@ibm-cloud/secrets-manager 1.0.1 → 1.0.31

package/secrets-manager/v1.d.ts

@@ -1,5 +1,5 @@
 /**
- * (C) Copyright IBM Corp. 2021.
+ * (C) Copyright IBM Corp. 2022.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -18,8 +18,8 @@ import { IncomingHttpHeaders, OutgoingHttpHeaders } from 'http';
 import { BaseService, UserOptions } from 'ibm-cloud-sdk-core';
 /**
  * With IBM Cloud® Secrets Manager, you can create, lease, and centrally manage secrets that are used in IBM Cloud
- * services or your custom-built applications. Secrets are stored in a dedicated instance of Secrets Manager, built on
- * open source HashiCorp Vault.
+ * services or your custom-built applications. Secrets are stored in a dedicated instance of Secrets Manager, which is
+ * built on open source HashiCorp Vault.
  *
  * API Version: 1.0.0
  * See: https://cloud.ibm.com/docs/secrets-manager
@@ -124,7 +124,7 @@ declare class SecretsManagerV1 extends BaseService {
     /**
      * Create a secret.
      *
-     * Creates a secret or imports an existing value that you can use to access or authenticate to a protected resource.
+     * Create a secret or import an existing value that you can use to access or authenticate to a protected resource.
      *
      * Use this method to either generate or import an existing secret, such as an arbitrary value or a TLS certificate,
      * that you can manage in your Secrets Manager service instance. A successful request stores the secret in your
@@ -204,7 +204,7 @@ declare class SecretsManagerV1 extends BaseService {
     /**
      * Get a secret.
      *
-     * Retrieves a secret and its details by specifying the ID of the secret.
+     * Get a secret and its details by specifying the ID of the secret.
      *
      * A successful request returns the secret data that is associated with your secret, along with other metadata. To
      * view only the details of a specified secret without retrieving its value, use the [Get secret
@@ -222,14 +222,16 @@ declare class SecretsManagerV1 extends BaseService {
      *
      * Invokes an action on a specified secret. This method supports the following actions:
      *
-     * - `rotate`: Replace the value of an `arbitrary`, `username_password`, `public_cert` or `imported_cert` secret.
+     * - `rotate`: Replace the value of a secret.
+     * - `restore`: Restore a previous version of an `iam_credentials` secret.
+     * - `revoke`: Revoke a private certificate.
      * - `delete_credentials`: Delete the API key that is associated with an `iam_credentials` secret.
      *
      * @param {Object} params - The parameters to send to the service.
      * @param {string} params.secretType - The secret type.
      * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
      * @param {string} params.action - The action to perform on the specified secret.
-     * @param {SecretAction} params.secretAction - The properties to update for the secret.
+     * @param {SecretAction} [params.secretAction] - The properties to update for the secret.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSecret>>}
      */
@@ -246,6 +248,20 @@ declare class SecretsManagerV1 extends BaseService {
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
      */
     deleteSecret(params: SecretsManagerV1.DeleteSecretParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>;
+    /**
+     * List versions of a secret.
+     *
+     * Retrieves a list of the versions of a secret.
+     *
+     * A successful request returns the list of the versions along with the metadata of each version.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.ListSecretVersions>>}
+     */
+    listSecretVersions(params: SecretsManagerV1.ListSecretVersionsParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.ListSecretVersions>>;
     /**
      * Get a version of a secret.
      *
@@ -255,7 +271,7 @@ declare class SecretsManagerV1 extends BaseService {
      * with other metadata.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretType - The secret type. Supported options include: imported_cert.
+     * @param {string} params.secretType - The secret type.
      * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
      * @param {string} params.versionId - The v4 UUID that uniquely identifies the secret version. You can also use
      * `previous` to retrieve the previous version.
@@ -274,7 +290,7 @@ declare class SecretsManagerV1 extends BaseService {
      * A successful request returns the metadata that is associated with the specified version of your secret.
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretType - The secret type. Supported options include: imported_cert.
+     * @param {string} params.secretType - The secret type.
      * @param {string} params.id - The v4 UUID that uniquely identifies the secret.
      * @param {string} params.versionId - The v4 UUID that uniquely identifies the secret version. You can also use
      * `previous` to retrieve the previous version.
@@ -364,11 +380,7 @@ declare class SecretsManagerV1 extends BaseService {
      *
      * @param {Object} params - The parameters to send to the service.
      * @param {string} params.secretType - The secret type.
-     * @param {string} params.apiKey - An IBM Cloud API key that has the capability to create and manage service IDs.
-     *
-     * The API key must be assigned the Editor platform role on the Access Groups Service and the Operator platform role
-     * on the IAM Identity Service. For more information, see [Configuring the IAM secrets
-     * engine](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-iam-credentials#configure-iam-secrets-engine-api).
+     * @param {EngineConfig} params.engineConfig - Properties to update for a secrets engine.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
      */
@@ -389,8 +401,16 @@ declare class SecretsManagerV1 extends BaseService {
      *
      * Adds a configuration element to the specified secret type.
      *
-     * Use this method to define the configurations that are required to enable the  public certificates (`public_cert`)
-     * engine. You can add up to 10 certificate authority and DNS provider configurations for your instance.
+     * Use this method to define the configurations that are required to enable the public certificates (`public_cert`)
+     * engine and the private certificates (`private_cert`) engine.
+     *
+     * You can add multiple configurations for your instance as follows:
+     *
+     * - Up to 10 public certificate authority configurations
+     * - Up to 10 DNS provider configurations
+     * - Up to 10 private root certifiate authority configurations
+     * - Up to 10 private intermediate certifiate authority configurations
+     * - Up to 10 certificate templates.
      *
      * @param {Object} params - The parameters to send to the service.
      * @param {string} params.secretType - The secret type.
@@ -415,6 +435,19 @@ declare class SecretsManagerV1 extends BaseService {
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetConfigElements>>}
      */
     getConfigElements(params: SecretsManagerV1.GetConfigElementsParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetConfigElements>>;
+    /**
+     * Get a configuration.
+     *
+     * Retrieves the details of a specific configuration that is associated with a secret type.
+     *
+     * @param {Object} params - The parameters to send to the service.
+     * @param {string} params.secretType - The secret type.
+     * @param {string} params.configElement - The configuration element to define or manage.
+     * @param {string} params.configName - The name of your configuration.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>}
+     */
+    getConfigElement(params: SecretsManagerV1.GetConfigElementParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>;
     /**
      * Update a configuration.
      *
@@ -426,15 +459,15 @@ declare class SecretsManagerV1 extends BaseService {
      * @param {string} params.configName - The name of your configuration.
      * @param {string} params.type - The type of configuration. Value options differ depending on the `config_element`
      * property that you want to define.
-     * @param {JsonObject} params.config -
+     * @param {JsonObject} params.config - Properties that describe a configuration, which depends on type.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>}
      */
     updateConfigElement(params: SecretsManagerV1.UpdateConfigElementParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>;
     /**
-     * Remove a configuration.
+     * Delete a configuration.
      *
-     * Removes a configuration element from the specified secret type.
+     * Deletes a configuration element from the specified secret type.
      *
      * @param {Object} params - The parameters to send to the service.
      * @param {string} params.secretType - The secret type.
@@ -444,19 +477,67 @@ declare class SecretsManagerV1 extends BaseService {
      * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
      */
     deleteConfigElement(params: SecretsManagerV1.DeleteConfigElementParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>;
+    /*************************
+     * notifications
+     ************************/
     /**
-     * Get a configuration.
