@pulumi/alicloud 3.30.0 → 3.31.0

package/rds/ddrInstance.d.ts

@@ -0,0 +1,1041 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * ## Import
+ *
+ * RDS ddr instance can be imported using the id, e.g.
+ *
+ * ```sh
+ *  $ pulumi import alicloud:rds/ddrInstance:DdrInstance example rm-abc12345678
+ * ```
+ */
+export declare class DdrInstance extends pulumi.CustomResource {
+    /**
+     * Get an existing DdrInstance resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: DdrInstanceState, opts?: pulumi.CustomResourceOptions): DdrInstance;
+    /**
+     * Returns true if the given object is an instance of DdrInstance.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is DdrInstance;
+    /**
+     * The method that is used to verify the identities of clients. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - cert
+     * - perfer
+     * - verify-ca
+     * - verify-full (supported only when the instance runs PostgreSQL 12 or later)
+     */
+    readonly acl: pulumi.Output<string>;
+    /**
+     * Whether to renewal a DB instance automatically or not. It is valid when paymentType is `Subscription`. Default to `false`.
+     */
+    readonly autoRenew: pulumi.Output<boolean>;
+    /**
+     * Auto-renewal period of an instance, in the unit of the month. It is valid when paymentType is `Subscription`. Valid value:[1~12], Default to 1.
+     */
+    readonly autoRenewPeriod: pulumi.Output<number>;
+    /**
+     * The upgrade method to use. Valid values:
+     * - Auto: Instances are automatically upgraded to a higher minor version.
+     * - Manual: Instances are forcibly upgraded to a higher minor version when the current version is unpublished.
+     */
+    readonly autoUpgradeMinorVersion: pulumi.Output<string>;
+    /**
+     * The ID of the backup set that is used for the restoration. You can call the DescribeCrossRegionBackups operation to query the ID of the backup set.
+     */
+    readonly backupSetId: pulumi.Output<string | undefined>;
+    /**
+     * The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+     * - aliyun: a cloud certificate
+     * - custom: a custom certificate
+     */
+    readonly caType: pulumi.Output<string>;
+    /**
+     * The RDS edition of the instance.
+     */
+    readonly category: pulumi.Output<string>;
+    /**
+     * The public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCAEbabled parameter to 1, you must also specify this parameter.
+     */
+    readonly clientCaCert: pulumi.Output<string | undefined>;
+    /**
+     * Specifies whether to enable the public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. Valid values:
+     * - 1: enables the public key
+     * - 0: disables the public key
+     */
+    readonly clientCaEnabled: pulumi.Output<number | undefined>;
+    /**
+     * The CRL that contains revoked client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCrlEnabled parameter to 1, you must also specify this parameter.
+     */
+    readonly clientCertRevocationList: pulumi.Output<string | undefined>;
+    /**
+     * Specifies whether to enable a certificate revocation list (CRL) that contains revoked client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - 1: enables the CRL
+     * - 0: disables the CRL
+     */
+    readonly clientCrlEnabled: pulumi.Output<number | undefined>;
+    /**
+     * RDS database connection string.
+     */
+    readonly connectionString: pulumi.Output<string>;
+    readonly connectionStringPrefix: pulumi.Output<string>;
+    /**
+     * The attribute of the IP address whitelist. By default, this parameter is empty.
+     */
+    readonly dbInstanceIpArrayAttribute: pulumi.Output<string | undefined>;
+    /**
+     * The name of the IP address whitelist. Default value: Default.
+     */
+    readonly dbInstanceIpArrayName: pulumi.Output<string | undefined>;
+    /**
+     * The storage type of the instance. Valid values:
+     * - local_ssd: specifies to use local SSDs. This value is recommended.
+     * - cloud_ssd: specifies to use standard SSDs.
+     * - cloud_essd: specifies to use enhanced SSDs (ESSDs).
+     * - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
+     * - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
+     */
+    readonly dbInstanceStorageType: pulumi.Output<string>;
+    /**
+     * The switch of delete protection. Valid values:
+     * - true: delete protect.
+     * - false: no delete protect.
+     */
+    readonly deletionProtection: pulumi.Output<boolean>;
+    /**
+     * The method to update the engine version.  Default value: Immediate. Valid values:
+     * - Immediate: The change immediately takes effect.
+     * - MaintainTime: The change takes effect during the specified maintenance window. For more information, see ModifyDBInstanceMaintainTime.
+     */
+    readonly effectiveTime: pulumi.Output<string | undefined>;
+    /**
+     * The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+     */
+    readonly encryptionKey: pulumi.Output<string | undefined>;
+    /**
+     * Database type. Value options: MySQL, SQLServer.
+     */
+    readonly engine: pulumi.Output<string>;
+    /**
+     * Database version. Value options can refer to the latest docs [CreateDdrInstance](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/restore-data-to-a-new-instance-across-regions) `EngineVersion`.
+     */
+    readonly engineVersion: pulumi.Output<string>;
+    /**
+     * Set it to true to make some parameter efficient when modifying them. Default to false.
+     */
+    readonly forceRestart: pulumi.Output<boolean>;
+    /**
+     * The read-only instances to which you want to synchronize the IP address whitelist.
+     * * If the instance is attached with a read-only instance, you can use this parameter to synchronize the IP address whitelist to the read-only instance. If the instance is attached with multiple read-only instances, the read-only instances must be separated by commas (,).
+     * * If the instance is not attached with a read-only instance, this parameter is empty.
+     */
+    readonly freshWhiteListReadins: pulumi.Output<string | undefined>;
+    /**
+     * The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
+     * - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
+     * - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
+     */
+    readonly haConfig: pulumi.Output<string>;
+    /**
+     * The name of DB instance. It a string of 2 to 256 characters.
