@pierskarsenbarg/sdm 1.27.0 → 1.29.0

package/types/output.d.ts

@@ -37,10 +37,22 @@ export interface AccountUser {
      * Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
      */
     managedBy: string;
+    /**
+     * Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
+     */
+    managerId?: string;
     /**
      * PermissionLevel is the user's permission level e.g. admin, DBA, user.
      */
     permissionLevel: string;
+    /**
+     * Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list.
+     */
+    resolvedManagerId: string;
+    /**
+     * SCIM contains the raw SCIM metadata for the user. This is a read-only field.
+     */
+    scim: string;
     /**
      * The Service's suspended state.
      */
@@ -68,11 +80,15 @@ export interface ApprovalWorkflowApprovalStep {
 }
 export interface ApprovalWorkflowApprovalStepApprover {
     /**
-     * The account id of the approver (only an accountId OR a roleId may be present for one approver)
+     * The account id of the approver (only one of account_id, role_id, or reference may be present for one approver)
      */
     accountId?: string;
     /**
-     * The role id of the approver (only an accountId OR a roleId may be present for one approver)
+     * A reference to an approver: 'manager-of-requester' or 'manager-of-manager-of-requester' (only one of account_id, role_id, or reference may be present for one approver)
+     */
+    reference?: string;
+    /**
+     * The role id of the approver (only one of account_id, role_id, or reference may be present for one approver)
      */
     roleId?: string;
 }
@@ -175,10 +191,22 @@ export interface GetAccountAccountUser {
      * Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
      */
     managedBy: string;
+    /**
+     * Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
+     */
+    managerId?: string;
     /**
      * PermissionLevel is the user's permission level e.g. admin, DBA, user.
      */
     permissionLevel?: string;
+    /**
+     * Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list.
+     */
+    resolvedManagerId: string;
+    /**
+     * SCIM contains the raw SCIM metadata for the user. This is a read-only field.
+     */
+    scim: string;
     /**
      * Reserved for future use.  Always false for tokens.
      */
@@ -220,11 +248,15 @@ export interface GetApprovalWorkflowApprovalStep {
 }
 export interface GetApprovalWorkflowApprovalStepApprover {
     /**
-     * The account id of the approver (only an accountId OR a roleId may be present for one approver)
+     * The account id of the approver (only one of account_id, role_id, or reference may be present for one approver)
      */
     accountId?: string;
     /**
-     * The role id of the approver (only an accountId OR a roleId may be present for one approver)
+     * A reference to an approver: 'manager-of-requester' or 'manager-of-manager-of-requester' (only one of account_id, role_id, or reference may be present for one approver)
+     */
+    reference?: string;
+    /**
+     * The role id of the approver (only one of account_id, role_id, or reference may be present for one approver)
      */
     roleId?: string;
 }
@@ -266,11 +298,15 @@ export interface GetApprovalWorkflowApprovalWorkflowApprovalStep {
 }
 export interface GetApprovalWorkflowApprovalWorkflowApprovalStepApprover {
     /**
-     * The account id of the approver (only an accountId OR a roleId may be present for one approver)
+     * The account id of the approver (only one of account_id, role_id, or reference may be present for one approver)
      */
     accountId?: string;
     /**
-     * The role id of the approver (only an accountId OR a roleId may be present for one approver)
+     * A reference to an approver: 'manager-of-requester' or 'manager-of-manager-of-requester' (only one of account_id, role_id, or reference may be present for one approver)
+     */
+    reference?: string;
+    /**
+     * The role id of the approver (only one of account_id, role_id, or reference may be present for one approver)
      */
     roleId?: string;
 }
@@ -581,6 +617,7 @@ export interface GetRemoteIdentityRemoteIdentity {
     username?: string;
 }
 export interface GetResourceResource {
+    aerospikes: outputs.GetResourceResourceAerospike[];
     aks: outputs.GetResourceResourceAk[];
     aksBasicAuths: outputs.GetResourceResourceAksBasicAuth[];
     aksServiceAccountUserImpersonations: outputs.GetResourceResourceAksServiceAccountUserImpersonation[];
@@ -604,6 +641,7 @@ export interface GetResourceResource {
     awsConsoles: outputs.GetResourceResourceAwsConsole[];
     awsInstanceProfiles: outputs.GetResourceResourceAwsInstanceProfile[];
     azureCertificates: outputs.GetResourceResourceAzureCertificate[];
+    azureConsoles: outputs.GetResourceResourceAzureConsole[];
     azureMysqls: outputs.GetResourceResourceAzureMysql[];
     azurePostgres: outputs.GetResourceResourceAzurePostgre[];
     azurePostgresManagedIdentities: outputs.GetResourceResourceAzurePostgresManagedIdentity[];
@@ -622,6 +660,7 @@ export interface GetResourceResource {
     db2Luws: outputs.GetResourceResourceDb2Luw[];
     documentDbHostIams: outputs.GetResourceResourceDocumentDbHostIam[];
     documentDbHosts: outputs.GetResourceResourceDocumentDbHost[];
+    documentDbReplicaSetIams: outputs.GetResourceResourceDocumentDbReplicaSetIam[];
     documentDbReplicaSets: outputs.GetResourceResourceDocumentDbReplicaSet[];
     druids: outputs.GetResourceResourceDruid[];
     dynamoDbiams: outputs.GetResourceResourceDynamoDbiam[];
@@ -656,6 +695,7 @@ export interface GetResourceResource {
     mysqls: outputs.GetResourceResourceMysql[];
     neptuneIams: outputs.GetResourceResourceNeptuneIam[];
     neptunes: outputs.GetResourceResourceNeptune[];
+    oracleNnes: outputs.GetResourceResourceOracleNne[];