+     * Register with Event Notifications.
      *
-     * Retrieves the details of a specific configuration that is associated with a secret type.
+     * Creates a registration between a Secrets Manager instance and [Event
+     * Notifications](https://cloud.ibm.com/apidocs/event-notifications).
+     *
+     * A successful request adds Secrets Manager as a source that you can reference from your Event Notifications
+     * instance. For more information about enabling notifications for Secrets Manager, check out the
+     * [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-event-notifications).
      *
      * @param {Object} params - The parameters to send to the service.
-     * @param {string} params.secretType - The secret type.
-     * @param {string} params.configElement - The configuration element to define or manage.
-     * @param {string} params.configName - The name of your configuration.
+     * @param {string} params.eventNotificationsInstanceCrn - The Cloud Resource Name (CRN) of the connected Event
+     * Notifications instance.
+     * @param {string} params.eventNotificationsSourceName - The name that is displayed as a source in your Event
+     * Notifications instance.
+     * @param {string} [params.eventNotificationsSourceDescription] - An optional description for the source in your Event
+     * Notifications instance.
      * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
-     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>}
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetNotificationsSettings>>}
      */
-    getConfigElement(params: SecretsManagerV1.GetConfigElementParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetSingleConfigElement>>;
+    createNotificationsRegistration(params: SecretsManagerV1.CreateNotificationsRegistrationParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetNotificationsSettings>>;
+    /**
+     * Get Event Notifications registration details.
+     *
+     * Retrieves the details of an existing registration between a Secrets Manager instance and Event Notifications.
+     *
+     * @param {Object} [params] - The parameters to send to the service.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.GetNotificationsSettings>>}
+     */
+    getNotificationsRegistration(params?: SecretsManagerV1.GetNotificationsRegistrationParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.GetNotificationsSettings>>;
+    /**
+     * Unregister from Event Notifications.
+     *
+     * Deletes a registration between a Secrets Manager instance and Event Notifications.
+     *
+     * A successful request removes your Secrets Manager instance as a source in Event Notifications.
+     *
+     * @param {Object} [params] - The parameters to send to the service.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
+     */
+    deleteNotificationsRegistration(params?: SecretsManagerV1.DeleteNotificationsRegistrationParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>;
+    /**
+     * Send test event.
+     *
+     * Send a test event from a Secrets Manager instance to a configured [Event
+     * Notifications](https://cloud.ibm.com/apidocs/event-notifications) instance.
+     *
+     * A successful request sends a test event to the Event Notifications instance. For more information about enabling
+     * notifications for Secrets Manager, check out the
+     * [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-event-notifications).
+     *
+     * @param {Object} [params] - The parameters to send to the service.
+     * @param {OutgoingHttpHeaders} [params.headers] - Custom request headers
+     * @returns {Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>}
+     */
+    sendTestNotification(params?: SecretsManagerV1.SendTestNotificationParams): Promise<SecretsManagerV1.Response<SecretsManagerV1.Empty>>;
 }
 /*************************
  * interfaces
@@ -533,7 +614,9 @@ declare namespace SecretsManagerV1 {
             IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
             PUBLIC_CERT = "public_cert",
-            USERNAME_PASSWORD = "username_password"
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
     }
     /** Parameters for the `listSecrets` operation. */
@@ -564,7 +647,9 @@ declare namespace SecretsManagerV1 {
             IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
             PUBLIC_CERT = "public_cert",
-            USERNAME_PASSWORD = "username_password"
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
     }
     /** Parameters for the `listAllSecrets` operation. */
@@ -634,7 +719,9 @@ declare namespace SecretsManagerV1 {
             IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
             PUBLIC_CERT = "public_cert",
-            USERNAME_PASSWORD = "username_password"
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
     }
     /** Parameters for the `updateSecret` operation. */
@@ -646,7 +733,7 @@ declare namespace SecretsManagerV1 {
         /** The action to perform on the specified secret. */
         action: UpdateSecretConstants.Action | string;
         /** The properties to update for the secret. */
-        secretAction: SecretAction;
+        secretAction?: SecretAction;
         headers?: OutgoingHttpHeaders;
     }
     /** Constants for the `updateSecret` operation. */
@@ -657,11 +744,15 @@ declare namespace SecretsManagerV1 {
             IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
             PUBLIC_CERT = "public_cert",
-            USERNAME_PASSWORD = "username_password"
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
         /** The action to perform on the specified secret. */
         enum Action {
             ROTATE = "rotate",
+            RESTORE = "restore",
+            REVOKE = "revoke",
             DELETE_CREDENTIALS = "delete_credentials"
         }
     }
@@ -681,12 +772,35 @@ declare namespace SecretsManagerV1 {
             IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
             PUBLIC_CERT = "public_cert",
-            USERNAME_PASSWORD = "username_password"
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
+        }
+    }
+    /** Parameters for the `listSecretVersions` operation. */
+    interface ListSecretVersionsParams {
+        /** The secret type. */
+        secretType: ListSecretVersionsConstants.SecretType | string;
+        /** The v4 UUID that uniquely identifies the secret. */
+        id: string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `listSecretVersions` operation. */
+    namespace ListSecretVersionsConstants {
+        /** The secret type. */
+        enum SecretType {
+            ARBITRARY = "arbitrary",
+            IAM_CREDENTIALS = "iam_credentials",
+            IMPORTED_CERT = "imported_cert",
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
     }
     /** Parameters for the `getSecretVersion` operation. */
     interface GetSecretVersionParams {
-        /** The secret type. Supported options include: imported_cert. */
+        /** The secret type. */
         secretType: GetSecretVersionConstants.SecretType | string;
         /** The v4 UUID that uniquely identifies the secret. */
         id: string;
@@ -701,15 +815,20 @@ declare namespace SecretsManagerV1 {
     }
     /** Constants for the `getSecretVersion` operation. */
     namespace GetSecretVersionConstants {
-        /** The secret type. Supported options include: imported_cert. */
+        /** The secret type. */
         enum SecretType {
+            ARBITRARY = "arbitrary",
+            IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
     }
     /** Parameters for the `getSecretVersionMetadata` operation. */
     interface GetSecretVersionMetadataParams {
-        /** The secret type. Supported options include: imported_cert. */
+        /** The secret type. */
         secretType: GetSecretVersionMetadataConstants.SecretType | string;
         /** The v4 UUID that uniquely identifies the secret. */
         id: string;
@@ -724,10 +843,15 @@ declare namespace SecretsManagerV1 {
     }
     /** Constants for the `getSecretVersionMetadata` operation. */
     namespace GetSecretVersionMetadataConstants {
-        /** The secret type. Supported options include: imported_cert. */
+        /** The secret type. */
         enum SecretType {
+            ARBITRARY = "arbitrary",
+            IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
     }
     /** Parameters for the `getSecretMetadata` operation. */
@@ -746,7 +870,9 @@ declare namespace SecretsManagerV1 {
             IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
             PUBLIC_CERT = "public_cert",
-            USERNAME_PASSWORD = "username_password"
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
     }
     /** Parameters for the `updateSecretMetadata` operation. */
@@ -769,7 +895,9 @@ declare namespace SecretsManagerV1 {
             IAM_CREDENTIALS = "iam_credentials",
             IMPORTED_CERT = "imported_cert",
             PUBLIC_CERT = "public_cert",
-            USERNAME_PASSWORD = "username_password"
+            PRIVATE_CERT = "private_cert",
+            USERNAME_PASSWORD = "username_password",
+            KV = "kv"
         }
     }
     /** Parameters for the `putPolicy` operation. */
@@ -791,7 +919,8 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             USERNAME_PASSWORD = "username_password",
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert"
         }
         /** The type of policy that is associated with the specified secret. */
         enum Policy {
@@ -813,7 +942,8 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             USERNAME_PASSWORD = "username_password",
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert"
         }
         /** The type of policy that is associated with the specified secret. */
         enum Policy {
@@ -824,21 +954,15 @@ declare namespace SecretsManagerV1 {
     interface PutConfigParams {
         /** The secret type. */
         secretType: PutConfigConstants.SecretType | string;
-        /** An IBM Cloud API key that has the capability to create and manage service IDs.
