@pierskarsenbarg/sdm 1.2.0 → 1.3.0

package/types/input.d.ts

@@ -1,4 +1,5 @@
 import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
 export interface AccountService {
     /**
      * Unique human-readable name of the Service.
@@ -58,11 +59,15 @@ export interface NodeGateway {
      */
     bindAddress?: pulumi.Input<string>;
     /**
-     * Device is a read only device name uploaded by the gateway process when  it comes online.
+     * ConnectsTo can be used to restrict the peering between relays and gateways.
+     */
+    connectsTo?: pulumi.Input<string>;
+    /**
+     * Device is a read only device name uploaded by the gateway process when it comes online.
      */
     device?: pulumi.Input<string>;
     /**
-     * GatewayFilter can be used to restrict the peering between relays and gateways.
+     * GatewayFilter can be used to restrict the peering between relays and gateways. Deprecated.
      */
     gatewayFilter?: pulumi.Input<string>;
     /**
@@ -73,6 +78,10 @@ export interface NodeGateway {
      * Location is a read only network location uploaded by the gateway process when it comes online.
      */
     location?: pulumi.Input<string>;
+    /**
+     * Maintenance Windows define when this node is allowed to restart. If a node is requested to restart, it will check each window to determine if any of them permit it to restart, and if any do, it will. This check is repeated per window until the restart is successfully completed.  If not set here, may be set on the command line or via an environment variable on the process itself; any server setting will take precedence over local settings. This setting is ineffective for nodes below version 38.44.0.  If this setting is not applied via this remote configuration or via local configuration, the default setting is used: always allow restarts if serving no connections, and allow a restart even if serving connections between 7-8 UTC, any day.
+     */
+    maintenanceWindows?: pulumi.Input<pulumi.Input<inputs.NodeGatewayMaintenanceWindow>[]>;
     /**
      * Unique human-readable name of the Relay. Node names must include only letters, numbers, and hyphens (no spaces, underscores, or other special characters). Generated if not provided on create.
      */
@@ -89,19 +98,31 @@ export interface NodeGateway {
      */
     version?: pulumi.Input<string>;
 }
+export interface NodeGatewayMaintenanceWindow {
+    cronSchedule: pulumi.Input<string>;
+    requireIdleness: pulumi.Input<boolean>;
+}
 export interface NodeRelay {
     /**
-     * Device is a read only device name uploaded by the gateway process when  it comes online.
+     * ConnectsTo can be used to restrict the peering between relays and gateways.
+     */
+    connectsTo?: pulumi.Input<string>;
+    /**
+     * Device is a read only device name uploaded by the gateway process when it comes online.
      */
     device?: pulumi.Input<string>;
     /**
-     * GatewayFilter can be used to restrict the peering between relays and gateways.
+     * GatewayFilter can be used to restrict the peering between relays and gateways. Deprecated.
      */
     gatewayFilter?: pulumi.Input<string>;
     /**
      * Location is a read only network location uploaded by the gateway process when it comes online.
      */
     location?: pulumi.Input<string>;
+    /**
+     * Maintenance Windows define when this node is allowed to restart. If a node is requested to restart, it will check each window to determine if any of them permit it to restart, and if any do, it will. This check is repeated per window until the restart is successfully completed.  If not set here, may be set on the command line or via an environment variable on the process itself; any server setting will take precedence over local settings. This setting is ineffective for nodes below version 38.44.0.  If this setting is not applied via this remote configuration or via local configuration, the default setting is used: always allow restarts if serving no connections, and allow a restart even if serving connections between 7-8 UTC, any day.
+     */
+    maintenanceWindows?: pulumi.Input<pulumi.Input<inputs.NodeRelayMaintenanceWindow>[]>;
     /**
      * Unique human-readable name of the Relay. Node names must include only letters, numbers, and hyphens (no spaces, underscores, or other special characters). Generated if not provided on create.
      */
@@ -118,13 +139,26 @@ export interface NodeRelay {
      */
     version?: pulumi.Input<string>;
 }
+export interface NodeRelayMaintenanceWindow {
+    cronSchedule: pulumi.Input<string>;
+    requireIdleness: pulumi.Input<boolean>;
+}
 export interface ResourceAks {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The certificate to authenticate TLS connections with.
