@pierskarsenbarg/sdm 1.23.1 → 1.24.0

package/types/output.d.ts

@@ -508,7 +508,9 @@ export interface GetResourceResource {
     amazonEksUserImpersonations: outputs.GetResourceResourceAmazonEksUserImpersonation[];
     amazonEs: outputs.GetResourceResourceAmazonE[];
     amazonmqAmqp091s: outputs.GetResourceResourceAmazonmqAmqp091[];
+    athenaIams: outputs.GetResourceResourceAthenaIam[];
     athenas: outputs.GetResourceResourceAthena[];
+    auroraMysqlIams: outputs.GetResourceResourceAuroraMysqlIam[];
     auroraMysqls: outputs.GetResourceResourceAuroraMysql[];
     auroraPostgres: outputs.GetResourceResourceAuroraPostgre[];
     auroraPostgresIams: outputs.GetResourceResourceAuroraPostgresIam[];
@@ -524,15 +526,20 @@ export interface GetResourceResource {
     bigQueries: outputs.GetResourceResourceBigQuery[];
     cassandras: outputs.GetResourceResourceCassandra[];
     cituses: outputs.GetResourceResourceCitus[];
+    clickHouseHttps: outputs.GetResourceResourceClickHouseHttp[];
+    clickHouseMySqls: outputs.GetResourceResourceClickHouseMySql[];
+    clickHouseTcps: outputs.GetResourceResourceClickHouseTcp[];
     clustrixes: outputs.GetResourceResourceClustrix[];
     cockroaches: outputs.GetResourceResourceCockroach[];
     couchbaseDatabases: outputs.GetResourceResourceCouchbaseDatabase[];
     couchbaseWebUis: outputs.GetResourceResourceCouchbaseWebUi[];
     db2Is: outputs.GetResourceResourceDb2I[];
     db2Luws: outputs.GetResourceResourceDb2Luw[];
+    documentDbHostIams: outputs.GetResourceResourceDocumentDbHostIam[];
     documentDbHosts: outputs.GetResourceResourceDocumentDbHost[];
     documentDbReplicaSets: outputs.GetResourceResourceDocumentDbReplicaSet[];
     druids: outputs.GetResourceResourceDruid[];
+    dynamoDbiams: outputs.GetResourceResourceDynamoDbiam[];
     dynamoDbs: outputs.GetResourceResourceDynamoDb[];
     elasticacheRedis: outputs.GetResourceResourceElasticacheRedi[];
     elastics: outputs.GetResourceResourceElastic[];
@@ -1446,6 +1453,62 @@ export interface GetResourceResourceAthena {
         [key: string]: string;
     };
 }
+export interface GetResourceResourceAthenaIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The AWS S3 output location.
+     */
+    output?: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region?: string;
+    /**
+     * The role to assume after logging in.
+     */
+    roleArn?: string;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
+    roleExternalId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
 export interface GetResourceResourceAuroraMysql {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -1514,6 +1577,70 @@ export interface GetResourceResourceAuroraMysql {
      */
     username?: string;
 }
+export interface GetResourceResourceAuroraMysqlIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region?: string;
+    /**
+     * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role.
+     */
+    roleAssumptionArn?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface GetResourceResourceAuroraPostgre {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -2388,7 +2515,7 @@ export interface GetResourceResourceCitus {
      */
     username?: string;
 }
-export interface GetResourceResourceClustrix {
+export interface GetResourceResourceClickHouseHttp {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -2401,10 +2528,6 @@ export interface GetResourceResourceClustrix {
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: string;
-    /**
-     * The host to dial to initiate a connection from the egress node to this resource.
-     */
-    hostname?: string;
     /**
      * Unique identifier of the Resource.
      */
@@ -2417,10 +2540,6 @@ export interface GetResourceResourceClustrix {
      * The password to authenticate with.
      */
     password?: string;
-    /**
-     * The port to dial to initiate a connection from the egress node to this resource.
-     */
-    port?: number;
     /**
      * The local port used by clients to connect to this resource.
      */
@@ -2429,18 +2548,10 @@ export interface GetResourceResourceClustrix {
      * ID of the proxy cluster for this resource, if any.
      */
     proxyClusterId?: string;
-    /**
-     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
-     */
-    requireNativeAuth?: boolean;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: string;
-    /**
-     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
-     */
-    subdomain?: string;
     /**
      * Tags is a map of key, value pairs.