-         *
-         *  The API key must be assigned the Editor platform role on the Access Groups Service and the Operator platform
-         *  role on the IAM Identity Service. For more information, see [Configuring the IAM secrets
-         *  engine](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-iam-credentials#configure-iam-secrets-engine-api).
-         */
-        apiKey: string;
+        /** Properties to update for a secrets engine. */
+        engineConfig: EngineConfig;
         headers?: OutgoingHttpHeaders;
     }
     /** Constants for the `putConfig` operation. */
     namespace PutConfigConstants {
         /** The secret type. */
         enum SecretType {
-            IAM_CREDENTIALS = "iam_credentials",
-            PUBLIC_CERT = "public_cert"
+            IAM_CREDENTIALS = "iam_credentials"
         }
     }
     /** Parameters for the `getConfig` operation. */
@@ -852,7 +976,8 @@ declare namespace SecretsManagerV1 {
         /** The secret type. */
         enum SecretType {
             IAM_CREDENTIALS = "iam_credentials",
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert"
         }
     }
     /** Parameters for the `createConfigElement` operation. */
@@ -875,19 +1000,26 @@ declare namespace SecretsManagerV1 {
     namespace CreateConfigElementConstants {
         /** The secret type. */
         enum SecretType {
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert"
         }
         /** The configuration element to define or manage. */
         enum ConfigElement {
             CERTIFICATE_AUTHORITIES = "certificate_authorities",
-            DNS_PROVIDERS = "dns_providers"
+            DNS_PROVIDERS = "dns_providers",
+            ROOT_CERTIFICATE_AUTHORITIES = "root_certificate_authorities",
+            INTERMEDIATE_CERTIFICATE_AUTHORITIES = "intermediate_certificate_authorities",
+            CERTIFICATE_TEMPLATES = "certificate_templates"
         }
         /** The type of configuration. Value options differ depending on the `config_element` property that you want to define. */
         enum Type {
             LETSENCRYPT = "letsencrypt",
             LETSENCRYPT_STAGE = "letsencrypt-stage",
             CIS = "cis",
-            CLASSIC_INFRASTRUCTURE = "classic_infrastructure"
+            CLASSIC_INFRASTRUCTURE = "classic_infrastructure",
+            ROOT_CERTIFICATE_AUTHORITY = "root_certificate_authority",
+            INTERMEDIATE_CERTIFICATE_AUTHORITY = "intermediate_certificate_authority",
+            CERTIFICATE_TEMPLATE = "certificate_template"
         }
     }
     /** Parameters for the `getConfigElements` operation. */
@@ -902,12 +1034,42 @@ declare namespace SecretsManagerV1 {
     namespace GetConfigElementsConstants {
         /** The secret type. */
         enum SecretType {
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert"
         }
         /** The configuration element to define or manage. */
         enum ConfigElement {
             CERTIFICATE_AUTHORITIES = "certificate_authorities",
-            DNS_PROVIDERS = "dns_providers"
+            DNS_PROVIDERS = "dns_providers",
+            ROOT_CERTIFICATE_AUTHORITIES = "root_certificate_authorities",
+            INTERMEDIATE_CERTIFICATE_AUTHORITIES = "intermediate_certificate_authorities",
+            CERTIFICATE_TEMPLATES = "certificate_templates"
+        }
+    }
+    /** Parameters for the `getConfigElement` operation. */
+    interface GetConfigElementParams {
+        /** The secret type. */
+        secretType: GetConfigElementConstants.SecretType | string;
+        /** The configuration element to define or manage. */
+        configElement: GetConfigElementConstants.ConfigElement | string;
+        /** The name of your configuration. */
+        configName: string;
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Constants for the `getConfigElement` operation. */
+    namespace GetConfigElementConstants {
+        /** The secret type. */
+        enum SecretType {
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert"
+        }
+        /** The configuration element to define or manage. */
+        enum ConfigElement {
+            CERTIFICATE_AUTHORITIES = "certificate_authorities",
+            DNS_PROVIDERS = "dns_providers",
+            ROOT_CERTIFICATE_AUTHORITIES = "root_certificate_authorities",
+            INTERMEDIATE_CERTIFICATE_AUTHORITIES = "intermediate_certificate_authorities",
+            CERTIFICATE_TEMPLATES = "certificate_templates"
         }
     }
     /** Parameters for the `updateConfigElement` operation. */
@@ -922,6 +1084,7 @@ declare namespace SecretsManagerV1 {
          *  define.
          */
         type: UpdateConfigElementConstants.Type | string;
+        /** Properties that describe a configuration, which depends on type. */
         config: JsonObject;
         headers?: OutgoingHttpHeaders;
     }
@@ -929,19 +1092,26 @@ declare namespace SecretsManagerV1 {
     namespace UpdateConfigElementConstants {
         /** The secret type. */
         enum SecretType {
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert"
         }
         /** The configuration element to define or manage. */
         enum ConfigElement {
             CERTIFICATE_AUTHORITIES = "certificate_authorities",
-            DNS_PROVIDERS = "dns_providers"
+            DNS_PROVIDERS = "dns_providers",
+            ROOT_CERTIFICATE_AUTHORITIES = "root_certificate_authorities",
+            INTERMEDIATE_CERTIFICATE_AUTHORITIES = "intermediate_certificate_authorities",
+            CERTIFICATE_TEMPLATES = "certificate_templates"
         }
         /** The type of configuration. Value options differ depending on the `config_element` property that you want to define. */
         enum Type {
             LETSENCRYPT = "letsencrypt",
             LETSENCRYPT_STAGE = "letsencrypt-stage",
             CIS = "cis",
-            CLASSIC_INFRASTRUCTURE = "classic_infrastructure"
+            CLASSIC_INFRASTRUCTURE = "classic_infrastructure",
+            ROOT_CERTIFICATE_AUTHORITY = "root_certificate_authority",
+            INTERMEDIATE_CERTIFICATE_AUTHORITY = "intermediate_certificate_authority",
+            CERTIFICATE_TEMPLATE = "certificate_template"
         }
     }
     /** Parameters for the `deleteConfigElement` operation. */
@@ -958,48 +1128,43 @@ declare namespace SecretsManagerV1 {
     namespace DeleteConfigElementConstants {
         /** The secret type. */
         enum SecretType {
-            PUBLIC_CERT = "public_cert"
+            PUBLIC_CERT = "public_cert",
+            PRIVATE_CERT = "private_cert"
         }
         /** The configuration element to define or manage. */
         enum ConfigElement {
             CERTIFICATE_AUTHORITIES = "certificate_authorities",
-            DNS_PROVIDERS = "dns_providers"
+            DNS_PROVIDERS = "dns_providers",
+            ROOT_CERTIFICATE_AUTHORITIES = "root_certificate_authorities",
+            INTERMEDIATE_CERTIFICATE_AUTHORITIES = "intermediate_certificate_authorities",
+            CERTIFICATE_TEMPLATES = "certificate_templates"
         }
     }
-    /** Parameters for the `getConfigElement` operation. */
-    interface GetConfigElementParams {
-        /** The secret type. */
-        secretType: GetConfigElementConstants.SecretType | string;
-        /** The configuration element to define or manage. */
-        configElement: GetConfigElementConstants.ConfigElement | string;
-        /** The name of your configuration. */
-        configName: string;
+    /** Parameters for the `createNotificationsRegistration` operation. */