     oracles: outputs.GetResourceResourceOracle[];
     postgres: outputs.GetResourceResourcePostgre[];
     prestos: outputs.GetResourceResourcePresto[];
@@ -685,6 +725,66 @@ export interface GetResourceResource {
     trinos: outputs.GetResourceResourceTrino[];
     verticas: outputs.GetResourceResourceVertica[];
 }
+export interface GetResourceResourceAerospike {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * If true, uses UseServicesAlternates directive for Aerospike connection
+     */
+    useServicesAlternate?: boolean;
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface GetResourceResourceAk {
     /**
      * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided.
@@ -2285,6 +2385,62 @@ export interface GetResourceResourceAzureCertificate {
      */
     tenantId?: string;
 }
+export interface GetResourceResourceAzureConsole {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * The connector ID to authenticate through.
+     */
+    connectorId?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * The ID of the identity set to use for identity connections.
+     */
+    identitySetId?: string;
+    /**
+     * The management group ID to authenticate scope Privileges to.
+     */
+    managementGroupId?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The privilege levels specify which Groups are managed externally
+     */
+    privilegeLevels?: string;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * The subscription ID to authenticate scope Privileges to.
+     */
+    subscriptionId?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
 export interface GetResourceResourceAzureMysql {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -3210,6 +3366,10 @@ export interface GetResourceResourceDb2Luw {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
@@ -3391,6 +3551,58 @@ export interface GetResourceResourceDocumentDbReplicaSet {
      */
     username?: string;
 }
+export interface GetResourceResourceDocumentDbReplicaSetIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * Set to connect to a replica instead of the primary node.
+     */
+    connectToReplica?: boolean;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
 export interface GetResourceResourceDruid {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -4098,6 +4310,10 @@ export interface GetResourceResourceHttpAuth {
      * Unique human-readable name of the Resource.
      */
     name?: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -4159,6 +4375,10 @@ export interface GetResourceResourceHttpBasicAuth {
      * The password to authenticate with.
      */
     password?: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -4220,6 +4440,10 @@ export interface GetResourceResourceHttpNoAuth {
      * Unique human-readable name of the Resource.
      */
     name?: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -4401,6 +4625,14 @@ export interface GetResourceResourceKubernetesPodIdentity {
      * The CA to authenticate TLS connections with.
      */
     certificateAuthority?: string;
+    /**
+     * If true, configures discovery of a cluster to be run from a node.
+     */
+    discoveryEnabled?: boolean;
+    /**
+     * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery.
+     */
+    discoveryUsername?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -5574,6 +5806,66 @@ export interface GetResourceResourceOracle {
      */
     username?: string;
 }
+export interface GetResourceResourceOracleNne {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface?: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database?: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname?: string;
+    /**
+     * Unique identifier of the Resource.
+     */
+    id?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name?: string;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride?: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface GetResourceResourcePostgre {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -6423,11 +6715,15 @@ export interface GetResourceResourceSnowflake {
     /**
      * The password to authenticate with.
      */
-    password?: string;
+    password: string;
     /**
      * The local port used by clients to connect to this resource.
      */
     portOverride?: number;
+    /**
+     * The private key used to authenticate with the server.
+     */
+    privateKey?: string;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -7185,10 +7481,6 @@ export interface GetResourceResourceTrino {
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface?: string;
-    /**
-     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
-     */
-    database?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -7235,6 +7527,10 @@ export interface GetResourceResourceTrino {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
@@ -8238,6 +8534,8 @@ export interface GetWorkflowWorkflow {
     approvalFlowId?: string;
     /**
      * Optional auto grant setting to automatically approve requests or not, defaults to false.
+     *
+     * @deprecated auto_grant is deprecated, see docs for more info
      */
     autoGrant?: boolean;
     /**
@@ -8367,6 +8665,62 @@ export interface NodeRelayMaintenanceWindow {
     cronSchedule: string;
     requireIdleness: boolean;
 }
+export interface ResourceAerospike {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port?: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * If true, uses UseServicesAlternates directive for Aerospike connection
+     */
+    useServicesAlternate?: boolean;
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface ResourceAks {
     /**
      * If true, allows users to fallback to the existing authentication mode (Leased Credential or Identity Set) when a resource role is not provided.