+     */
+    readonly instanceName: pulumi.Output<string | undefined>;
+    /**
+     * The storage capacity of the destination instance. Valid values: 5 to 2000. Unit: GB.
+     */
+    readonly instanceStorage: pulumi.Output<number>;
+    /**
+     * DB Instance type.
+     */
+    readonly instanceType: pulumi.Output<string>;
+    /**
+     * Maintainable time period format of the instance: HH:MMZ-HH:MMZ (UTC time)
+     */
+    readonly maintainTime: pulumi.Output<string>;
+    /**
+     * The time after when you want to enable automatic primary/secondary switchover. At most, you can set this parameter to 23:59:59 seven days later. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time must be in UTC.
+     */
+    readonly manualHaTime: pulumi.Output<string | undefined>;
+    /**
+     * The method that is used to modify the IP address whitelist. Default value: Cover. Valid values:
+     * - Cover: Use the value of the SecurityIps parameter to overwrite the existing entries in the IP address whitelist.
+     * - Append: Add the IP addresses and CIDR blocks that are specified in the SecurityIps parameter to the IP address whitelist.
+     * - Delete: Delete IP addresses and CIDR blocks that are specified in the SecurityIps parameter from the IP address whitelist. You must retain at least one IP address or CIDR block.
+     */
+    readonly modifyMode: pulumi.Output<string | undefined>;
+    /**
+     * The monitoring frequency in seconds. Valid values are 5, 60, 300. Defaults to 300.
+     */
+    readonly monitoringPeriod: pulumi.Output<number>;
+    /**
+     * Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) .
+     */
+    readonly parameters: pulumi.Output<outputs.rds.DdrInstanceParameter[]>;
+    /**
+     * Valid values are `Subscription`, `PayAsYouGo`, Default to `PayAsYouGo`.
+     */
+    readonly paymentType: pulumi.Output<string>;
+    readonly period: pulumi.Output<number | undefined>;
+    /**
+     * The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) (documented below).
+     */
+    readonly pgHbaConfs: pulumi.Output<outputs.rds.DdrInstancePgHbaConf[]>;
+    readonly port: pulumi.Output<string>;
+    /**
+     * The private IP address of the instance. The private IP address must be within the Classless Inter-Domain Routing (CIDR) block of the vSwitch that is specified by the VSwitchId parameter.
+     */
+    readonly privateIpAddress: pulumi.Output<string>;
+    /**
+     * The policy based on which ApsaraDB RDS retains archived backup files after the instance is released. Valid values:
+     * - None: No archived backup files are retained.
+     * - Lastest: Only the last archived backup file is retained.
+     * - All: All the archived backup files are retained.
+     */
+    readonly releasedKeepPolicy: pulumi.Output<string | undefined>;
+    /**
+     * The method that is used to verify the replication permission. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - cert
+     * - perfer
+     * - verify-ca
+     * - verify-full (supported only when the instance runs PostgreSQL 12 or later)
+     */
+    readonly replicationAcl: pulumi.Output<string>;
+    /**
+     * The ID of resource group which the DB instance belongs.
+     */
+    readonly resourceGroupId: pulumi.Output<string>;
+    /**
+     * The point in time to which you want to restore data. The point in time that you specify must be earlier than the current time. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time must be in UTC.
+     */
+    readonly restoreTime: pulumi.Output<string | undefined>;
+    /**
+     * The method that is used to restore data. Valid values:
+     * - BackupSet: Data is restored from a backup set. If you use this value, you must also specify the BackupSetID parameter.
+     * - BackupTime: restores data to a point in time. You must also specify the RestoreTime, SourceRegion, and SourceDBInstanceName parameters.
+     */
+    readonly restoreType: pulumi.Output<string>;
+    /**
+     * ) The list IDs to join ECS Security Group. At most supports three security groups.
+     */
+    readonly securityGroupIds: pulumi.Output<string[]>;
+    /**
+     * Valid values are `normal`, `safety`, Default to `normal`. support `safety` switch to high security access mode.
+     */
+    readonly securityIpMode: pulumi.Output<string>;
+    /**
+     * The type of IP address in the IP address whitelist.
+     */
+    readonly securityIpType: pulumi.Output<string | undefined>;
+    /**
+     * List of IP addresses allowed to access all databases of an instance. The list contains up to 1,000 IP addresses, separated by commas. Supported formats include 0.0.0.0/0, 10.23.12.24 (IP), and 10.23.12.24/24 (Classless Inter-Domain Routing (CIDR) mode. /24 represents the length of the prefix in an IP address. The range of the prefix length is [1,32]).
+     */
+    readonly securityIps: pulumi.Output<string[]>;
+    /**
+     * The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+     */
+    readonly serverCert: pulumi.Output<string>;
+    /**
+     * The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+     */
+    readonly serverKey: pulumi.Output<string>;
+    /**
+     * The ID of the source instance if you want to restore data to a point in time.
+     * #### Block pg_hba_conf
+     */
+    readonly sourceDbInstanceName: pulumi.Output<string | undefined>;
+    /**
+     * The region ID of the source instance if you want to restore data to a point in time.
+     */
+    readonly sourceRegion: pulumi.Output<string | undefined>;
+    /**
+     * The sql collector keep time of the instance. Valid values are `30`, `180`, `365`, `1095`, `1825`, Default to `30`.
+     */
+    readonly sqlCollectorConfigValue: pulumi.Output<number>;
+    /**
+     * The sql collector status of the instance. Valid values are `Enabled`, `Disabled`, Default to `Disabled`.
+     */
+    readonly sqlCollectorStatus: pulumi.Output<string>;
+    /**
+     * Actions performed on SSL functions, Valid values: `Open`: turn on SSL encryption; `Close`: turn off SSL encryption; `Update`: update SSL certificate. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26254.htm).