+     */
     clientCertificate?: pulumi.Input<string>;
+    /**
+     * The key to authenticate TLS connections with.
+     */
     clientKey?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
@@ -134,14 +168,29 @@ export interface ResourceAks {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -160,7 +209,7 @@ export interface ResourceAks {
 }
 export interface ResourceAksBasicAuth {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -171,13 +220,25 @@ export interface ResourceAksBasicAuth {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -193,11 +254,14 @@ export interface ResourceAksBasicAuth {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceAksServiceAccount {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -208,14 +272,29 @@ export interface ResourceAksServiceAccount {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -232,13 +311,14 @@ export interface ResourceAksServiceAccount {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The API token to authenticate with.
      * * kubernetes_user_impersonation:
      */
     token?: pulumi.Input<string>;
 }
 export interface ResourceAksServiceAccountUserImpersonation {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -249,12 +329,21 @@ export interface ResourceAksServiceAccountUserImpersonation {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -271,17 +360,27 @@ export interface ResourceAksServiceAccountUserImpersonation {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The API token to authenticate with.
      * * kubernetes_user_impersonation:
      */
     token?: pulumi.Input<string>;
 }
 export interface ResourceAksUserImpersonation {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The certificate to authenticate TLS connections with.
+     */
     clientCertificate?: pulumi.Input<string>;
+    /**
+     * The key to authenticate TLS connections with.
+     */
     clientKey?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
@@ -291,12 +390,21 @@ export interface ResourceAksUserImpersonation {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -314,17 +422,29 @@ export interface ResourceAksUserImpersonation {
     }>;
 }
 export interface ResourceAmazonEks {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
     accessKey?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The name of the cluster to connect to.
+     */
     clusterName: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
@@ -334,12 +454,33 @@ export interface ResourceAmazonEks {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
+    /**
+     * The Secret Access Key to use to authenticate.
+     */
     secretAccessKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -358,15 +499,24 @@ export interface ResourceAmazonEks {
 }
 export interface ResourceAmazonEksInstanceProfile {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The name of the cluster to connect to.
+     */
     clusterName: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
@@ -376,11 +526,29 @@ export interface ResourceAmazonEksInstanceProfile {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -399,15 +567,24 @@ export interface ResourceAmazonEksInstanceProfile {
 }
 export interface ResourceAmazonEksInstanceProfileUserImpersonation {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The name of the cluster to connect to.
+     */
     clusterName: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
@@ -417,11 +594,29 @@ export interface ResourceAmazonEksInstanceProfileUserImpersonation {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -439,17 +634,29 @@ export interface ResourceAmazonEksInstanceProfileUserImpersonation {
     }>;
 }
 export interface ResourceAmazonEksUserImpersonation {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
     accessKey?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The name of the cluster to connect to.
+     */
     clusterName: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
@@ -459,10 +666,25 @@ export interface ResourceAmazonEksUserImpersonation {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
+    /**
+     * The Secret Access Key to use to authenticate.
+     */
     secretAccessKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -480,24 +702,45 @@ export interface ResourceAmazonEksUserImpersonation {
     }>;
 }
 export interface ResourceAmazonEs {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
     accessKey?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint?: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
+    /**
+     * The Secret Access Key to use to authenticate.
+     */
     secretAccessKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -516,20 +759,32 @@ export interface ResourceAmazonEs {
 }
 export interface ResourceAmazonmqAmqp091 {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -545,14 +800,26 @@ export interface ResourceAmazonmqAmqp091 {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceAthena {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
     accessKey?: pulumi.Input<string>;
+    /**
+     * The AWS S3 output location.
+     */
     athenaOutput: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -563,10 +830,25 @@ export interface ResourceAthena {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region?: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
+    /**
+     * The Secret Access Key to use to authenticate.