      */
@@ -2448,15 +2559,16 @@ export interface GetResourceResourceClustrix {
         [key: string]: string;
     };
     /**
-     * If true, appends the hostname to the username when hitting a database.azure.com address
+     * The base address of your website without the path.
+     * * kubernetes:
      */
-    useAzureSingleServerUsernames?: boolean;
+    url?: string;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface GetResourceResourceCockroach {
+export interface GetResourceResourceClickHouseMySql {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -2481,10 +2593,6 @@ export interface GetResourceResourceCockroach {
      * Unique human-readable name of the Resource.
      */
     name?: string;
-    /**
-     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
-     */
-    overrideDatabase?: boolean;
     /**
      * The password to authenticate with.
      */
@@ -2501,6 +2609,10 @@ export interface GetResourceResourceCockroach {
      * ID of the proxy cluster for this resource, if any.
      */
     proxyClusterId?: string;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
+    requireNativeAuth?: boolean;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
@@ -2520,11 +2632,15 @@ export interface GetResourceResourceCockroach {
      */
     username?: string;
 }
-export interface GetResourceResourceCouchbaseDatabase {
+export interface GetResourceResourceClickHouseTcp {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -2537,10 +2653,6 @@ export interface GetResourceResourceCouchbaseDatabase {
      * Unique identifier of the Resource.
      */
     id?: string;
-    /**
-     * The port number for N1QL queries. Default HTTP is 8093. Default HTTPS is 18093.
-     */
-    n1QlPort?: number;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -2584,15 +2696,23 @@ export interface GetResourceResourceCouchbaseDatabase {
      */
     username?: string;
 }
-export interface GetResourceResourceCouchbaseWebUi {
+export interface GetResourceResourceClustrix {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
     /**
      * Unique identifier of the Resource.
      */
@@ -2605,6 +2725,10 @@ export interface GetResourceResourceCouchbaseWebUi {
      * The password to authenticate with.
      */
     password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
     /**
      * The local port used by clients to connect to this resource.
      */
@@ -2613,6 +2737,10 @@ export interface GetResourceResourceCouchbaseWebUi {
      * ID of the proxy cluster for this resource, if any.
      */
     proxyClusterId?: string;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
+    requireNativeAuth?: boolean;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
@@ -2628,20 +2756,23 @@ export interface GetResourceResourceCouchbaseWebUi {
         [key: string]: string;
     };
     /**
-     * The base address of your website without the path.
-     * * kubernetes:
+     * If true, appends the hostname to the username when hitting a database.azure.com address
      */
-    url?: string;
+    useAzureSingleServerUsernames?: boolean;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface GetResourceResourceDb2I {
+export interface GetResourceResourceCockroach {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -2658,6 +2789,10 @@ export interface GetResourceResourceDb2I {
      * Unique human-readable name of the Resource.
      */
     name?: string;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
+    overrideDatabase?: boolean;
     /**
      * The password to authenticate with.
      */
@@ -2688,24 +2823,16 @@ export interface GetResourceResourceDb2I {
     tags?: {
         [key: string]: string;
     };
-    /**
-     * If set, TLS must be used to connect to this resource.
-     */
-    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface GetResourceResourceDb2Luw {
+export interface GetResourceResourceCouchbaseDatabase {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: string;
-    /**
-     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
-     */
-    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -2718,6 +2845,10 @@ export interface GetResourceResourceDb2Luw {
      * Unique identifier of the Resource.
      */
     id?: string;
+    /**
+     * The port number for N1QL queries. Default HTTP is 8093. Default HTTPS is 18093.
+     */
+    n1QlPort?: number;
     /**
      * Unique human-readable name of the Resource.
      */
@@ -2752,16 +2883,16 @@ export interface GetResourceResourceDb2Luw {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface GetResourceResourceDocumentDbHost {
-    /**
-     * The authentication database to use.
-     */
-    authDatabase?: string;
+export interface GetResourceResourceCouchbaseWebUi {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -2770,10 +2901,6 @@ export interface GetResourceResourceDocumentDbHost {
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: string;
-    /**
-     * The host to dial to initiate a connection from the egress node to this resource.
-     */
-    hostname?: string;
     /**
      * Unique identifier of the Resource.
      */
@@ -2786,10 +2913,6 @@ export interface GetResourceResourceDocumentDbHost {
      * The password to authenticate with.
      */
     password?: string;
-    /**
-     * The port to dial to initiate a connection from the egress node to this resource.