+     */
+    readonly sslAction: pulumi.Output<string>;
+    /**
+     * Status of the SSL feature. `Yes`: SSL is turned on; `No`: SSL is turned off.
+     */
+    readonly sslStatus: pulumi.Output<string>;
+    /**
+     * Automatic storage space expansion switch. Valid values:
+     * - Enable
+     * - Disable
+     */
+    readonly storageAutoScale: pulumi.Output<string | undefined>;
+    /**
+     * The trigger threshold (percentage) for automatic storage space expansion. Valid values:
+     * - 10
+     * - 20
+     * - 30
+     * - 40
+     * - 50
+     */
+    readonly storageThreshold: pulumi.Output<number | undefined>;
+    /**
+     * The upper limit of the total storage space for automatic expansion of the storage space, that is, automatic expansion will not cause the total storage space of the instance to exceed this value. Unit: GB. The value must be ≥0.
+     */
+    readonly storageUpperBound: pulumi.Output<number | undefined>;
+    /**
+     * The specific point in time when you want to perform the update. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. It is valid only when `upgradeDbInstanceKernelVersion = true`. The time must be in UTC.
+     */
+    readonly switchTime: pulumi.Output<string | undefined>;
+    /**
+     * A mapping of tags to assign to the resource.
+     * - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
+     * - Value: It can be up to 128 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It can be a null string.
+     */
+    readonly tags: pulumi.Output<{
+        [key: string]: any;
+    } | undefined>;
+    /**
+     * The minor engine version to which you want to update the instance. If you do not specify this parameter, the instance is updated to the latest minor engine version. It is valid only when `upgradeDbInstanceKernelVersion = true`. You must specify the minor engine version in one of the following formats:
+     * - PostgreSQL: rds_postgres_<Major engine version>00_<Minor engine version>. Example: rds_postgres_1200_20200830.
+     * - MySQL: <RDS edition>_<Minor engine version>. Examples: rds_20200229, xcluster_20200229, and xcluster80_20200229. The following RDS editions are supported:
+     * - rds: The instance runs RDS Basic or High-availability Edition.
+     * - xcluster: The instance runs MySQL 5.7 on RDS Enterprise Edition.
+     * - xcluster80: The instance runs MySQL 8.0 on RDS Enterprise Edition.
+     * - SQLServer: <Minor engine version>. Example: 15.0.4073.23.
+     */
+    readonly targetMinorVersion: pulumi.Output<string>;
+    /**
+     * The availability check method of the instance. Valid values:
+     * - **SHORT**: Alibaba Cloud uses short-lived connections to check the availability of the instance.
+     * - **LONG**: Alibaba Cloud uses persistent connections to check the availability of the instance.
+     */
+    readonly tcpConnectionType: pulumi.Output<string>;
+    /**
+     * The TDE(Transparent Data Encryption) status. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+     */
+    readonly tdeStatus: pulumi.Output<string | undefined>;
+    /**
+     * Whether to upgrade a minor version of the kernel. Valid values:
+     * - true: upgrade
+     * - false: not to upgrade
+     */
+    readonly upgradeDbInstanceKernelVersion: pulumi.Output<boolean | undefined>;
+    /**
+     * The method to update the minor engine version. Default value: Immediate. It is valid only when `upgradeDbInstanceKernelVersion = true`. Valid values:
+     * - Immediate: The minor engine version is immediately updated.
+     * - MaintainTime: The minor engine version is updated during the maintenance window. For more information about how to change the maintenance window, see ModifyDBInstanceMaintainTime.
+     * - SpecifyTime: The minor engine version is updated at the point in time you specify.
+     */
+    readonly upgradeTime: pulumi.Output<string | undefined>;
+    /**
+     * The VPC ID of the instance.
+     */
+    readonly vpcId: pulumi.Output<string>;
+    /**
+     * The virtual switch ID to launch DB instances in one VPC. If there are multiple vswitches, separate them with commas.
+     */
+    readonly vswitchId: pulumi.Output<string | undefined>;
+    /**
+     * The network type of the IP address whitelist. Default value: MIX. Valid values:
+     * - Classic: classic network in enhanced whitelist mode
+     * - VPC: virtual private cloud (VPC) in enhanced whitelist mode
+     * - MIX: standard whitelist mode
+     */
+    readonly whitelistNetworkType: pulumi.Output<string | undefined>;
+    /**
+     * The Zone to launch the DB instance. It supports multiple zone.
+     * If it is a multi-zone and `vswitchId` is specified, the vswitch must in the one of them.
+     * The multiple zone ID can be retrieved by setting `multi` to "true" in the data source `alicloud.getZones`.
+     */
+    readonly zoneId: pulumi.Output<string>;
+    /**
+     * The region ID of the secondary instance if you create a secondary instance.
+     */
+    readonly zoneIdSlaveA: pulumi.Output<string>;
+    /**
+     * The region ID of the log instance if you create a log instance.
+     */
+    readonly zoneIdSlaveB: pulumi.Output<string>;
+    /**
+     * Create a DdrInstance resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: DdrInstanceArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering DdrInstance resources.
+ */
+export interface DdrInstanceState {
+    /**
+     * The method that is used to verify the identities of clients. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - cert
+     * - perfer
+     * - verify-ca
+     * - verify-full (supported only when the instance runs PostgreSQL 12 or later)
+     */
+    acl?: pulumi.Input<string>;
+    /**
+     * Whether to renewal a DB instance automatically or not. It is valid when paymentType is `Subscription`. Default to `false`.
+     */
+    autoRenew?: pulumi.Input<boolean>;
+    /**
+     * Auto-renewal period of an instance, in the unit of the month. It is valid when paymentType is `Subscription`. Valid value:[1~12], Default to 1.