+     */
     secretAccessKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -585,22 +867,40 @@ export interface ResourceAthena {
 }
 export interface ResourceAuroraMysql {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
     requireNativeAuth?: pulumi.Input<boolean>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -616,27 +916,51 @@ export interface ResourceAuroraMysql {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
     useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceAuroraPostgres {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -652,26 +976,47 @@ export interface ResourceAuroraPostgres {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceAws {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
     accessKey?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The AWS region healthcheck requests should attempt to connect to.
+     */
     healthcheckRegion: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
+    /**
+     * The Secret Access Key to use to authenticate.
+     */
     secretAccessKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -690,28 +1035,52 @@ export interface ResourceAws {
 }
 export interface ResourceAwsConsole {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * If true, prefer environment variables to authenticate connection even if EC2 roles are configured.
+     */
     enableEnvVariables?: pulumi.Input<boolean>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: pulumi.Input<string>;
+    /**
+     * The length of time in seconds AWS console sessions will live before needing to reauthenticate.
+     */
     sessionExpiry?: pulumi.Input<number>;
     /**
      * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
@@ -725,9 +1094,12 @@ export interface ResourceAwsConsole {
     }>;
 }
 export interface ResourceAwsConsoleStaticKeyPair {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
     accessKey?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -738,17 +1110,41 @@ export interface ResourceAwsConsoleStaticKeyPair {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
+    /**
+     * The Secret Access Key to use to authenticate.
+     */
     secretAccessKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: pulumi.Input<string>;
+    /**
+     * The length of time in seconds AWS console sessions will live before needing to reauthenticate.
+     */
     sessionExpiry?: pulumi.Input<number>;
     /**
      * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
@@ -762,9 +1158,12 @@ export interface ResourceAwsConsoleStaticKeyPair {
     }>;
 }
 export interface ResourceAzure {
+    /**
+     * The application ID to authenticate with.
+     */
     appId?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -775,7 +1174,13 @@ export interface ResourceAzure {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -792,16 +1197,23 @@ export interface ResourceAzure {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The Azure AD directory (tenant) ID with which to authenticate.
      * * sql_server_kerberos_ad:
      */
     tenantId?: pulumi.Input<string>;
 }
 export interface ResourceAzureCertificate {
+    /**
+     * The application ID to authenticate with.
+     */
     appId?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The certificate to authenticate TLS connections with.
+     */
     clientCertificate?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
@@ -811,6 +1223,9 @@ export interface ResourceAzureCertificate {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -827,28 +1242,47 @@ export interface ResourceAzureCertificate {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The Azure AD directory (tenant) ID with which to authenticate.
      * * sql_server_kerberos_ad:
      */
     tenantId?: pulumi.Input<string>;
 }
 export interface ResourceAzureMysql {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
     requireNativeAuth?: pulumi.Input<boolean>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -864,27 +1298,51 @@ export interface ResourceAzureMysql {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
     useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceAzurePostgres {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -900,24 +1358,99 @@ export interface ResourceAzurePostgres {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
+    username?: pulumi.Input<string>;
+}
+export interface ResourceAzurePostgresManagedIdentity {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database: pulumi.Input<string>;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: pulumi.Input<string>;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
+    overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
+    password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: pulumi.Input<number>;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: pulumi.Input<string>;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: pulumi.Input<string>;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
+    useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceBigQuery {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The private key used to authenticate with the server.
+     */
     privateKey?: pulumi.Input<string>;
+    /**
+     * The project to connect to.
+     */
     project: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -933,24 +1466,39 @@ export interface ResourceBigQuery {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceCassandra {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -966,27 +1514,51 @@ export interface ResourceCassandra {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceCitus {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1002,26 +1574,47 @@ export interface ResourceCitus {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceClustrix {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
     requireNativeAuth?: pulumi.Input<boolean>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1037,27 +1630,51 @@ export interface ResourceClustrix {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
     useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceCockroach {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1073,24 +1690,39 @@ export interface ResourceCockroach {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceDb2I {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1106,26 +1738,47 @@ export interface ResourceDb2I {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceDb2Luw {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1141,25 +1794,43 @@ export interface ResourceDb2Luw {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceDocumentDbHost {
+    /**
+     * The authentication database to use.