+    interface CreateNotificationsRegistrationParams {
+        /** The Cloud Resource Name (CRN) of the connected Event Notifications instance. */
+        eventNotificationsInstanceCrn: string;
+        /** The name that is displayed as a source in your Event Notifications instance. */
+        eventNotificationsSourceName: string;
+        /** An optional description for the source in your Event Notifications instance. */
+        eventNotificationsSourceDescription?: string;
         headers?: OutgoingHttpHeaders;
     }
-    /** Constants for the `getConfigElement` operation. */
-    namespace GetConfigElementConstants {
-        /** The secret type. */
-        enum SecretType {
-            PUBLIC_CERT = "public_cert"
-        }
-        /** The configuration element to define or manage. */
-        enum ConfigElement {
-            CERTIFICATE_AUTHORITIES = "certificate_authorities",
-            DNS_PROVIDERS = "dns_providers"
-        }
+    /** Parameters for the `getNotificationsRegistration` operation. */
+    interface GetNotificationsRegistrationParams {
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Parameters for the `deleteNotificationsRegistration` operation. */
+    interface DeleteNotificationsRegistrationParams {
+        headers?: OutgoingHttpHeaders;
+    }
+    /** Parameters for the `sendTestNotification` operation. */
+    interface SendTestNotificationParams {
+        headers?: OutgoingHttpHeaders;
     }
     /*************************
      * model interfaces
      ************************/
-    /** CertificateSecretData. */
-    interface CertificateSecretData {
-        /** The contents of the certificate. */
-        certificate?: string;
-        /** The private key that is associated with the certificate. */
-        private_key?: string;
-        /** The intermediate certificate that is associated with the certificate. */
-        intermediate?: string;
-    }
     /** The metadata that describes the resource array. */
     interface CollectionMetadata {
         /** The type of resources in the resource array. */
@@ -1037,6 +1202,9 @@ declare namespace SecretsManagerV1 {
         /** A collection of resources. */
         resources: SecretResource[];
     }
+    /** EngineConfig. */
+    interface EngineConfig {
+    }
     /** Configuration for the specified secret type. */
     interface GetConfig {
         /** The metadata that describes the resource array. */
@@ -1057,6 +1225,13 @@ declare namespace SecretsManagerV1 {
     /** GetConfigResourcesItem. */
     interface GetConfigResourcesItem {
     }
+    /** Properties that describe an existing registration with Event Notifications. */
+    interface GetNotificationsSettings {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources: NotificationsSettings[];
+    }
     /** Properties that describe a secret. */
     interface GetSecret {
         /** The metadata that describes the resource array. */
@@ -1067,24 +1242,6 @@ declare namespace SecretsManagerV1 {
     /** GetSecretPolicies. */
     interface GetSecretPolicies {
     }
-    /** Properties that describe a rotation policy. */
-    interface GetSecretPolicyRotationResourcesItem {
-        /** The v4 UUID that uniquely identifies the policy. */
-        id: string;
-        /** The Cloud Resource Name (CRN) that uniquely identifies your cloud resources. */
-        crn?: string;
-        /** The date the policy was created. The date format follows RFC 3339. */
-        creation_date?: string;
-        /** The unique identifier for the entity that created the policy. */
-        created_by?: string;
-        /** Updates when the policy is replaced or modified. The date format follows RFC 3339. */
-        last_update_date?: string;
-        /** The unique identifier for the entity that updated the policy. */
-        updated_by?: string;
-        /** The MIME type that represents the policy. Currently, only the default is supported. */
-        type: string;
-        rotation: SecretPolicyRotationRotation;
-    }
     /** Properties that describe the version of a secret. */
     interface GetSecretVersion {
         /** The metadata that describes the resource array. */
@@ -1110,7 +1267,7 @@ declare namespace SecretsManagerV1 {
     interface IssuanceInfo {
         /** The date the certificate was ordered. The date format follows RFC 3339. */
         ordered_on?: string;
-        /** An code that identifies an issuance error.
+        /** A code that identifies an issuance error.
          *
          *  This field, along with `error_message`, is returned when Secrets Manager successfully processes your request,
          *  but a certificate is unable to be issued by the certificate authority.
@@ -1133,6 +1290,13 @@ declare namespace SecretsManagerV1 {
         /** The name that was assigned to the DNS provider configuration. */
         dns?: string;
     }
+    /** Properties that describe a list of versions of a secret. */
+    interface ListSecretVersions {
+        /** The metadata that describes the resource array. */
+        metadata: CollectionMetadata;
+        /** A collection of resources. */
+        resources?: SecretVersionInfo[];
+    }
     /** Properties that describe a list of secrets. */
     interface ListSecrets {
         /** The metadata that describes the resource array. */
@@ -1140,19 +1304,41 @@ declare namespace SecretsManagerV1 {
         /** A collection of resources. */
         resources?: SecretResource[];
     }
+    /** The Event Notifications details. */
+    interface NotificationsSettings {
+        /** The Cloud Resource Name (CRN) of the connected Event Notifications instance. */
+        event_notifications_instance_crn: string;
+    }
     /** Rotation. */
     interface Rotation {
         /** Determines whether Secrets Manager rotates your certificate automatically.
          *
-         *  If set to `true`, the service reorders your certificate 31 days before it expires. To access the previous
-         *  version of the certifcate, you can use the [Get a version of a secret](#get-secret-version) method.
+         *  For public certificates, if `auto_rotate` is set to `true` the service reorders your certificate 31 days before
+         *  it expires. For private certificates, the certificate is rotated according to the time interval specified in the
+         *  `interval` and `unit` fields.
+         *
+         *  To access the previous version of the certificate, you can use the
+         *  [Get a version of a secret](#get-secret-version) method.
          */
         auto_rotate?: boolean;
         /** Determines whether Secrets Manager rotates the private key for your certificate automatically.
          *
          *  If set to `true`, the service generates and stores a new private key for your rotated certificate.
+         *
+         *  **Note:** Use this field only for public certificates. Ignored for private certificates.
          */
         rotate_keys?: boolean;
+        /** Used together with the `unit` field to specify the rotation interval. The minimum interval is one day, and
+         *  the maximum interval is 3 years (1095 days). Required in case `auto_rotate` is set to `true`.
+         *
+         *  **Note:** Use this field only for private certificates Ignored for public certificates.
+         */
+        interval?: number;
+        /** The time unit of the rotation interval.
+         *
+         *  **Note:** Use this field only for private certificates. Ignored for public certificates.