+     */
+    autoRenewPeriod?: pulumi.Input<number>;
+    /**
+     * The upgrade method to use. Valid values:
+     * - Auto: Instances are automatically upgraded to a higher minor version.
+     * - Manual: Instances are forcibly upgraded to a higher minor version when the current version is unpublished.
+     */
+    autoUpgradeMinorVersion?: pulumi.Input<string>;
+    /**
+     * The ID of the backup set that is used for the restoration. You can call the DescribeCrossRegionBackups operation to query the ID of the backup set.
+     */
+    backupSetId?: pulumi.Input<string>;
+    /**
+     * The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+     * - aliyun: a cloud certificate
+     * - custom: a custom certificate
+     */
+    caType?: pulumi.Input<string>;
+    /**
+     * The RDS edition of the instance.
+     */
+    category?: pulumi.Input<string>;
+    /**
+     * The public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCAEbabled parameter to 1, you must also specify this parameter.
+     */
+    clientCaCert?: pulumi.Input<string>;
+    /**
+     * Specifies whether to enable the public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. Valid values:
+     * - 1: enables the public key
+     * - 0: disables the public key
+     */
+    clientCaEnabled?: pulumi.Input<number>;
+    /**
+     * The CRL that contains revoked client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCrlEnabled parameter to 1, you must also specify this parameter.
+     */
+    clientCertRevocationList?: pulumi.Input<string>;
+    /**
+     * Specifies whether to enable a certificate revocation list (CRL) that contains revoked client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - 1: enables the CRL
+     * - 0: disables the CRL
+     */
+    clientCrlEnabled?: pulumi.Input<number>;
+    /**
+     * RDS database connection string.
+     */
+    connectionString?: pulumi.Input<string>;
+    connectionStringPrefix?: pulumi.Input<string>;
+    /**
+     * The attribute of the IP address whitelist. By default, this parameter is empty.
+     */
+    dbInstanceIpArrayAttribute?: pulumi.Input<string>;
+    /**
+     * The name of the IP address whitelist. Default value: Default.
+     */
+    dbInstanceIpArrayName?: pulumi.Input<string>;
+    /**
+     * The storage type of the instance. Valid values:
+     * - local_ssd: specifies to use local SSDs. This value is recommended.
+     * - cloud_ssd: specifies to use standard SSDs.
+     * - cloud_essd: specifies to use enhanced SSDs (ESSDs).
+     * - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
+     * - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
+     */
+    dbInstanceStorageType?: pulumi.Input<string>;
+    /**
+     * The switch of delete protection. Valid values:
+     * - true: delete protect.
+     * - false: no delete protect.
+     */
+    deletionProtection?: pulumi.Input<boolean>;
+    /**
+     * The method to update the engine version.  Default value: Immediate. Valid values:
+     * - Immediate: The change immediately takes effect.
+     * - MaintainTime: The change takes effect during the specified maintenance window. For more information, see ModifyDBInstanceMaintainTime.
+     */
+    effectiveTime?: pulumi.Input<string>;
+    /**
+     * The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+     */
+    encryptionKey?: pulumi.Input<string>;
+    /**
+     * Database type. Value options: MySQL, SQLServer.
+     */
+    engine?: pulumi.Input<string>;
+    /**
+     * Database version. Value options can refer to the latest docs [CreateDdrInstance](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/restore-data-to-a-new-instance-across-regions) `EngineVersion`.
+     */
+    engineVersion?: pulumi.Input<string>;
+    /**
+     * Set it to true to make some parameter efficient when modifying them. Default to false.
+     */
+    forceRestart?: pulumi.Input<boolean>;
+    /**
+     * The read-only instances to which you want to synchronize the IP address whitelist.
+     * * If the instance is attached with a read-only instance, you can use this parameter to synchronize the IP address whitelist to the read-only instance. If the instance is attached with multiple read-only instances, the read-only instances must be separated by commas (,).
+     * * If the instance is not attached with a read-only instance, this parameter is empty.
+     */
+    freshWhiteListReadins?: pulumi.Input<string>;
+    /**
+     * The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
+     * - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
+     * - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
+     */
+    haConfig?: pulumi.Input<string>;
+    /**
+     * The name of DB instance. It a string of 2 to 256 characters.
+     */
+    instanceName?: pulumi.Input<string>;
+    /**
+     * The storage capacity of the destination instance. Valid values: 5 to 2000. Unit: GB.
+     */
+    instanceStorage?: pulumi.Input<number>;
+    /**
+     * DB Instance type.
+     */
+    instanceType?: pulumi.Input<string>;
+    /**
+     * Maintainable time period format of the instance: HH:MMZ-HH:MMZ (UTC time)
+     */
+    maintainTime?: pulumi.Input<string>;
+    /**
+     * The time after when you want to enable automatic primary/secondary switchover. At most, you can set this parameter to 23:59:59 seven days later. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time must be in UTC.
+     */
+    manualHaTime?: pulumi.Input<string>;
+    /**
+     * The method that is used to modify the IP address whitelist. Default value: Cover. Valid values:
+     * - Cover: Use the value of the SecurityIps parameter to overwrite the existing entries in the IP address whitelist.
+     * - Append: Add the IP addresses and CIDR blocks that are specified in the SecurityIps parameter to the IP address whitelist.
+     * - Delete: Delete IP addresses and CIDR blocks that are specified in the SecurityIps parameter from the IP address whitelist. You must retain at least one IP address or CIDR block.
+     */
+    modifyMode?: pulumi.Input<string>;
+    /**
+     * The monitoring frequency in seconds. Valid values are 5, 60, 300. Defaults to 300.
+     */
+    monitoringPeriod?: pulumi.Input<number>;
+    /**
+     * Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) .