+     */
     authDatabase: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1175,26 +1846,47 @@ export interface ResourceDocumentDbHost {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceDocumentDbReplicaSet {
+    /**
+     * The authentication database to use.
+     */
     authDatabase: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * Set to connect to a replica instead of the primary node.
+     */
     connectToReplica?: pulumi.Input<boolean>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The name of the mongo replicaset.
+     */
     replicaSet: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1210,24 +1902,39 @@ export interface ResourceDocumentDbReplicaSet {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceDruid {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1243,27 +1950,51 @@ export interface ResourceDruid {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceDynamoDb {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
     accessKey?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
+    /**
+     * The Secret Access Key to use to authenticate.
+     */
     secretAccessKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1282,20 +2013,32 @@ export interface ResourceDynamoDb {
 }
 export interface ResourceElastic {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1311,25 +2054,43 @@ export interface ResourceElastic {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceElasticacheRedis {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1345,24 +2106,39 @@ export interface ResourceElasticacheRedis {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceGcp {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The service account keyfile to authenticate with.
+     */
     keyfile?: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Space separated scopes that this login should assume into when authenticating.
+     */
     scopes: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1381,14 +2157,20 @@ export interface ResourceGcp {
 }
 export interface ResourceGoogleGke {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
@@ -1398,12 +2180,21 @@ export interface ResourceGoogleGke {
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: pulumi.Input<string>;
+    /**
+     * The service account key to authenticate with.
+     */
     serviceAccountKey?: pulumi.Input<string>;
     /**
      * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
@@ -1418,14 +2209,20 @@ export interface ResourceGoogleGke {
 }
 export interface ResourceGoogleGkeUserImpersonation {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
@@ -1439,6 +2236,9 @@ export interface ResourceGoogleGkeUserImpersonation {
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: pulumi.Input<string>;
+    /**
+     * The service account key to authenticate with.
+     */
     serviceAccountKey?: pulumi.Input<string>;
     /**
      * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
@@ -1453,22 +2253,40 @@ export interface ResourceGoogleGkeUserImpersonation {
 }
 export interface ResourceGreenplum {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1484,21 +2302,39 @@ export interface ResourceGreenplum {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceHttpAuth {
+    /**
+     * The content to set as the authorization header.
+     */
     authHeader?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * Automatically redirect to this path upon connecting.
+     */
     defaultPath?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * Header names (e.g. Authorization), to omit from logs.
+     */
     headersBlacklist?: pulumi.Input<string>;
+    /**
+     * This path will be used to check the health of your site.
+     */
     healthcheckPath: pulumi.Input<string>;
+    /**
+     * The host header will be overwritten with this field if provided.
+     */
     hostOverride?: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
@@ -1519,27 +2355,43 @@ export interface ResourceHttpAuth {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The base address of your website without the path.
      * * kubernetes:
      */
     url: pulumi.Input<string>;
 }
 export interface ResourceHttpBasicAuth {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * Automatically redirect to this path upon connecting.
+     */
     defaultPath?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * Header names (e.g. Authorization), to omit from logs.
+     */
     headersBlacklist?: pulumi.Input<string>;
+    /**
+     * This path will be used to check the health of your site.
+     */
     healthcheckPath: pulumi.Input<string>;
+    /**
+     * The host header will be overwritten with this field if provided.
+     */
     hostOverride?: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1556,23 +2408,39 @@ export interface ResourceHttpBasicAuth {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The base address of your website without the path.
      * * kubernetes:
      */
     url: pulumi.Input<string>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceHttpNoAuth {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * Automatically redirect to this path upon connecting.
+     */
     defaultPath?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * Header names (e.g. Authorization), to omit from logs.
+     */
     headersBlacklist?: pulumi.Input<string>;
+    /**
+     * This path will be used to check the health of your site.
+     */
     healthcheckPath: pulumi.Input<string>;
+    /**
+     * The host header will be overwritten with this field if provided.
