@pulumi/aws-native 0.60.0 → 0.61.0

package/types/input.d.ts

@@ -2649,15 +2649,33 @@ export declare namespace appflow {
     }
 }
 export declare namespace appintegrations {
+    /**
+     * The configuration for what files should be pulled from the source.
+     */
+    interface DataIntegrationFileConfigurationArgs {
+        /**
+         * Restrictions for what files should be pulled from the source.
+         */
+        filters?: any;
+        /**
+         * Identifiers for the source folders to pull all files from recursively.
+         */
+        folders: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    /**
+     * The configuration for what data should be pulled from the source.
+     */
+    interface DataIntegrationObjectConfigurationArgs {
+    }
     interface DataIntegrationScheduleConfigArgs {
         /**
          * The start date for objects to import in the first flow run. Epoch or ISO timestamp format is supported.
          */
-        firstExecutionFrom: pulumi.Input<string>;
+        firstExecutionFrom?: pulumi.Input<string>;
         /**
          * The name of the object to pull from the data source.
          */
-        object: pulumi.Input<string>;
+        object?: pulumi.Input<string>;
         /**
          * How often the data should be pulled from data source.
          */
@@ -4809,6 +4827,12 @@ export declare namespace backup {
         reportTemplate: pulumi.Input<string>;
     }
 }
+export declare namespace backupgateway {
+    interface HypervisorTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
+}
 export declare namespace batch {
     interface ComputeEnvironmentComputeResourcesArgs {
         allocationStrategy?: pulumi.Input<string>;
@@ -8851,6 +8875,23 @@ export declare namespace devicefarm {
         key: pulumi.Input<string>;
         value: pulumi.Input<string>;
     }
+    /**
+     * The VPC security groups and subnets that are attached to a project
+     */
+    interface ProjectVpcConfigArgs {
+        /**
+         * An array of security group Ids in your Amazon VPC
+         */
+        securityGroupIds: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * A array of subnet IDs in your Amazon VPC.
+         */
+        subnetIds: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The ID of the Amazon VPC
+         */
+        vpcId: pulumi.Input<string>;
+    }
     interface TestGridProjectTagArgs {
         key: pulumi.Input<string>;
         value: pulumi.Input<string>;
@@ -9950,6 +9991,7 @@ export declare namespace ec2 {
         capacityReservationResourceGroupArn?: pulumi.Input<string>;
     }
     interface LaunchTemplateCpuOptionsArgs {
+        amdSevSnp?: pulumi.Input<string>;
         coreCount?: pulumi.Input<number>;
         threadsPerCore?: pulumi.Input<number>;
     }
@@ -10215,6 +10257,16 @@ export declare namespace ec2 {
         key: pulumi.Input<string>;
         value?: pulumi.Input<string>;
     }
+    interface NetworkInsightsPathFilterPortRangeArgs {
+        fromPort?: pulumi.Input<number>;
+        toPort?: pulumi.Input<number>;
+    }
+    interface NetworkInsightsPathPathFilterArgs {
+        destinationAddress?: pulumi.Input<string>;
+        destinationPortRange?: pulumi.Input<inputs.ec2.NetworkInsightsPathFilterPortRangeArgs>;
+        sourceAddress?: pulumi.Input<string>;
+        sourcePortRange?: pulumi.Input<inputs.ec2.NetworkInsightsPathFilterPortRangeArgs>;
+    }
     interface NetworkInsightsPathTagArgs {
         key: pulumi.Input<string>;
         value?: pulumi.Input<string>;
@@ -10607,6 +10659,227 @@ export declare namespace ec2 {
         key: pulumi.Input<string>;
         value: pulumi.Input<string>;
     }
+    /**
+     * The load balancer details if creating the AWS Verified Access endpoint as load-balancertype.
+     */
+    interface VerifiedAccessEndpointLoadBalancerOptionsArgs {
+        /**
+         * The ARN of the load balancer.
+         */
+        loadBalancerArn?: pulumi.Input<string>;
+        /**
+         * The IP port number.
+         */
+        port?: pulumi.Input<number>;
+        /**
+         * The IP protocol.
+         */
+        protocol?: pulumi.Input<string>;
+        /**
+         * The IDs of the subnets.
+         */
+        subnetIds?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    /**
+     * The options for network-interface type endpoint.
+     */
+    interface VerifiedAccessEndpointNetworkInterfaceOptionsArgs {
+        /**
+         * The ID of the network interface.
+         */
+        networkInterfaceId?: pulumi.Input<string>;
+        /**
+         * The IP port number.
+         */
+        port?: pulumi.Input<number>;
+        /**
+         * The IP protocol.