+     */
+    parameters?: pulumi.Input<pulumi.Input<inputs.rds.DdrInstanceParameter>[]>;
+    /**
+     * Valid values are `Subscription`, `PayAsYouGo`, Default to `PayAsYouGo`.
+     */
+    paymentType?: pulumi.Input<string>;
+    period?: pulumi.Input<number>;
+    /**
+     * The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) (documented below).
+     */
+    pgHbaConfs?: pulumi.Input<pulumi.Input<inputs.rds.DdrInstancePgHbaConf>[]>;
+    port?: pulumi.Input<string>;
+    /**
+     * The private IP address of the instance. The private IP address must be within the Classless Inter-Domain Routing (CIDR) block of the vSwitch that is specified by the VSwitchId parameter.
+     */
+    privateIpAddress?: pulumi.Input<string>;
+    /**
+     * The policy based on which ApsaraDB RDS retains archived backup files after the instance is released. Valid values:
+     * - None: No archived backup files are retained.
+     * - Lastest: Only the last archived backup file is retained.
+     * - All: All the archived backup files are retained.
+     */
+    releasedKeepPolicy?: pulumi.Input<string>;
+    /**
+     * The method that is used to verify the replication permission. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - cert
+     * - perfer
+     * - verify-ca
+     * - verify-full (supported only when the instance runs PostgreSQL 12 or later)
+     */
+    replicationAcl?: pulumi.Input<string>;
+    /**
+     * The ID of resource group which the DB instance belongs.
+     */
+    resourceGroupId?: pulumi.Input<string>;
+    /**
+     * The point in time to which you want to restore data. The point in time that you specify must be earlier than the current time. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time must be in UTC.
+     */
+    restoreTime?: pulumi.Input<string>;
+    /**
+     * The method that is used to restore data. Valid values:
+     * - BackupSet: Data is restored from a backup set. If you use this value, you must also specify the BackupSetID parameter.
+     * - BackupTime: restores data to a point in time. You must also specify the RestoreTime, SourceRegion, and SourceDBInstanceName parameters.
+     */
+    restoreType?: pulumi.Input<string>;
+    /**
+     * ) The list IDs to join ECS Security Group. At most supports three security groups.
+     */
+    securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Valid values are `normal`, `safety`, Default to `normal`. support `safety` switch to high security access mode.
+     */
+    securityIpMode?: pulumi.Input<string>;
+    /**
+     * The type of IP address in the IP address whitelist.
+     */
+    securityIpType?: pulumi.Input<string>;
+    /**
+     * List of IP addresses allowed to access all databases of an instance. The list contains up to 1,000 IP addresses, separated by commas. Supported formats include 0.0.0.0/0, 10.23.12.24 (IP), and 10.23.12.24/24 (Classless Inter-Domain Routing (CIDR) mode. /24 represents the length of the prefix in an IP address. The range of the prefix length is [1,32]).
+     */
+    securityIps?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+     */
+    serverCert?: pulumi.Input<string>;
+    /**
+     * The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+     */
+    serverKey?: pulumi.Input<string>;
+    /**
+     * The ID of the source instance if you want to restore data to a point in time.
+     * #### Block pg_hba_conf
+     */
+    sourceDbInstanceName?: pulumi.Input<string>;
+    /**
+     * The region ID of the source instance if you want to restore data to a point in time.
+     */
+    sourceRegion?: pulumi.Input<string>;
+    /**
+     * The sql collector keep time of the instance. Valid values are `30`, `180`, `365`, `1095`, `1825`, Default to `30`.
+     */
+    sqlCollectorConfigValue?: pulumi.Input<number>;
+    /**
+     * The sql collector status of the instance. Valid values are `Enabled`, `Disabled`, Default to `Disabled`.
+     */
+    sqlCollectorStatus?: pulumi.Input<string>;
+    /**
+     * Actions performed on SSL functions, Valid values: `Open`: turn on SSL encryption; `Close`: turn off SSL encryption; `Update`: update SSL certificate. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26254.htm).
+     */
+    sslAction?: pulumi.Input<string>;
+    /**
+     * Status of the SSL feature. `Yes`: SSL is turned on; `No`: SSL is turned off.
+     */
+    sslStatus?: pulumi.Input<string>;
+    /**
+     * Automatic storage space expansion switch. Valid values:
+     * - Enable
+     * - Disable
+     */
+    storageAutoScale?: pulumi.Input<string>;
+    /**
+     * The trigger threshold (percentage) for automatic storage space expansion. Valid values:
+     * - 10
+     * - 20
+     * - 30
+     * - 40
+     * - 50
+     */
+    storageThreshold?: pulumi.Input<number>;
+    /**
+     * The upper limit of the total storage space for automatic expansion of the storage space, that is, automatic expansion will not cause the total storage space of the instance to exceed this value. Unit: GB. The value must be ≥0.
+     */
+    storageUpperBound?: pulumi.Input<number>;
+    /**
+     * The specific point in time when you want to perform the update. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. It is valid only when `upgradeDbInstanceKernelVersion = true`. The time must be in UTC.
+     */
+    switchTime?: pulumi.Input<string>;
+    /**
+     * A mapping of tags to assign to the resource.
+     * - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
+     * - Value: It can be up to 128 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It can be a null string.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: any;
+    }>;
+    /**
+     * The minor engine version to which you want to update the instance. If you do not specify this parameter, the instance is updated to the latest minor engine version. It is valid only when `upgradeDbInstanceKernelVersion = true`. You must specify the minor engine version in one of the following formats:
+     * - PostgreSQL: rds_postgres_<Major engine version>00_<Minor engine version>. Example: rds_postgres_1200_20200830.
+     * - MySQL: <RDS edition>_<Minor engine version>. Examples: rds_20200229, xcluster_20200229, and xcluster80_20200229. The following RDS editions are supported:
+     * - rds: The instance runs RDS Basic or High-availability Edition.