+     */
     hostOverride?: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
@@ -1593,17 +2461,27 @@ export interface ResourceHttpNoAuth {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The base address of your website without the path.
      * * kubernetes:
      */
     url: pulumi.Input<string>;
 }
 export interface ResourceKubernetes {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The certificate to authenticate TLS connections with.
+     */
     clientCertificate?: pulumi.Input<string>;
+    /**
+     * The key to authenticate TLS connections with.
+     */
     clientKey?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
@@ -1613,14 +2491,29 @@ export interface ResourceKubernetes {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1639,7 +2532,7 @@ export interface ResourceKubernetes {
 }
 export interface ResourceKubernetesBasicAuth {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -1650,13 +2543,25 @@ export interface ResourceKubernetesBasicAuth {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1672,11 +2577,14 @@ export interface ResourceKubernetesBasicAuth {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceKubernetesServiceAccount {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -1687,14 +2595,29 @@ export interface ResourceKubernetesServiceAccount {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1711,13 +2634,14 @@ export interface ResourceKubernetesServiceAccount {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The API token to authenticate with.
      * * kubernetes_user_impersonation:
      */
     token?: pulumi.Input<string>;
 }
 export interface ResourceKubernetesServiceAccountUserImpersonation {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
@@ -1728,12 +2652,21 @@ export interface ResourceKubernetesServiceAccountUserImpersonation {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1750,17 +2683,27 @@ export interface ResourceKubernetesServiceAccountUserImpersonation {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The API token to authenticate with.
      * * kubernetes_user_impersonation:
      */
     token?: pulumi.Input<string>;
 }
 export interface ResourceKubernetesUserImpersonation {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The certificate to authenticate TLS connections with.
+     */
     clientCertificate?: pulumi.Input<string>;
+    /**
+     * The key to authenticate TLS connections with.
+     */
     clientKey?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
@@ -1770,12 +2713,21 @@ export interface ResourceKubernetesUserImpersonation {
      * The path used to check the health of your connection.  Defaults to `default`.  This field is required, and is only marked as optional for backwards compatibility.
      */
     healthcheckNamespace?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1794,22 +2746,40 @@ export interface ResourceKubernetesUserImpersonation {
 }
 export interface ResourceMaria {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
     requireNativeAuth?: pulumi.Input<boolean>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1825,24 +2795,39 @@ export interface ResourceMaria {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
     useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMemcached {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1861,22 +2846,40 @@ export interface ResourceMemcached {
 }
 export interface ResourceMemsql {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
     requireNativeAuth?: pulumi.Input<boolean>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1892,26 +2895,47 @@ export interface ResourceMemsql {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
     useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMongoHost {
+    /**
+     * The authentication database to use.
+     */
     authDatabase: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1927,27 +2951,51 @@ export interface ResourceMongoHost {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMongoLegacyHost {
+    /**
+     * The authentication database to use.
+     */
     authDatabase: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The name of the mongo replicaset.
+     */
     replicaSet?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -1963,28 +3011,55 @@ export interface ResourceMongoLegacyHost {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMongoLegacyReplicaset {
+    /**
+     * The authentication database to use.
+     */
     authDatabase: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * Set to connect to a replica instead of the primary node.
+     */
     connectToReplica?: pulumi.Input<boolean>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The name of the mongo replicaset.
+     */
     replicaSet: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2000,28 +3075,55 @@ export interface ResourceMongoLegacyReplicaset {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMongoReplicaSet {
+    /**
+     * The authentication database to use.
+     */
     authDatabase: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * Set to connect to a replica instead of the primary node.
+     */
     connectToReplica?: pulumi.Input<boolean>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The name of the mongo replicaset.
+     */
     replicaSet: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2037,25 +3139,43 @@ export interface ResourceMongoReplicaSet {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMongoShardedCluster {
+    /**
+     * The authentication database to use.
+     */
     authDatabase: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2071,35 +3191,71 @@ export interface ResourceMongoShardedCluster {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMtlsMysql {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The certificate to authenticate TLS connections with.
+     */
     clientCertificate?: pulumi.Input<string>;
+    /**
+     * The key to authenticate TLS connections with.