+         */
+        unit?: string;
     }
     /** SecretAction. */
     interface SecretAction {
@@ -1229,6 +1415,9 @@ declare namespace SecretsManagerV1 {
     /** SecretVersion. */
     interface SecretVersion {
     }
+    /** Properties that describe a secret version within a list of secret versions. */
+    interface SecretVersionInfo {
+    }
     /** SecretVersionMetadata. */
     interface SecretVersionMetadata {
     }
@@ -1239,21 +1428,15 @@ declare namespace SecretsManagerV1 {
         /** The date the certificate validity period ends. */
         not_after?: string;
     }
-    /** Warning response. */
-    interface Warning {
-        /** A warning code identifier. */
-        code: string;
-        /** A human-readable message that provides details about the warning. */
-        message: string;
-    }
     /** Metadata properties that describe an arbitrary secret. */
     interface ArbitrarySecretMetadata extends SecretMetadata {
         /** The unique ID of the secret. */
         id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be in the range 2 - 30 characters, including spaces. Special
+         *  characters that are not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe
+         *  character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -1325,8 +1508,8 @@ declare namespace SecretsManagerV1 {
         secret_group_id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be 2 - 30 characters, including spaces. Special characters that are
+         *  not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -1365,16 +1548,59 @@ declare namespace SecretsManagerV1 {
         expiration_date?: string;
         /** The new secret data to assign to the secret. */
         payload?: string;
+        /** The data that is associated with the secret version.
+         *
+         *  The data object contains the field `payload`.
+         */
+        secret_data?: JsonObject;
+    }
+    /** ArbitrarySecretVersion. */
+    interface ArbitrarySecretVersion extends SecretVersion {
+        /** The v4 UUID that uniquely identifies the secret. */
+        id?: string;
+        /** The ID of the secret version. */
+        version_id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** The data that is associated with the secret version.
+         *
+         *  The data object contains the field `payload`.
+         */
         secret_data?: JsonObject;
     }
+    /** ArbitrarySecretVersionInfo. */
+    interface ArbitrarySecretVersionInfo extends SecretVersionInfo {
+        /** The ID of the secret version. */
+        id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** Indicates whether the payload for the secret version is stored and available. */
+        payload_available?: boolean;
+        /** Indicates whether the secret data that is associated with a secret version was retrieved in a call to the
+         *  service API.
+         */
+        downloaded?: boolean;
+    }
     /** Properties that describe a secret version. */
     interface ArbitrarySecretVersionMetadata extends SecretVersionMetadata {
-        /** The ID of the secret version. */
+        /** The v4 UUID that uniquely identifies the secret. */
         id?: string;
+        /** The ID of the secret version. */
+        version_id?: string;
         /** The date that the version of the secret was created. */
         creation_date?: string;
         /** The unique identifier for the entity that created the secret version. */
         created_by?: string;
+        /** Indicates whether the payload for the secret version is stored and available. */
+        payload_available?: boolean;
+        /** Indicates whether the secret data that is associated with a secret version was retrieved in a call to the
+         *  service API.
+         */
+        downloaded?: boolean;
     }
     /** Metadata properties that describe a certificate secret. */
     interface CertificateSecretMetadata extends SecretMetadata {
@@ -1382,8 +1608,9 @@ declare namespace SecretsManagerV1 {
         id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be in the range 2 - 30 characters, including spaces. Special
+         *  characters that are not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe
+         *  character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -1424,8 +1651,8 @@ declare namespace SecretsManagerV1 {
         versions_total?: number;
         /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
         serial_number?: string;
-        /** The identifier for the cryptographic algorthim that was used by the issuing certificate authority to sign
-         *  the ceritificate.
+        /** The identifier for the cryptographic algorithm that was used by the issuing certificate authority to sign
+         *  the certificate.
          */
         algorithm?: string;
         /** The identifier for the cryptographic algorithm that was used to generate the public key that is associated
@@ -1468,8 +1695,8 @@ declare namespace SecretsManagerV1 {
         secret_group_id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be 2 - 30 characters, including spaces. Special characters that are
+         *  not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -1508,11 +1735,19 @@ declare namespace SecretsManagerV1 {
          *  line with embedded newline characters.
          */
         intermediate?: string;
+        /** The data that is associated with the secret. The data object contains the following fields:
+         *
+         *  `certificate`: The contents of the certificate.
+         *
+         *  `private_key`: The private key that is associated with the certificate.
+         *
+         *  `intermediate`: The intermediate certificate that is associated with the certificate.
+         */
         secret_data?: JsonObject;
         /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
         serial_number?: string;
-        /** The identifier for the cryptographic algorthim that was used by the issuing certificate authority to sign
-         *  the ceritificate.
+        /** The identifier for the cryptographic algorithm that was used by the issuing certificate authority to sign
+         *  the certificate.
          */
         algorithm?: string;
         /** The identifier for the cryptographic algorithm that was used to generate the public key that is associated
@@ -1537,8 +1772,6 @@ declare namespace SecretsManagerV1 {
     interface CertificateSecretVersion extends SecretVersion {
         /** The v4 UUID that uniquely identifies the secret. */
         id?: string;
-        /** The Cloud Resource Name (CRN) that uniquely identifies the secret. */
-        crn?: string;
         /** The ID of the secret version. */
         version_id?: string;
         /** The date that the version of the secret was created. */
@@ -1550,16 +1783,52 @@ declare namespace SecretsManagerV1 {
         serial_number?: string;
         /** The date that the certificate expires. The date format follows RFC 3339. */
         expiration_date?: string;
-        secret_data?: CertificateSecretData;
+        /** The data that is associated with the secret version. The data object contains the following fields:
+         *
+         *  `certificate`: The contents of the certificate.
+         *
+         *  `private_key`: The private key that is associated with the certificate.
+         *
+         *  `intermediate`: The intermediate certificate that is associated with the certificate.
+         */
+        secret_data?: JsonObject;
+    }
+    /** CertificateSecretVersionInfo. */
+    interface CertificateSecretVersionInfo extends SecretVersionInfo {
+        /** The ID of the secret version. */
+        id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** Indicates whether the payload for the secret version is stored and available. */
+        payload_available?: boolean;
+        /** Indicates whether the secret data that is associated with a secret version was retrieved in a call to the
+         *  service API.
+         */
+        downloaded?: boolean;
+        /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
+        serial_number?: string;
+        /** The date that the certificate expires. The date format follows RFC 3339. */
+        expiration_date?: string;
+        validity?: CertificateValidity;
     }
     /** Properties that describe a secret version. */
     interface CertificateSecretVersionMetadata extends SecretVersionMetadata {
-        /** The ID of the secret version. */
+        /** The v4 UUID that uniquely identifies the secret. */
         id?: string;
+        /** The ID of the secret version. */
+        version_id?: string;
         /** The date that the version of the secret was created. */
         creation_date?: string;
         /** The unique identifier for the entity that created the secret version. */
         created_by?: string;
+        /** Indicates whether the payload for the secret version is stored and available. */
+        payload_available?: boolean;
+        /** Indicates whether the secret data that is associated with a secret version was retrieved in a call to the
+         *  service API.
+         */
+        downloaded?: boolean;
         /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
         serial_number?: string;
         /** The date that the certificate expires. The date format follows RFC 3339. */
@@ -1568,16 +1837,24 @@ declare namespace SecretsManagerV1 {
     }
     /** Properties that describe an IBM Cloud classic infrastructure (SoftLayer) configuration. */
     interface ConfigElementDefConfigClassicInfrastructureConfig extends ConfigElementDefConfig {
-        /** The username that is associated with your classic infrastructure account. */
+        /** The username that is associated with your classic infrastructure account.
+         *
+         *  In most cases, your classic infrastructure username is your `<account_id>_<email_address>`. For more
+         *  information, see the [docs](https://cloud.ibm.com/docs/account?topic=account-classic_keys).
+         */
         classic_infrastructure_username: string;
-        /** Your classic infrastructure API key. */
+        /** Your classic infrastructure API key.