+     * - xcluster: The instance runs MySQL 5.7 on RDS Enterprise Edition.
+     * - xcluster80: The instance runs MySQL 8.0 on RDS Enterprise Edition.
+     * - SQLServer: <Minor engine version>. Example: 15.0.4073.23.
+     */
+    targetMinorVersion?: pulumi.Input<string>;
+    /**
+     * The availability check method of the instance. Valid values:
+     * - **SHORT**: Alibaba Cloud uses short-lived connections to check the availability of the instance.
+     * - **LONG**: Alibaba Cloud uses persistent connections to check the availability of the instance.
+     */
+    tcpConnectionType?: pulumi.Input<string>;
+    /**
+     * The TDE(Transparent Data Encryption) status. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+     */
+    tdeStatus?: pulumi.Input<string>;
+    /**
+     * Whether to upgrade a minor version of the kernel. Valid values:
+     * - true: upgrade
+     * - false: not to upgrade
+     */
+    upgradeDbInstanceKernelVersion?: pulumi.Input<boolean>;
+    /**
+     * The method to update the minor engine version. Default value: Immediate. It is valid only when `upgradeDbInstanceKernelVersion = true`. Valid values:
+     * - Immediate: The minor engine version is immediately updated.
+     * - MaintainTime: The minor engine version is updated during the maintenance window. For more information about how to change the maintenance window, see ModifyDBInstanceMaintainTime.
+     * - SpecifyTime: The minor engine version is updated at the point in time you specify.
+     */
+    upgradeTime?: pulumi.Input<string>;
+    /**
+     * The VPC ID of the instance.
+     */
+    vpcId?: pulumi.Input<string>;
+    /**
+     * The virtual switch ID to launch DB instances in one VPC. If there are multiple vswitches, separate them with commas.
+     */
+    vswitchId?: pulumi.Input<string>;
+    /**
+     * The network type of the IP address whitelist. Default value: MIX. Valid values:
+     * - Classic: classic network in enhanced whitelist mode
+     * - VPC: virtual private cloud (VPC) in enhanced whitelist mode
+     * - MIX: standard whitelist mode
+     */
+    whitelistNetworkType?: pulumi.Input<string>;
+    /**
+     * The Zone to launch the DB instance. It supports multiple zone.
+     * If it is a multi-zone and `vswitchId` is specified, the vswitch must in the one of them.
+     * The multiple zone ID can be retrieved by setting `multi` to "true" in the data source `alicloud.getZones`.
+     */
+    zoneId?: pulumi.Input<string>;
+    /**
+     * The region ID of the secondary instance if you create a secondary instance.
+     */
+    zoneIdSlaveA?: pulumi.Input<string>;
+    /**
+     * The region ID of the log instance if you create a log instance.
+     */
+    zoneIdSlaveB?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a DdrInstance resource.
+ */
+export interface DdrInstanceArgs {
+    /**
+     * The method that is used to verify the identities of clients. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - cert
+     * - perfer
+     * - verify-ca
+     * - verify-full (supported only when the instance runs PostgreSQL 12 or later)
+     */
+    acl?: pulumi.Input<string>;
+    /**
+     * Whether to renewal a DB instance automatically or not. It is valid when paymentType is `Subscription`. Default to `false`.
+     */
+    autoRenew?: pulumi.Input<boolean>;
+    /**
+     * Auto-renewal period of an instance, in the unit of the month. It is valid when paymentType is `Subscription`. Valid value:[1~12], Default to 1.
+     */
+    autoRenewPeriod?: pulumi.Input<number>;
+    /**
+     * The upgrade method to use. Valid values:
+     * - Auto: Instances are automatically upgraded to a higher minor version.
+     * - Manual: Instances are forcibly upgraded to a higher minor version when the current version is unpublished.
+     */
+    autoUpgradeMinorVersion?: pulumi.Input<string>;
+    /**
+     * The ID of the backup set that is used for the restoration. You can call the DescribeCrossRegionBackups operation to query the ID of the backup set.
+     */
+    backupSetId?: pulumi.Input<string>;
+    /**
+     * The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+     * - aliyun: a cloud certificate
+     * - custom: a custom certificate
+     */
+    caType?: pulumi.Input<string>;
+    /**
+     * The public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCAEbabled parameter to 1, you must also specify this parameter.
+     */
+    clientCaCert?: pulumi.Input<string>;
+    /**
+     * Specifies whether to enable the public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. Valid values:
+     * - 1: enables the public key
+     * - 0: disables the public key
+     */
+    clientCaEnabled?: pulumi.Input<number>;
+    /**
+     * The CRL that contains revoked client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCrlEnabled parameter to 1, you must also specify this parameter.
+     */
+    clientCertRevocationList?: pulumi.Input<string>;
+    /**
+     * Specifies whether to enable a certificate revocation list (CRL) that contains revoked client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - 1: enables the CRL
+     * - 0: disables the CRL
+     */
+    clientCrlEnabled?: pulumi.Input<number>;
+    connectionStringPrefix?: pulumi.Input<string>;
+    /**
+     * The attribute of the IP address whitelist. By default, this parameter is empty.
+     */
+    dbInstanceIpArrayAttribute?: pulumi.Input<string>;
+    /**
+     * The name of the IP address whitelist. Default value: Default.
+     */
+    dbInstanceIpArrayName?: pulumi.Input<string>;
+    /**
+     * The storage type of the instance. Valid values:
+     * - local_ssd: specifies to use local SSDs. This value is recommended.
+     * - cloud_ssd: specifies to use standard SSDs.
+     * - cloud_essd: specifies to use enhanced SSDs (ESSDs).