+     */
     clientKey?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
     requireNativeAuth?: pulumi.Input<boolean>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: pulumi.Input<string>;
+    /**
+     * Server name for TLS verification (unverified by StrongDM if empty)
+     */
     serverName?: pulumi.Input<string>;
     /**
      * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
@@ -2111,35 +3267,71 @@ export interface ResourceMtlsMysql {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
     useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMtlsPostgres {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The CA to authenticate TLS connections with.
+     */
     certificateAuthority?: pulumi.Input<string>;
+    /**
+     * The certificate to authenticate TLS connections with.
+     */
     clientCertificate?: pulumi.Input<string>;
+    /**
+     * The key to authenticate TLS connections with.
+     */
     clientKey?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: pulumi.Input<string>;
+    /**
+     * Server name for TLS verification (unverified by StrongDM if empty)
+     */
     serverName?: pulumi.Input<string>;
     /**
      * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
@@ -2151,26 +3343,47 @@ export interface ResourceMtlsPostgres {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceMysql {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
     requireNativeAuth?: pulumi.Input<boolean>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2186,24 +3399,39 @@ export interface ResourceMysql {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
     useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceNeptune {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2221,25 +3449,49 @@ export interface ResourceNeptune {
     }>;
 }
 export interface ResourceNeptuneIam {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
     accessKey?: pulumi.Input<string>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
     endpoint: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The AWS region to connect to.
+     */
     region: pulumi.Input<string>;
+    /**
+     * The role to assume after logging in.
+     */
     roleArn?: pulumi.Input<string>;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
     roleExternalId?: pulumi.Input<string>;
+    /**
+     * The Secret Access Key to use to authenticate.
+     */
     secretAccessKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2258,21 +3510,36 @@ export interface ResourceNeptuneIam {
 }
 export interface ResourceOracle {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2288,27 +3555,51 @@ export interface ResourceOracle {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourcePostgres {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2324,25 +3615,43 @@ export interface ResourcePostgres {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourcePresto {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2358,25 +3667,43 @@ export interface ResourcePresto {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceRabbitmqAmqp091 {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2392,24 +3719,39 @@ export interface ResourceRabbitmqAmqp091 {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceRawTcp {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2428,21 +3770,36 @@ export interface ResourceRawTcp {
 }
 export interface ResourceRdp {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * When set, network level authentication will not be used. May resolve unexpected authentication errors to older servers. When set, healthchecks cannot detect if a provided username / password pair is correct.
+     */
     downgradeNlaConnections?: pulumi.Input<boolean>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2458,24 +3815,39 @@ export interface ResourceRdp {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceRedis {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2491,27 +3863,51 @@ export interface ResourceRedis {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
     tlsRequired?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceRedshift {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2527,26 +3923,47 @@ export interface ResourceRedshift {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSingleStore {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
     requireNativeAuth?: pulumi.Input<boolean>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2562,26 +3979,47 @@ export interface ResourceSingleStore {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
     useAzureSingleServerUsernames?: pulumi.Input<boolean>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSnowflake {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The Schema to use to direct initial requests.
+     */
     schema?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2597,23 +4035,35 @@ export interface ResourceSnowflake {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSnowsight {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The StrongDM user email to use for healthchecks.
+     */
     healthcheckUsername: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The Metadata for your snowflake IDP integration
+     */
     samlMetadata?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2632,23 +4082,44 @@ export interface ResourceSnowsight {
 }
 export interface ResourceSqlServer {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The Schema to use to direct initial requests.
+     */
     schema?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2664,28 +4135,55 @@ export interface ResourceSqlServer {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSqlServerAzureAd {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The Azure AD application (client) ID with which to authenticate.
+     */
     clientId?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The Schema to use to direct initial requests.
+     */
     schema?: pulumi.Input<string>;
+    /**
+     * The Azure AD client secret (application password) with which to authenticate.
+     */
     secret?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2702,36 +4200,67 @@ export interface ResourceSqlServerAzureAd {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The Azure AD directory (tenant) ID with which to authenticate.