-     */
-    port?: number;
     /**
      * The local port used by clients to connect to this resource.
      */
@@ -2812,24 +2935,21 @@ export interface GetResourceResourceDocumentDbHost {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * The base address of your website without the path.
+     * * kubernetes:
+     */
+    url?: string;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface GetResourceResourceDocumentDbReplicaSet {
-    /**
-     * The authentication database to use.
-     */
-    authDatabase?: string;
+export interface GetResourceResourceDb2I {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: string;
-    /**
-     * Set to connect to a replica instead of the primary node.
-     */
-    connectToReplica?: boolean;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -2850,6 +2970,10 @@ export interface GetResourceResourceDocumentDbReplicaSet {
      * The password to authenticate with.
      */
     password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
     /**
      * The local port used by clients to connect to this resource.
      */
@@ -2858,10 +2982,6 @@ export interface GetResourceResourceDocumentDbReplicaSet {
      * ID of the proxy cluster for this resource, if any.
      */
     proxyClusterId?: string;
-    /**
-     * The name of the mongo replicaset.
-     */
-    replicaSet?: string;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
@@ -2876,12 +2996,252 @@ export interface GetResourceResourceDocumentDbReplicaSet {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface GetResourceResourceDruid {
+export interface GetResourceResourceDb2Luw {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
+export interface GetResourceResourceDocumentDbHost {
+    /**
+     * The authentication database to use.
+     */
+    authDatabase?: string;
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
+export interface GetResourceResourceDocumentDbHostIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
+export interface GetResourceResourceDocumentDbReplicaSet {
+    /**
+     * The authentication database to use.
+     */
+    authDatabase?: string;
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * Set to connect to a replica instead of the primary node.
+     */
+    connectToReplica?: boolean;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The name of the mongo replicaset.
+     */
+    replicaSet?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
+export interface GetResourceResourceDruid {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -3001,6 +3361,62 @@ export interface GetResourceResourceDynamoDb {
         [key: string]: string;
     };
 }
+export interface GetResourceResourceDynamoDbiam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
+    endpoint?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region?: string;
+    /**
+     * The role to assume after logging in.
+     */
+    roleArn?: string;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
+    roleExternalId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
 export interface GetResourceResourceElastic {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -7205,6 +7621,14 @@ export interface GetWorkflowRoleWorkflowRole {
     workflowId?: string;
 }
 export interface GetWorkflowWorkflow {
+    /**
+     * Fixed Duration of access requests bound to this workflow. If fixed duration is provided, max duration must be empty. If neither max nor fixed duration are provided, requests that bind to this workflow will use the organization-level settings.
+     */
+    accessRequestFixedDuration?: string;
+    /**
+     * Maximum Duration of access requests bound to this workflow. If max duration is provided, fixed duration must be empty. If neither max nor fixed duration are provided, requests that bind to this workflow will use the organization-level settings.
+     */
+    accessRequestMaxDuration?: string;
     /**
      * AccessRules is a list of access rules defining the resources this Workflow provides access to.
      */
@@ -8062,15 +8486,83 @@ export interface ResourceAmazonmqAmqp091 {
     /**
      * The port to dial to initiate a connection from the egress node to this resource.
      */
-    port?: number;
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
+export interface ResourceAthena {
+    /**
+     * The Access Key ID to use to authenticate.
+     */
+    accessKey?: string;
+    /**
+     * The AWS S3 output location.
+     */
+    athenaOutput: string;
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region?: string;
+    /**
+     * The role to assume after logging in.
+     */
+    roleArn?: string;
     /**
-     * The local port used by clients to connect to this resource.
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
      */
-    portOverride: number;
+    roleExternalId?: string;
     /**
-     * ID of the proxy cluster for this resource, if any.
+     * The Secret Access Key to use to authenticate.
      */
-    proxyClusterId?: string;
+    secretAccessKey?: string;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
@@ -8085,24 +8577,8 @@ export interface ResourceAmazonmqAmqp091 {
     tags?: {
         [key: string]: string;
     };
-    /**
-     * If set, TLS must be used to connect to this resource.
-     */
-    tlsRequired?: boolean;
-    /**
-     * The username to authenticate with.
-     */
-    username?: string;
 }
-export interface ResourceAthena {
-    /**
-     * The Access Key ID to use to authenticate.
-     */
-    accessKey?: string;
-    /**
-     * The AWS S3 output location.