+     * - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
+     * - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
+     */
+    dbInstanceStorageType?: pulumi.Input<string>;
+    /**
+     * The switch of delete protection. Valid values:
+     * - true: delete protect.
+     * - false: no delete protect.
+     */
+    deletionProtection?: pulumi.Input<boolean>;
+    /**
+     * The method to update the engine version.  Default value: Immediate. Valid values:
+     * - Immediate: The change immediately takes effect.
+     * - MaintainTime: The change takes effect during the specified maintenance window. For more information, see ModifyDBInstanceMaintainTime.
+     */
+    effectiveTime?: pulumi.Input<string>;
+    /**
+     * The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+     */
+    encryptionKey?: pulumi.Input<string>;
+    /**
+     * Database type. Value options: MySQL, SQLServer.
+     */
+    engine: pulumi.Input<string>;
+    /**
+     * Database version. Value options can refer to the latest docs [CreateDdrInstance](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/restore-data-to-a-new-instance-across-regions) `EngineVersion`.
+     */
+    engineVersion: pulumi.Input<string>;
+    /**
+     * Set it to true to make some parameter efficient when modifying them. Default to false.
+     */
+    forceRestart?: pulumi.Input<boolean>;
+    /**
+     * The read-only instances to which you want to synchronize the IP address whitelist.
+     * * If the instance is attached with a read-only instance, you can use this parameter to synchronize the IP address whitelist to the read-only instance. If the instance is attached with multiple read-only instances, the read-only instances must be separated by commas (,).
+     * * If the instance is not attached with a read-only instance, this parameter is empty.
+     */
+    freshWhiteListReadins?: pulumi.Input<string>;
+    /**
+     * The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
+     * - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
+     * - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
+     */
+    haConfig?: pulumi.Input<string>;
+    /**
+     * The name of DB instance. It a string of 2 to 256 characters.
+     */
+    instanceName?: pulumi.Input<string>;
+    /**
+     * The storage capacity of the destination instance. Valid values: 5 to 2000. Unit: GB.
+     */
+    instanceStorage: pulumi.Input<number>;
+    /**
+     * DB Instance type.
+     */
+    instanceType: pulumi.Input<string>;
+    /**
+     * Maintainable time period format of the instance: HH:MMZ-HH:MMZ (UTC time)
+     */
+    maintainTime?: pulumi.Input<string>;
+    /**
+     * The time after when you want to enable automatic primary/secondary switchover. At most, you can set this parameter to 23:59:59 seven days later. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time must be in UTC.
+     */
+    manualHaTime?: pulumi.Input<string>;
+    /**
+     * The method that is used to modify the IP address whitelist. Default value: Cover. Valid values:
+     * - Cover: Use the value of the SecurityIps parameter to overwrite the existing entries in the IP address whitelist.
+     * - Append: Add the IP addresses and CIDR blocks that are specified in the SecurityIps parameter to the IP address whitelist.
+     * - Delete: Delete IP addresses and CIDR blocks that are specified in the SecurityIps parameter from the IP address whitelist. You must retain at least one IP address or CIDR block.
+     */
+    modifyMode?: pulumi.Input<string>;
+    /**
+     * The monitoring frequency in seconds. Valid values are 5, 60, 300. Defaults to 300.
+     */
+    monitoringPeriod?: pulumi.Input<number>;
+    /**
+     * Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) .
+     */
+    parameters?: pulumi.Input<pulumi.Input<inputs.rds.DdrInstanceParameter>[]>;
+    /**
+     * Valid values are `Subscription`, `PayAsYouGo`, Default to `PayAsYouGo`.
+     */
+    paymentType: pulumi.Input<string>;
+    period?: pulumi.Input<number>;
+    /**
+     * The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) (documented below).
+     */
+    pgHbaConfs?: pulumi.Input<pulumi.Input<inputs.rds.DdrInstancePgHbaConf>[]>;
+    port?: pulumi.Input<string>;
+    /**
+     * The private IP address of the instance. The private IP address must be within the Classless Inter-Domain Routing (CIDR) block of the vSwitch that is specified by the VSwitchId parameter.
+     */
+    privateIpAddress?: pulumi.Input<string>;
+    /**
+     * The policy based on which ApsaraDB RDS retains archived backup files after the instance is released. Valid values:
+     * - None: No archived backup files are retained.
+     * - Lastest: Only the last archived backup file is retained.
+     * - All: All the archived backup files are retained.
+     */
+    releasedKeepPolicy?: pulumi.Input<string>;
+    /**
+     * The method that is used to verify the replication permission. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
+     * - cert
+     * - perfer
+     * - verify-ca
+     * - verify-full (supported only when the instance runs PostgreSQL 12 or later)
+     */
+    replicationAcl?: pulumi.Input<string>;
+    /**
+     * The ID of resource group which the DB instance belongs.
+     */
+    resourceGroupId?: pulumi.Input<string>;
+    /**
+     * The point in time to which you want to restore data. The point in time that you specify must be earlier than the current time. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. The time must be in UTC.
+     */
+    restoreTime?: pulumi.Input<string>;
+    /**
+     * The method that is used to restore data. Valid values:
+     * - BackupSet: Data is restored from a backup set. If you use this value, you must also specify the BackupSetID parameter.
+     * - BackupTime: restores data to a point in time. You must also specify the RestoreTime, SourceRegion, and SourceDBInstanceName parameters.
+     */
+    restoreType: pulumi.Input<string>;
+    /**
+     * ) The list IDs to join ECS Security Group. At most supports three security groups.
+     */
+    securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Valid values are `normal`, `safety`, Default to `normal`. support `safety` switch to high security access mode.
+     */
+    securityIpMode?: pulumi.Input<string>;
+    /**
+     * The type of IP address in the IP address whitelist.