      * * sql_server_kerberos_ad:
      */
     tenantId?: pulumi.Input<string>;
 }
 export interface ResourceSqlServerKerberosAd {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
+    /**
+     * The keytab file in base64 format containing an entry with the principal name (username@realm) and key version number with which to authenticate.
+     */
     keytab?: pulumi.Input<string>;
+    /**
+     * The Kerberos 5 configuration file (krb5.conf) specifying the Active Directory server (KDC) for the configured realm.
+     */
     krbConfig?: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
     overrideDatabase?: pulumi.Input<boolean>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The Active Directory domain (realm) to which the configured username belongs.
+     */
     realm?: pulumi.Input<string>;
+    /**
+     * The Schema to use to direct initial requests.
+     */
     schema?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: pulumi.Input<string>;
+    /**
+     * The Service Principal Name of the Microsoft SQL Server instance in Active Directory.
+     */
     serverSpn?: pulumi.Input<string>;
     /**
      * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
@@ -2743,27 +4272,51 @@ export interface ResourceSqlServerKerberosAd {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSsh {
+    /**
+     * Whether deprecated, insecure key exchanges are allowed for use to connect to the target ssh server.
+     */
     allowDeprecatedKeyExchanges?: pulumi.Input<boolean>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
+    /**
+     * The key type to use e.g. rsa-2048 or ed25519
+     */
     keyType?: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * Whether port forwarding is allowed through this server.
+     */
     portForwarding?: pulumi.Input<boolean>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The public key to append to a server's authorized keys. This will be generated after resource creation.
+     */
     publicKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2779,28 +4332,55 @@ export interface ResourceSsh {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSshCert {
+    /**
+     * Whether deprecated, insecure key exchanges are allowed for use to connect to the target ssh server.
+     */
     allowDeprecatedKeyExchanges?: pulumi.Input<boolean>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
+    /**
+     * The key type to use e.g. rsa-2048 or ed25519
+     */
     keyType?: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * Whether port forwarding is allowed through this server.
+     */
     portForwarding?: pulumi.Input<boolean>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The ID of the remote identity group to use for remote identity connections.
+     */
     remoteIdentityGroupId?: pulumi.Input<string>;
+    /**
+     * The username to use for healthchecks, when clients otherwise connect with their own remote identity username.
+     */
     remoteIdentityHealthcheckUsername?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2816,26 +4396,47 @@ export interface ResourceSshCert {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSshCustomerKey {
+    /**
+     * Whether deprecated, insecure key exchanges are allowed for use to connect to the target ssh server.
+     */
     allowDeprecatedKeyExchanges?: pulumi.Input<boolean>;
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port: pulumi.Input<number>;
+    /**
+     * Whether port forwarding is allowed through this server.
+     */
     portForwarding?: pulumi.Input<boolean>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
+    /**
+     * The private key used to authenticate with the server.
+     */
     privateKey?: pulumi.Input<string>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2851,24 +4452,39 @@ export interface ResourceSshCustomerKey {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSybase {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2884,24 +4500,39 @@ export interface ResourceSybase {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceSybaseIq {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2917,24 +4548,39 @@ export interface ResourceSybaseIq {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceTeradata {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2950,25 +4596,43 @@ export interface ResourceTeradata {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface ResourceTrino {
     /**
-     * Bind interface
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: pulumi.Input<string>;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
     database: pulumi.Input<string>;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: pulumi.Input<string>;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
     hostname: pulumi.Input<string>;
     /**
      * Unique human-readable name of the Resource.
      */
     name: pulumi.Input<string>;
+    /**
+     * The password to authenticate with.
+     */
     password?: pulumi.Input<string>;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
     port?: pulumi.Input<number>;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
     portOverride?: pulumi.Input<number>;
     /**
      * ID of the secret store containing credentials for this resource, if any.
@@ -2984,6 +4648,9 @@ export interface ResourceTrino {
     tags?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
     }>;
+    /**
+     * The username to authenticate with.
+     */
     username?: pulumi.Input<string>;
 }
 export interface SecretStoreAws {
@@ -2991,6 +4658,9 @@ export interface SecretStoreAws {
      * Unique human-readable name of the SecretStore.