+         *
+         *  For information about viewing and accessing your classic infrastructure API key, see the
+         *  [docs](https://cloud.ibm.com/docs/account?topic=account-classic_keys).
+         */
         classic_infrastructure_password: string;
     }
     /** Properties that describe an IBM Cloud Internet Services (CIS) configuration. */
     interface ConfigElementDefConfigCloudInternetServicesConfig extends ConfigElementDefConfig {
         /** The Cloud Resource Name (CRN) that is associated with the CIS instance. */
         cis_crn: string;
-        /** An IBM Cloud API key that has the capability to list domains in your CIS instance.
+        /** An IBM Cloud API key that can to list domains in your CIS instance.
          *
          *  To grant Secrets Manager the ability to view the CIS instance and all of its domains, the API key must be
          *  assigned the Reader service role on Internet Services (`internet-svcs`).
@@ -1592,13 +1869,39 @@ declare namespace SecretsManagerV1 {
     }
     /** Properties that describe a Let's Encrypt configuration. */
     interface ConfigElementDefConfigLetsEncryptConfig extends ConfigElementDefConfig {
-        /** The private key that is associated with your ACME account. */
+        /** The private key that is associated with your Automatic Certificate Management Environment (ACME) account.
+         *
+         *  If you have a working ACME client or account for Let's Encrypt, you can use the existing private key to enable
+         *  communications with Secrets Manager. If you don't have an account yet, you can create one. For more information,
+         *  see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-prepare-order-certificates#create-acme-account).
+         */
         private_key: string;
     }
+    /** Configuration for the IAM credentials engine. */
+    interface CreateIAMCredentialsSecretEngineRootConfig extends EngineConfig {
+        /** An IBM Cloud API key that can create and manage service IDs.
+         *
+         *  The API key must be assigned the Editor platform role on the Access Groups Service and the Operator platform
+         *  role on the IAM Identity Service. For more information, see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-configure-iam-engine).
+         */
+        api_key: string;
+        /** The hash value of the IBM Cloud API key that is used to create and manage service IDs. */
+        api_key_hash?: string;
+    }
     /** Delete the credentials that are associated with an `iam_credentials` secret. */
     interface DeleteCredentialsForIAMCredentialsSecret extends SecretAction {
-        /** The service ID that you want to delete. It is deleted together with its API key. */
-        service_id: string;
+        /** The ID of the API key that you want to delete. If the secret was created with a static service ID, only the
+         *  API key is deleted. Otherwise, the service ID is deleted together with its API key.
+         */
+        api_key_id?: string;
+        /** The service ID that you want to delete. This property can be used instead of the `api_key_id` field, but
+         *  only for secrets that were created with a service ID that was generated by Secrets Manager.
+         *
+         *  **Deprecated.** Use the `api_key_id` field instead.
+         */
+        service_id?: string;
     }
     /** Certificate authorities configuration. */
     interface GetConfigElementsResourcesItemCertificateAuthoritiesConfig extends GetConfigElementsResourcesItem {
@@ -1613,15 +1916,15 @@ declare namespace SecretsManagerV1 {
         /** The metadata that describes the resource array. */
         metadata: CollectionMetadata;
         /** A collection of resources. */
-        resources: GetSecretPolicyRotationResourcesItem[];
+        resources: JsonObject[];
     }
     /** Configuration for the IAM credentials engine. */
     interface IAMCredentialsSecretEngineRootConfig extends GetConfigResourcesItem {
-        /** An IBM Cloud API key that has the capability to create and manage service IDs.
+        /** An IBM Cloud API key that can create and manage service IDs.
          *
          *  The API key must be assigned the Editor platform role on the Access Groups Service and the Operator platform
-         *  role on the IAM Identity Service. For more information, see [Configuring the IAM secrets
-         *  engine](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-iam-credentials#configure-iam-secrets-engine-api).
+         *  role on the IAM Identity Service. For more information, see the
+         *  [docs](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-configure-iam-engine).
          */
         api_key: string;
         /** The hash value of the IBM Cloud API key that is used to create and manage service IDs. */
@@ -1633,8 +1936,9 @@ declare namespace SecretsManagerV1 {
         id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be in the range 2 - 30 characters, including spaces. Special
+         *  characters that are not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe
+         *  character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -1673,18 +1977,30 @@ declare namespace SecretsManagerV1 {
         last_update_date?: string;
         /** The number of versions the secret has. */
         versions_total?: number;
-        /** The time-to-live (TTL) or lease duration to assign to generated credentials.
+        /** Specifies the Time To Live value provided as a string duration with time suffix. */
+        ttl?: string;
+        /** Determines whether to use the same service ID and API key for future read operations on an
+         *  `iam_credentials` secret.
          *
-         *  For `iam_credentials` secrets, the TTL defines for how long each generated API key remains valid. The value can
-         *  be either an integer that specifies the number of seconds, or the string representation of a duration, such as
-         *  `120m` or `24h`.
-         */
-        ttl?: any;
-        /** For `iam_credentials` secrets, this field controls whether to use the same service ID and API key for future
-         *  read operations on this secret. If set to `true`, the service reuses the current credentials. If set to `false`,
-         *  a new service ID and API key is generated each time that the secret is read or accessed.
+         *  If set to `true`, the service reuses the current credentials. If set to `false`, a new service ID and API key
+         *  are generated each time that the secret is read or accessed.
          */
         reuse_api_key?: boolean;
+        /** Indicates whether an `iam_credentials` secret was created with a static service ID.
+         *
+         *  If the value is `true`, the service ID for the secret was provided by the user at secret creation. If the value
+         *  is `false`, the service ID was generated by Secrets Manager.
+         */
+        service_id_is_static?: boolean;
+        /** The service ID under which the API key is created. The service ID is included in the metadata only if the
+         *  secret was created with a static service ID.
+         */
+        service_id?: string;
+        /** The access groups that define the capabilities of the service ID and API key that are generated for an
+         *  `iam_credentials` secret. The access groups are included in the metadata only if the secret was created with a
+         *  service ID that was generated by Secrets Manager.
+         */
+        access_groups?: string[];
     }
     /** Properties that describe a secret. */
     interface IAMCredentialsSecretResource extends SecretResource {
@@ -1708,8 +2024,8 @@ declare namespace SecretsManagerV1 {
         secret_group_id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be 2 - 30 characters, including spaces. Special characters that are
+         *  not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -1741,13 +2057,18 @@ declare namespace SecretsManagerV1 {
          *  For `iam_credentials` secrets, the TTL defines for how long each generated API key remains valid. The value can
          *  be either an integer that specifies the number of seconds, or the string representation of a duration, such as
          *  `120m` or `24h`.
+         *
+         *  Minimum duration is 1 minute. Maximum is 90 days.
          */
         ttl?: any;
         /** The access groups that define the capabilities of the service ID and API key that are generated for an
-         *  `iam_credentials` secret.
+         *  `iam_credentials` secret. If you prefer to use an existing service ID that is already assigned the access
+         *  policies that you require, you can omit this parameter and use the `service_id` field instead.
          *
-         *  **Tip:** To find the ID of an access group, go to **Manage > Access (IAM) > Access groups** in the IBM Cloud
-         *  console. Select the access group to inspect, and click **Details** to view its ID.
+         *  **Tip:** To list the access groups that are available in an account, you can use the [IAM Access Groups
+         *  API](https://cloud.ibm.com/apidocs/iam-access-groups#list-access-groups). To find the ID of an access group in
+         *  the console, go to **Manage > Access (IAM) > Access groups**. Select the access group to inspect, and click
+         *  **Details** to view its ID.