+     */
+    securityIpType?: pulumi.Input<string>;
+    /**
+     * List of IP addresses allowed to access all databases of an instance. The list contains up to 1,000 IP addresses, separated by commas. Supported formats include 0.0.0.0/0, 10.23.12.24 (IP), and 10.23.12.24/24 (Classless Inter-Domain Routing (CIDR) mode. /24 represents the length of the prefix in an IP address. The range of the prefix length is [1,32]).
+     */
+    securityIps?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+     */
+    serverCert?: pulumi.Input<string>;
+    /**
+     * The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+     */
+    serverKey?: pulumi.Input<string>;
+    /**
+     * The ID of the source instance if you want to restore data to a point in time.
+     * #### Block pg_hba_conf
+     */
+    sourceDbInstanceName?: pulumi.Input<string>;
+    /**
+     * The region ID of the source instance if you want to restore data to a point in time.
+     */
+    sourceRegion?: pulumi.Input<string>;
+    /**
+     * The sql collector keep time of the instance. Valid values are `30`, `180`, `365`, `1095`, `1825`, Default to `30`.
+     */
+    sqlCollectorConfigValue?: pulumi.Input<number>;
+    /**
+     * The sql collector status of the instance. Valid values are `Enabled`, `Disabled`, Default to `Disabled`.
+     */
+    sqlCollectorStatus?: pulumi.Input<string>;
+    /**
+     * Actions performed on SSL functions, Valid values: `Open`: turn on SSL encryption; `Close`: turn off SSL encryption; `Update`: update SSL certificate. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26254.htm).
+     */
+    sslAction?: pulumi.Input<string>;
+    /**
+     * Automatic storage space expansion switch. Valid values:
+     * - Enable
+     * - Disable
+     */
+    storageAutoScale?: pulumi.Input<string>;
+    /**
+     * The trigger threshold (percentage) for automatic storage space expansion. Valid values:
+     * - 10
+     * - 20
+     * - 30
+     * - 40
+     * - 50
+     */
+    storageThreshold?: pulumi.Input<number>;
+    /**
+     * The upper limit of the total storage space for automatic expansion of the storage space, that is, automatic expansion will not cause the total storage space of the instance to exceed this value. Unit: GB. The value must be ≥0.
+     */
+    storageUpperBound?: pulumi.Input<number>;
+    /**
+     * The specific point in time when you want to perform the update. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. It is valid only when `upgradeDbInstanceKernelVersion = true`. The time must be in UTC.
+     */
+    switchTime?: pulumi.Input<string>;
+    /**
+     * A mapping of tags to assign to the resource.
+     * - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
+     * - Value: It can be up to 128 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It can be a null string.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: any;
+    }>;
+    /**
+     * The minor engine version to which you want to update the instance. If you do not specify this parameter, the instance is updated to the latest minor engine version. It is valid only when `upgradeDbInstanceKernelVersion = true`. You must specify the minor engine version in one of the following formats:
+     * - PostgreSQL: rds_postgres_<Major engine version>00_<Minor engine version>. Example: rds_postgres_1200_20200830.
+     * - MySQL: <RDS edition>_<Minor engine version>. Examples: rds_20200229, xcluster_20200229, and xcluster80_20200229. The following RDS editions are supported:
+     * - rds: The instance runs RDS Basic or High-availability Edition.
+     * - xcluster: The instance runs MySQL 5.7 on RDS Enterprise Edition.
+     * - xcluster80: The instance runs MySQL 8.0 on RDS Enterprise Edition.
+     * - SQLServer: <Minor engine version>. Example: 15.0.4073.23.
+     */
+    targetMinorVersion?: pulumi.Input<string>;
+    /**
+     * The availability check method of the instance. Valid values:
+     * - **SHORT**: Alibaba Cloud uses short-lived connections to check the availability of the instance.
+     * - **LONG**: Alibaba Cloud uses persistent connections to check the availability of the instance.
+     */
+    tcpConnectionType?: pulumi.Input<string>;
+    /**
+     * The TDE(Transparent Data Encryption) status. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+     */
+    tdeStatus?: pulumi.Input<string>;
+    /**
+     * Whether to upgrade a minor version of the kernel. Valid values:
+     * - true: upgrade
+     * - false: not to upgrade
+     */
+    upgradeDbInstanceKernelVersion?: pulumi.Input<boolean>;
+    /**
+     * The method to update the minor engine version. Default value: Immediate. It is valid only when `upgradeDbInstanceKernelVersion = true`. Valid values:
+     * - Immediate: The minor engine version is immediately updated.
+     * - MaintainTime: The minor engine version is updated during the maintenance window. For more information about how to change the maintenance window, see ModifyDBInstanceMaintainTime.
+     * - SpecifyTime: The minor engine version is updated at the point in time you specify.
+     */
+    upgradeTime?: pulumi.Input<string>;
+    /**
+     * The VPC ID of the instance.
+     */
+    vpcId?: pulumi.Input<string>;
+    /**
+     * The virtual switch ID to launch DB instances in one VPC. If there are multiple vswitches, separate them with commas.
+     */
+    vswitchId?: pulumi.Input<string>;
+    /**
+     * The network type of the IP address whitelist. Default value: MIX. Valid values:
+     * - Classic: classic network in enhanced whitelist mode
+     * - VPC: virtual private cloud (VPC) in enhanced whitelist mode
+     * - MIX: standard whitelist mode
+     */
+    whitelistNetworkType?: pulumi.Input<string>;
+    /**
+     * The Zone to launch the DB instance. It supports multiple zone.
+     * If it is a multi-zone and `vswitchId` is specified, the vswitch must in the one of them.
+     * The multiple zone ID can be retrieved by setting `multi` to "true" in the data source `alicloud.getZones`.
+     */
+    zoneId?: pulumi.Input<string>;
+}