      */
     name: pulumi.Input<string>;
+    /**
+     * The AWS region to target e.g. us-east-1
+     */
     region: pulumi.Input<string>;
     /**
      * Tags is a map of key, value pairs.
@@ -3011,11 +4681,15 @@ export interface SecretStoreAzureStore {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The URI of the key vault to target e.g. https://myvault.vault.azure.net
      * * cyberark_conjur:
      */
     vaultUri: pulumi.Input<string>;
 }
 export interface SecretStoreCyberarkConjur {
+    /**
+     * The URL of the Cyberark instance
+     */
     appUrl: pulumi.Input<string>;
     /**
      * Unique human-readable name of the SecretStore.
@@ -3029,6 +4703,9 @@ export interface SecretStoreCyberarkConjur {
     }>;
 }
 export interface SecretStoreCyberarkPam {
+    /**
+     * The URL of the Cyberark instance
+     */
     appUrl: pulumi.Input<string>;
     /**
      * Unique human-readable name of the SecretStore.
@@ -3042,6 +4719,9 @@ export interface SecretStoreCyberarkPam {
     }>;
 }
 export interface SecretStoreCyberarkPamExperimental {
+    /**
+     * The URL of the Cyberark instance
+     */
     appUrl: pulumi.Input<string>;
     /**
      * Unique human-readable name of the SecretStore.
@@ -3059,6 +4739,9 @@ export interface SecretStoreDelineaStore {
      * Unique human-readable name of the SecretStore.
      */
     name: pulumi.Input<string>;
+    /**
+     * The URL of the Delinea instance
+     */
     serverUrl?: pulumi.Input<string>;
     /**
      * Tags is a map of key, value pairs.
@@ -3067,6 +4750,7 @@ export interface SecretStoreDelineaStore {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
+     * The tenant name to target
      * * gcp_store:
      */
     tenantName?: pulumi.Input<string>;
@@ -3076,6 +4760,9 @@ export interface SecretStoreGcpStore {
      * Unique human-readable name of the SecretStore.
      */
     name: pulumi.Input<string>;
+    /**
+     * The GCP project ID to target.
+     */
     projectId: pulumi.Input<string>;
     /**
      * Tags is a map of key, value pairs.
@@ -3089,7 +4776,13 @@ export interface SecretStoreVaultApprole {
      * Unique human-readable name of the SecretStore.
      */
     name: pulumi.Input<string>;
+    /**
+     * The namespace to make requests within
+     */
     namespace?: pulumi.Input<string>;
+    /**
+     * The URL of the Vault to target
+     */
     serverAddress: pulumi.Input<string>;
     /**
      * Tags is a map of key, value pairs.
@@ -3099,14 +4792,29 @@ export interface SecretStoreVaultApprole {
     }>;
 }
 export interface SecretStoreVaultTls {
+    /**
+     * A path to a CA file accessible by a Node
+     */
     caCertPath?: pulumi.Input<string>;
+    /**
+     * A path to a client certificate file accessible by a Node
+     */
     clientCertPath: pulumi.Input<string>;
+    /**
+     * A path to a client key file accessible by a Node
+     */
     clientKeyPath: pulumi.Input<string>;
     /**
      * Unique human-readable name of the SecretStore.
      */
     name: pulumi.Input<string>;
+    /**
+     * The namespace to make requests within
+     */
     namespace?: pulumi.Input<string>;
+    /**
+     * The URL of the Vault to target
+     */
     serverAddress: pulumi.Input<string>;
     /**
      * Tags is a map of key, value pairs.
@@ -3120,7 +4828,13 @@ export interface SecretStoreVaultToken {
      * Unique human-readable name of the SecretStore.
      */
     name: pulumi.Input<string>;
+    /**
+     * The namespace to make requests within
+     */
     namespace?: pulumi.Input<string>;
+    /**
+     * The URL of the Vault to target
+     */
     serverAddress: pulumi.Input<string>;
     /**
      * Tags is a map of key, value pairs.