          */
         access_groups?: string[];
         /** The API key that is generated for this secret.
@@ -1756,26 +2077,247 @@ declare namespace SecretsManagerV1 {
          *  you want to continue to use the same API key for future read operations, see the `reuse_api_key` field.
          */
         api_key?: string;
-        /** The service ID under which the API key (see the `api_key` field) is created. This service ID is added to the
-         *  access groups that you assign for this secret.
+        /** The ID of the API key that is generated for this secret. */
+        api_key_id?: string;
+        /** The service ID under which the API key (see the `api_key` field) is created.
+         *
+         *  If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds
+         *  it to the access groups that you assign.
+         *
+         *  Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or
+         *  retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not
+         *  include the `access_groups` parameter.
          */
         service_id?: string;
-        /** Set to `true` to reuse the service ID and API key for this secret.
+        /** Indicates whether an `iam_credentials` secret was created with a static service ID.
+         *
+         *  If `true`, the service ID for the secret was provided by the user at secret creation. If `false`, the service ID
+         *  was generated by Secrets Manager.
+         */
+        service_id_is_static?: boolean;
+        /** Determines whether to use the same service ID and API key for future read operations on an
+         *  `iam_credentials` secret.
          *
-         *  Use this field to control whether to use the same service ID and API key for future read operations on this
-         *  secret. If set to `true`, the service reuses the current credentials. If set to `false`, a new service ID and
-         *  API key is generated each time that the secret is read or accessed.
+         *  If set to `true`, the service reuses the current credentials. If set to `false`, a new service ID and API key
+         *  are generated each time that the secret is read or accessed.
          */
         reuse_api_key?: boolean;
     }
+    /** IAMCredentialsSecretVersion. */
+    interface IAMCredentialsSecretVersion extends SecretVersion {
+        /** The v4 UUID that uniquely identifies the secret. */
+        id?: string;
+        /** The ID of the secret version. */
+        version_id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** The data that is associated with the secret version. The data object contains the following fields:
+         *
+         *  `api_key`: The API key that is generated for this secret.
+         *
+         *  `api_key_id`: The ID of the API key that is generated for this secret.
+         *
+         *  `service_id`: The service ID under which the API key is created.
+         */
+        secret_data?: JsonObject;
+    }
+    /** IAMCredentialsSecretVersionInfo. */
+    interface IAMCredentialsSecretVersionInfo extends SecretVersionInfo {
+        /** The ID of the secret version. */
+        id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** Indicates whether the payload for the secret version is stored and available. */
+        payload_available?: boolean;
+        /** Indicates whether the secret data that is associated with a secret version was retrieved in a call to the
+         *  service API.
+         */
+        downloaded?: boolean;
+    }
     /** Properties that describe a secret version. */
     interface IAMCredentialsSecretVersionMetadata extends SecretVersionMetadata {
-        /** The ID of the secret version. */
+        /** The v4 UUID that uniquely identifies the secret. */
         id?: string;
+        /** The ID of the secret version. */
+        version_id?: string;
         /** The date that the version of the secret was created. */
         creation_date?: string;
         /** The unique identifier for the entity that created the secret version. */
         created_by?: string;
+        /** Indicates whether the payload for the secret version is stored and available. */
+        payload_available?: boolean;
+        /** Indicates whether the secret data that is associated with a secret version was retrieved in a call to the
+         *  service API.
+         */
+        downloaded?: boolean;
+    }
+    /** Metadata properties that describe a key-value secret. */
+    interface KvSecretMetadata extends SecretMetadata {
+        /** The unique ID of the secret. */
+        id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be in the range 2 - 30 characters, including spaces. Special
+         *  characters that are not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe
+         *  character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies the resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
+        created_by?: string;
+        /** Updates when any part of the secret metadata is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The number of versions the secret has. */
+        versions_total?: number;
+    }
+    /** Properties that describe a secret. */
+    interface KvSecretResource extends SecretResource {
+        /** The v4 UUID that uniquely identifies the secret. */
+        id?: string;
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be 2 - 30 characters, including spaces. Special characters that are
+         *  not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies your Secrets Manager resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
+        created_by?: string;
+        /** Updates when the actual secret is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The number of versions that are associated with a secret. */
+        versions_total?: number;
+        /** An array that contains metadata for each secret version. For more information on the metadata properties,
+         *  see [Get secret version metadata](#get-secret-version-metadata).
+         */
+        versions?: JsonObject[];
+        /** The date the secret material expires. The date format follows RFC 3339.
+         *
+         *  You can set an expiration date on supported secret types at their creation. If you create a secret without
+         *  specifying an expiration date, the secret does not expire. The `expiration_date` field is supported for the
+         *  following secret types:
+         *
+         *  - `arbitrary`
+         *  - `username_password`.
+         */
+        expiration_date?: string;
+        /** The new secret data to assign to the secret. */
+        payload?: JsonObject;
+        /** The data that is associated with the secret version.
+         *
+         *  The data object contains the field `payload`.
+         */
+        secret_data?: JsonObject;
+    }
+    /** Metadata properties that describe a private certificate secret. */
+    interface PrivateCertificateSecretMetadata extends SecretMetadata {
+        /** The unique ID of the secret. */
+        id?: string;
+        /** Labels that you can use to filter for secrets in your instance.
+         *
+         *  Up to 30 labels can be created. Labels can be in the range 2 - 30 characters, including spaces. Special
+         *  characters that are not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe
+         *  character (|).
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
+         */
+        labels?: string[];
+        /** A human-readable alias to assign to your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as an alias for your secret.
+         */
+        name: string;
+        /** An extended description of your secret.
+         *
+         *  To protect your privacy, do not use personal data, such as your name or location, as a description for your
+         *  secret.
+         */
+        description?: string;
+        /** The v4 UUID that uniquely identifies the secret group to assign to this secret.
+         *
+         *  If you omit this parameter, your secret is assigned to the `default` secret group.
+         */
+        secret_group_id?: string;
+        /** The secret state based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0,
+         *  Active = 1,  Suspended = 2, Deactivated = 3, and Destroyed = 5 values.
+         */
+        state?: number;
+        /** A text representation of the secret state. */
+        state_description?: string;
+        /** The secret type. */
+        secret_type?: string;
+        /** The Cloud Resource Name (CRN) that uniquely identifies the resource. */
+        crn?: string;
+        /** The date the secret was created. The date format follows RFC 3339. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret. */
+        created_by?: string;
+        /** Updates when any part of the secret metadata is modified. The date format follows RFC 3339. */
+        last_update_date?: string;
+        /** The number of versions the secret has. */
+        versions_total?: number;
     }
     /** Configuration for the public certificates engine. */
     interface PublicCertSecretEngineRootConfig extends GetConfigResourcesItem {
@@ -1785,13 +2327,14 @@ declare namespace SecretsManagerV1 {
         dns_providers?: ConfigElementMetadata[];
     }
     /** Metadata properties that describe a public certificate secret. */
-    interface PublicCertificateMetadataSecretResource extends SecretMetadata {
+    interface PublicCertificateSecretMetadata extends SecretMetadata {
         /** The unique ID of the secret. */
         id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be in the range 2 - 30 characters, including spaces. Special
+         *  characters that are not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe
+         *  character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -1837,8 +2380,8 @@ declare namespace SecretsManagerV1 {
          *  Set to `false` for the certificate file to contain only the issued certificate.
          */
         bundle_certs?: boolean;
-        /** The identifier for the cryptographic algorthim to be used by the issuing certificate authority to sign the
-         *  ceritificate.