@@ -9871,6 +10225,58 @@ export interface ResourceAzureCertificate {
      */
     tenantId?: string;
 }
+export interface ResourceAzureConsole {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * The connector ID to authenticate through.
+     */
+    connectorId: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The ID of the identity set to use for identity connections.
+     */
+    identitySetId?: string;
+    /**
+     * The management group ID to authenticate scope Privileges to.
+     */
+    managementGroupId?: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The privilege levels specify which Groups are managed externally
+     */
+    privilegeLevels: string;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * The subscription ID to authenticate scope Privileges to.
+     */
+    subscriptionId?: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
 export interface ResourceAzureMysql {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -10736,6 +11142,10 @@ export interface ResourceDb2Luw {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */
@@ -10905,6 +11315,54 @@ export interface ResourceDocumentDbReplicaSet {
      */
     username?: string;
 }
+export interface ResourceDocumentDbReplicaSetIam {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * Set to connect to a replica instead of the primary node.
+     */
+    connectToReplica?: boolean;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * The AWS region to connect to.
+     */
+    region: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+}
 export interface ResourceDruid {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -11564,6 +12022,10 @@ export interface ResourceHttpAuth {
      * Unique human-readable name of the Resource.
      */
     name: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -11621,6 +12083,10 @@ export interface ResourceHttpBasicAuth {
      * The password to authenticate with.
      */
     password?: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -11678,6 +12144,10 @@ export interface ResourceHttpNoAuth {
      * Unique human-readable name of the Resource.
      */
     name: string;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -11851,6 +12321,14 @@ export interface ResourceKubernetesPodIdentity {
      * The CA to authenticate TLS connections with.
      */
     certificateAuthority?: string;
+    /**
+     * If true, configures discovery of a cluster to be run from a node.
+     */
+    discoveryEnabled?: boolean;
+    /**
+     * If a cluster is configured for user impersonation, this is the user to impersonate when running discovery.
+     */
+    discoveryUsername?: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -12952,6 +13430,62 @@ export interface ResourceOracle {
      */
     username?: string;
 }
+export interface ResourceOracleNne {
+    /**
+     * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
+     */
+    bindInterface: string;
+    /**
+     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
+     */
+    database: string;
+    /**
+     * A filter applied to the routing logic to pin datasource to nodes.
+     */
+    egressFilter?: string;
+    /**
+     * The host to dial to initiate a connection from the egress node to this resource.
+     */
+    hostname: string;
+    /**
+     * Unique human-readable name of the Resource.
+     */
+    name: string;
+    /**
+     * The password to authenticate with.
+     */
+    password?: string;
+    /**
+     * The port to dial to initiate a connection from the egress node to this resource.
+     */
+    port: number;
+    /**
+     * The local port used by clients to connect to this resource.
+     */
+    portOverride: number;
+    /**
+     * ID of the proxy cluster for this resource, if any.
+     */
+    proxyClusterId?: string;
+    /**
+     * ID of the secret store containing credentials for this resource, if any.
+     */
+    secretStoreId?: string;
+    /**
+     * Subdomain is the local DNS address.  (e.g. app-prod1 turns into app-prod1.your-org-name.sdm.network)
+     */
+    subdomain: string;
+    /**
+     * Tags is a map of key, value pairs.
+     */
+    tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The username to authenticate with.
+     */
+    username?: string;
+}
 export interface ResourcePostgres {
     /**
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
@@ -13745,11 +14279,15 @@ export interface ResourceSnowflake {
     /**
      * The password to authenticate with.
      */
-    password?: string;
+    password: string;
     /**
      * The local port used by clients to connect to this resource.
      */
     portOverride: number;
+    /**
+     * The private key used to authenticate with the server.
+     */
+    privateKey?: string;
     /**
      * ID of the proxy cluster for this resource, if any.
      */
@@ -14463,10 +15001,6 @@ export interface ResourceTrino {
      * The bind interface is the IP address to which the port override of a resource is bound (for example, 127.0.0.1). It is automatically generated if not provided.
      */
     bindInterface: string;
-    /**
-     * The initial database to connect to. This setting does not by itself prevent switching to another database after connecting.
-     */
-    database: string;
     /**
      * A filter applied to the routing logic to pin datasource to nodes.
      */
@@ -14509,6 +15043,10 @@ export interface ResourceTrino {
     tags?: {
         [key: string]: string;
     };
+    /**
+     * If set, TLS must be used to connect to this resource.
+     */
+    tlsRequired?: boolean;
     /**
      * The username to authenticate with.
      */