-     */
-    athenaOutput: string;
+export interface ResourceAthenaIam {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -8115,6 +8591,10 @@ export interface ResourceAthena {
      * Unique human-readable name of the Resource.
      */
     name: string;
+    /**
+     * The AWS S3 output location.
+     */
+    output: string;
     /**
      * The local port used by clients to connect to this resource.
      */
@@ -8135,10 +8615,6 @@ export interface ResourceAthena {
      * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
      */
     roleExternalId?: string;
-    /**
-     * The Secret Access Key to use to authenticate.
-     */
-    secretAccessKey?: string;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
@@ -8218,6 +8694,66 @@ export interface ResourceAuroraMysql {
      */
     username?: string;
 }
+export interface ResourceAuroraMysqlIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region: string;
+    /**
+     * If provided, the gateway/relay will try to assume this role instead of the underlying compute's role.
+     */
+    roleAssumptionArn?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface ResourceAuroraPostgres {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -8626,32 +9162,217 @@ export interface ResourceAzure {
         [key: string]: string;
     };
     /**
-     * The Azure AD directory (tenant) ID with which to authenticate.
-     * * sql_server_kerberos_ad:
+     * The Azure AD directory (tenant) ID with which to authenticate.
+     * * sql_server_kerberos_ad:
+     */
+    tenantId?: string;
+}
+export interface ResourceAzureCertificate {
+    /**
+     * The application ID to authenticate with.
+     */
+    appId?: string;
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * The certificate to authenticate TLS connections with.
+     */
+    clientCertificate?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The Azure AD directory (tenant) ID with which to authenticate.
+     * * sql_server_kerberos_ad:
+     */
+    tenantId?: string;
+}
+export interface ResourceAzureMysql {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
+    requireNativeAuth?: boolean;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * If true, appends the hostname to the username when hitting a database.azure.com address
+     */
+    useAzureSingleServerUsernames?: boolean;
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
+export interface ResourceAzurePostgres {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
+    overrideDatabase?: boolean;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
      */
-    tenantId?: string;
+    username?: string;
 }
-export interface ResourceAzureCertificate {
-    /**
-     * The application ID to authenticate with.
-     */
-    appId?: string;
+export interface ResourceAzurePostgresManagedIdentity {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface: string;
     /**
-     * The certificate to authenticate TLS connections with.
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    clientCertificate?: string;
+    database: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
     /**
      * Unique human-readable name of the Resource.
      */
     name: string;
+    /**
+     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
+     */
+    overrideDatabase?: boolean;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
     /**
      * The local port used by clients to connect to this resource.
      */
@@ -8675,52 +9396,47 @@ export interface ResourceAzureCertificate {
         [key: string]: string;
     };
     /**
-     * The Azure AD directory (tenant) ID with which to authenticate.
-     * * sql_server_kerberos_ad:
+     * If true, appends the hostname to the username when hitting a database.azure.com address
      */
-    tenantId?: string;
+    useAzureSingleServerUsernames?: boolean;
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
 }
-export interface ResourceAzureMysql {
+export interface ResourceBigQuery {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface: string;
-    /**
-     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
-     */
-    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
     egressFilter?: string;
     /**
-     * The host to dial to initiate a connection from the egress node to this resource.
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
      */
-    hostname: string;
+    endpoint: string;
     /**
      * Unique human-readable name of the Resource.
      */
     name: string;
     /**
-     * The password to authenticate with.
+     * The local port used by clients to connect to this resource.
      */
-    password?: string;
+    portOverride: number;
     /**
-     * The port to dial to initiate a connection from the egress node to this resource.
+     * The private key used to authenticate with the server.
      */
-    port?: number;
+    privateKey?: string;
     /**
-     * The local port used by clients to connect to this resource.
+     * The project to connect to.
      */
-    portOverride: number;
+    project: string;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
     proxyClusterId?: string;
-    /**
-     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
-     */
-    requireNativeAuth?: boolean;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
@@ -8735,24 +9451,16 @@ export interface ResourceAzureMysql {
     tags?: {
         [key: string]: string;
     };
-    /**
-     * If true, appends the hostname to the username when hitting a database.azure.com address
-     */
-    useAzureSingleServerUsernames?: boolean;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface ResourceAzurePostgres {
+export interface ResourceCassandra {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface: string;
-    /**
-     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
-     */
-    database: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -8765,10 +9473,6 @@ export interface ResourceAzurePostgres {
      * Unique human-readable name of the Resource.