+        /** The identifier for the cryptographic algorithm to be used by the issuing certificate authority to sign the
+         *  certificate.
          */
         algorithm?: string;
         /** The identifier for the cryptographic algorithm to be used to generate the public key that is associated with
@@ -1856,6 +2399,9 @@ declare namespace SecretsManagerV1 {
         rotation?: Rotation;
         /** Issuance information that is associated with your certificate. */
         issuance_info?: IssuanceInfo;
+        validity?: CertificateValidity;
+        /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
+        serial_number?: string;
     }
     /** Properties that describe a secret. */
     interface PublicCertificateSecretResource extends SecretResource {
@@ -1879,8 +2425,8 @@ declare namespace SecretsManagerV1 {
         secret_group_id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be 2 - 30 characters, including spaces. Special characters that are
+         *  not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -1924,23 +2470,47 @@ declare namespace SecretsManagerV1 {
          *  To view a list of your configured authorities, use the [List configurations API](#get-secret-config-element).
          */
         dns?: string;
-        /** The identifier for the cryptographic algorthim to be used by the issuing certificate authority to sign the
-         *  ceritificate.
+        /** The identifier for the cryptographic algorithm to be used by the issuing certificate authority to sign the
+         *  certificate.
          */
         algorithm?: string;
         /** The identifier for the cryptographic algorithm to be used to generate the public key that is associated with
          *  the certificate.
+         *
+         *  The algorithm that you select determines the encryption algorithm (`RSA` or `ECDSA`) and key size to be used to
+         *  generate keys and sign certificates. For longer living certificates, it is recommended to use longer keys to
+         *  provide more encryption protection.
          */
         key_algorithm?: string;
         /** The alternative names that are defined for the certificate. */
         alt_names?: string[];
         /** The fully qualified domain name or host domain name for the certificate. */
         common_name?: string;
+        /** Indicates whether the issued certificate includes a private key. */
+        private_key_included?: boolean;
+        /** Indicates whether the issued certificate includes an intermediate certificate. */
+        intermediate_included?: boolean;
         rotation?: Rotation;
         /** Issuance information that is associated with your certificate. */
         issuance_info?: IssuanceInfo;
+        validity?: CertificateValidity;
+        /** The unique serial number that was assigned to the certificate by the issuing certificate authority. */
+        serial_number?: string;
+        /** The data that is associated with the secret. The data object contains the following fields:
+         *
+         *  `certificate`: The contents of the certificate.
+         *
+         *  `private_key`: The private key that is associated with the certificate.
+         *
+         *  `intermediate`: The intermediate certificate that is associated with the certificate.
+         */
         secret_data?: JsonObject;
     }
+    /** The request body of a `restore` action. */
+    interface RestoreIAMCredentialsSecretBody extends SecretAction {
+        /** The ID of the target version or the alias `previous`. */
+        version_id: string;
+    }
     /** The request body of a `rotate` action. */
     interface RotateArbitrarySecretBody extends SecretAction {
         /** The new secret data to assign to an `arbitrary` secret. */
@@ -1956,8 +2526,13 @@ declare namespace SecretsManagerV1 {
         intermediate?: string;
     }
     /** The request body of a `rotate` action. */
+    interface RotateKvSecretBody extends SecretAction {
+        /** The new secret data to assign to a key-value secret. */
+        payload: JsonObject;
+    }
+    /** The request body of a `rotate` action. */
     interface RotatePublicCertBody extends SecretAction {
-        /** Determine whether keys should be rotated. */
+        /** Determine whether keys must be rotated. */
         rotate_keys: boolean;
     }
     /** The request body of a `rotate` action. */
@@ -1976,8 +2551,6 @@ declare namespace SecretsManagerV1 {
     interface SecretPolicyRotationRotationPublicCertPolicyRotation extends SecretPolicyRotationRotation {
         auto_rotate: boolean;
         rotate_keys: boolean;
-        /** Warning response. */
-        warning?: Warning;
     }
     /** Metadata properties that describe a username_password secret. */
     interface UsernamePasswordSecretMetadata extends SecretMetadata {
@@ -1985,8 +2558,9 @@ declare namespace SecretsManagerV1 {
         id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be in the range 2 - 30 characters, including spaces. Special
+         *  characters that are not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe
+         *  character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -2058,8 +2632,8 @@ declare namespace SecretsManagerV1 {
         secret_group_id?: string;
         /** Labels that you can use to filter for secrets in your instance.
          *
-         *  Up to 30 labels can be created. Labels can be between 2-30 characters, including spaces. Special characters not
-         *  permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
+         *  Up to 30 labels can be created. Labels can be 2 - 30 characters, including spaces. Special characters that are
+         *  not permitted include the angled bracket, comma, colon, ampersand, and vertical pipe character (|).
          *
          *  To protect your privacy, do not use personal data, such as your name or location, as a label for your secret.
          */
@@ -2090,6 +2664,12 @@ declare namespace SecretsManagerV1 {
         username?: string;
         /** The password to assign to this secret. */
         password?: string;
+        /** The data that is associated with the secret version. The data object contains the following fields:
+         *
+         *  `username`: The username that is associated with the secret version.
+         *
+         *  `password`: The password that is associated with the secret version.
+         */
         secret_data?: JsonObject;
         /** The date the secret material expires. The date format follows RFC 3339.
          *
@@ -2108,14 +2688,59 @@ declare namespace SecretsManagerV1 {
          */
         next_rotation_date?: string;
     }
+    /** UsernamePasswordSecretVersion. */
+    interface UsernamePasswordSecretVersion extends SecretVersion {
+        /** The v4 UUID that uniquely identifies the secret. */
+        id?: string;
+        /** The ID of the secret version. */
+        version_id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** Indicates whether the version of the secret was created by automatic rotation. */
+        auto_rotated?: boolean;
+        /** The data that is associated with the secret version. The data object contains the following fields:
+         *
+         *  `username`: The username that is associated with the secret version.
+         *
+         *  `password`: The password that is associated with the secret version.
+         */
+        secret_data?: JsonObject;
+    }
+    /** UsernamePasswordSecretVersionInfo. */
+    interface UsernamePasswordSecretVersionInfo extends SecretVersionInfo {
+        /** The ID of the secret version. */
+        id?: string;
+        /** The date that the version of the secret was created. */
+        creation_date?: string;
+        /** The unique identifier for the entity that created the secret version. */
+        created_by?: string;
+        /** Indicates whether the payload for the secret version is stored and available. */
+        payload_available?: boolean;
+        /** Indicates whether the secret data that is associated with a secret version was retrieved in a call to the
+         *  service API.
+         */
+        downloaded?: boolean;
+        /** Indicates whether the version of the secret was created by automatic rotation. */
+        auto_rotated?: boolean;
+    }
     /** Properties that describe a secret version. */
     interface UsernamePasswordSecretVersionMetadata extends SecretVersionMetadata {
-        /** The ID of the secret version. */
+        /** The v4 UUID that uniquely identifies the secret. */
         id?: string;
+        /** The ID of the secret version. */
+        version_id?: string;
         /** The date that the version of the secret was created. */
         creation_date?: string;
         /** The unique identifier for the entity that created the secret version. */
         created_by?: string;
+        /** Indicates whether the payload for the secret version is stored and available. */
+        payload_available?: boolean;
+        /** Indicates whether the secret data that is associated with a secret version was retrieved in a call to the
+         *  service API.
+         */
+        downloaded?: boolean;
         /** Indicates whether the version of the secret was created by automatic rotation. */
         auto_rotated?: boolean;
     }