  be either an integer that specifies the number of seconds, or the string representation of a duration, such as
-         *  `120m` or `24h`.
-         */
-        ttl?: any;
-        /** The access groups that define the capabilities of the service ID and API key that are generated for an
-         *  `iam_credentials` secret.
-         *
-         *  **Tip:** To find the ID of an access group, go to **Manage > Access (IAM) > Access groups** in the IBM Cloud
-         *  console. Select the access group to inspect, and click **Details** to view its ID.
-         */
-        access_groups?: string[];
-        /** The API key that is generated for this secret.
+        /** The number of versions the secret has. */
+        versions_total?: number;
+        /** The date the secret material expires. The date format follows RFC 3339.
          *
-         *  After the secret reaches the end of its lease (see the `ttl` field), the API key is deleted automatically. If
-         *  you want to continue to use the same API key for future read operations, see the `reuse_api_key` field.
-         */
-        api_key?: string;
-        /** The service ID under which the API key (see the `api_key` field) is created. This service ID is added to the
-         *  access groups that you assign for this secret.
-         */
-        service_id?: string;
-        /** Set to `true` to reuse the service ID and API key for this secret.
+         *  You can set an expiration date on supported secret types at their creation. If you create a secret without
+         *  specifying an expiration date, the secret does not expire. The `expiration_date` field is supported for the
+         *  following secret types:
          *
-         *  Use this field to control whether to use the same service ID and API key for future read operations on this
-         *  secret. If set to `true`, the service reuses the current credentials. If set to `false`, a new service ID and
-         *  API key is generated each time that the secret is read or accessed.
+         *  - `arbitrary`
+         *  - `username_password`.
          */
-        reuse_api_key?: boolean;
+        expiration_date?: string;
     }
-    /** The base schema for secrets. */
-    interface SecretResourceUsernamePasswordSecretResource extends SecretResource {
-        /** The MIME type that represents the secret. */
-        type?: string;
+    /** Properties that describe a secret. */
+    interface UsernamePasswordSecretResource extends SecretResource {
         /** The v4 UUID that uniquely identifies the secret. */
         id?: string;
         /** A human-readable alias to assign to your secret.
@@ -1070,8 +2099,12 @@ declare namespace SecretsManagerV1 {
         created_by?: string;
         /** Updates when the actual secret is modified. The date format follows RFC 3339. */
         last_update_date?: string;
-        /** An array that contains metadata for each secret version. */
-        versions?: SecretVersion[];
+        /** The number of versions that are associated with a secret. */
+        versions_total?: number;
+        /** An array that contains metadata for each secret version. For more information on the metadata properties,
+         *  see [Get secret version metadata](#get-secret-version-metadata).
+         */
+        versions?: JsonObject[];
         /** The username to assign to this secret. */
         username?: string;
         /** The password to assign to this secret. */
@@ -1094,5 +2127,16 @@ declare namespace SecretsManagerV1 {
          */
         next_rotation_date?: string;
     }
+    /** Properties that describe a secret version. */
+    interface UsernamePasswordSecretVersionMetadata extends SecretVersionMetadata {
+        /** The ID of the secret version. */
+        id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** Indicates whether the version of the secret was created by automatic rotation. */
+        auto_rotated?: boolean;
+    }
 }
 export = SecretsManagerV1;