      */
     name: string;
-    /**
-     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
-     */
-    overrideDatabase?: boolean;
     /**
      * The password to authenticate with.
      */
@@ -8799,12 +9503,16 @@ export interface ResourceAzurePostgres {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface ResourceAzurePostgresManagedIdentity {
+export interface ResourceCitus {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -8859,44 +9567,36 @@ export interface ResourceAzurePostgresManagedIdentity {
     tags?: {
         [key: string]: string;
     };
-    /**
-     * If true, appends the hostname to the username when hitting a database.azure.com address
-     */
-    useAzureSingleServerUsernames?: boolean;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface ResourceBigQuery {
+export interface ResourceClickHouseHttp {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface: string;
     /**
-     * A filter applied to the routing logic to pin datasource to nodes.
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    egressFilter?: string;
+    database?: string;
     /**
-     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     * A filter applied to the routing logic to pin datasource to nodes.
      */
-    endpoint: string;
+    egressFilter?: string;
     /**
      * Unique human-readable name of the Resource.
      */
     name: string;
     /**
-     * The local port used by clients to connect to this resource.
-     */
-    portOverride: number;
-    /**
-     * The private key used to authenticate with the server.
+     * The password to authenticate with.
      */
-    privateKey?: string;
+    password?: string;
     /**
-     * The project to connect to.
+     * The local port used by clients to connect to this resource.
      */
-    project: string;
+    portOverride: number;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -8905,26 +9605,31 @@ export interface ResourceBigQuery {
      * ID of the secret store containing credentials for this resource, if any.
      */
     secretStoreId?: string;
-    /**
-     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
-     */
-    subdomain: string;
     /**
      * Tags is a map of key, value pairs.
      */
     tags?: {
         [key: string]: string;
     };
+    /**
+     * The base address of your website without the path.
+     * * kubernetes:
+     */
+    url: string;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface ResourceCassandra {
+export interface ResourceClickHouseMySql {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -8953,6 +9658,10 @@ export interface ResourceCassandra {
      * ID of the proxy cluster for this resource, if any.
      */
     proxyClusterId?: string;
+    /**
+     * Whether native auth (mysql_native_password) is used for all connections (for backwards compatibility)
+     */
+    requireNativeAuth?: boolean;
     /**
      * ID of the secret store containing credentials for this resource, if any.
      */
@@ -8967,16 +9676,12 @@ export interface ResourceCassandra {
     tags?: {
         [key: string]: string;
     };
-    /**
-     * If set, TLS must be used to connect to this resource.
-     */
-    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
     username?: string;
 }
-export interface ResourceCitus {
+export interface ResourceClickHouseTcp {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
@@ -8984,7 +9689,7 @@ export interface ResourceCitus {
     /**
      * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
      */
-    database: string;
+    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -8997,10 +9702,6 @@ export interface ResourceCitus {
      * Unique human-readable name of the Resource.
      */
     name: string;
-    /**
-     * If set, the database configured cannot be changed by users. This setting is not recommended for most use cases, as some clients will insist their database has changed when it has not, leading to user confusion.
-     */
-    overrideDatabase?: boolean;
     /**
      * The password to authenticate with.
      */
@@ -9008,7 +9709,7 @@ export interface ResourceCitus {
     /**
      * The port to dial to initiate a connection from the egress node to this resource.
      */
-    port?: number;
+    port: number;
     /**
      * The local port used by clients to connect to this resource.
      */
@@ -9031,6 +9732,10 @@ export interface ResourceCitus {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
@@ -9437,6 +10142,54 @@ export interface ResourceDocumentDbHost {
      */
     username?: string;
 }
+export interface ResourceDocumentDbHostIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
 export interface ResourceDocumentDbReplicaSet {
     /**
      * The authentication database to use.
@@ -9609,6 +10362,58 @@ export interface ResourceDynamoDb {
         [key: string]: string;
     };
 }
+export interface ResourceDynamoDbiam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The neptune endpoint to connect to as in endpoint.region.neptune.amazonaws.com
+     */
+    endpoint: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region: string;
+    /**
+     * The role to assume after logging in.
+     */
+    roleArn?: string;
+    /**
+     * The external ID to associate with assume role requests. Does nothing if a role ARN is not provided.
+     */
+    roleExternalId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
 export interface ResourceElastic {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.