+         */
+        protocol?: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface VerifiedAccessEndpointTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface VerifiedAccessGroupTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface VerifiedAccessInstanceTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
+    /**
+     * The configuration options for AWS Verified Access instances.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessLogsArgs {
+        /**
+         * Sends Verified Access logs to CloudWatch Logs.
+         */
+        cloudWatchLogs?: pulumi.Input<inputs.ec2.VerifiedAccessInstanceVerifiedAccessLogsCloudWatchLogsPropertiesArgs>;
+        /**
+         * Sends Verified Access logs to Kinesis.
+         */
+        kinesisDataFirehose?: pulumi.Input<inputs.ec2.VerifiedAccessInstanceVerifiedAccessLogsKinesisDataFirehosePropertiesArgs>;
+        /**
+         * Sends Verified Access logs to Amazon S3.
+         */
+        s3?: pulumi.Input<inputs.ec2.VerifiedAccessInstanceVerifiedAccessLogsS3PropertiesArgs>;
+    }
+    /**
+     * Sends Verified Access logs to CloudWatch Logs.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessLogsCloudWatchLogsPropertiesArgs {
+        /**
+         * Indicates whether logging is enabled.
+         */
+        enabled?: pulumi.Input<boolean>;
+        /**
+         * The ID of the CloudWatch Logs log group.
+         */
+        logGroup?: pulumi.Input<string>;
+    }
+    /**
+     * Sends Verified Access logs to Kinesis.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessLogsKinesisDataFirehosePropertiesArgs {
+        /**
+         * The ID of the delivery stream.
+         */
+        deliveryStream?: pulumi.Input<string>;
+        /**
+         * Indicates whether logging is enabled.
+         */
+        enabled?: pulumi.Input<boolean>;
+    }
+    /**
+     * Sends Verified Access logs to Amazon S3.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessLogsS3PropertiesArgs {
+        /**
+         * The bucket name.
+         */
+        bucketName?: pulumi.Input<string>;
+        /**
+         * The ID of the AWS account that owns the Amazon S3 bucket.
+         */
+        bucketOwner?: pulumi.Input<string>;
+        /**
+         * Indicates whether logging is enabled.
+         */
+        enabled?: pulumi.Input<boolean>;
+        /**
+         * The bucket prefix.
+         */
+        prefix?: pulumi.Input<string>;
+    }
+    /**
+     * A Verified Access Trust Provider.
+     */
+    interface VerifiedAccessInstanceVerifiedAccessTrustProviderArgs {
+        /**
+         * The description of trust provider.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * The type of device-based trust provider.
+         */
+        deviceTrustProviderType?: pulumi.Input<string>;
+        /**
+         * The type of trust provider (user- or device-based).
+         */
+        trustProviderType?: pulumi.Input<string>;
+        /**
+         * The type of user-based trust provider.
+         */
+        userTrustProviderType?: pulumi.Input<string>;
+        /**
+         * The ID of the trust provider.
+         */
+        verifiedAccessTrustProviderId?: pulumi.Input<string>;
+    }
+    /**
+     * The options for device identity based trust providers.
+     */
+    interface VerifiedAccessTrustProviderDeviceOptionsArgs {
+        /**
+         * The ID of the tenant application with the device-identity provider.
+         */
+        tenantId?: pulumi.Input<string>;
+    }
+    /**
+     * The OpenID Connect details for an oidc -type, user-identity based trust provider.
+     */
+    interface VerifiedAccessTrustProviderOidcOptionsArgs {
+        /**
+         * The OIDC authorization endpoint.
+         */
+        authorizationEndpoint?: pulumi.Input<string>;
+        /**
+         * The client identifier.
+         */
+        clientId?: pulumi.Input<string>;
+        /**
+         * The client secret.
+         */
+        clientSecret?: pulumi.Input<string>;
+        /**
+         * The OIDC issuer.
+         */
+        issuer?: pulumi.Input<string>;
+        /**
+         * OpenID Connect (OIDC) scopes are used by an application during authentication to authorize access to details of a user. Each scope returns a specific set of user attributes.
+         */
+        scope?: pulumi.Input<string>;
+        /**
+         * The OIDC token endpoint.
+         */
+        tokenEndpoint?: pulumi.Input<string>;
+        /**
+         * The OIDC user info endpoint.
+         */
+        userInfoEndpoint?: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface VerifiedAccessTrustProviderTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
     interface VolumeTagArgs {
         /**
          * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
@@ -15752,6 +16025,22 @@ export declare namespace iot {
         key: pulumi.Input<string>;
         value: pulumi.Input<string>;
     }
+    interface BillingGroupPropertiesPropertiesArgs {
+        billingGroupDescription?: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface BillingGroupTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
     interface CACertificateRegistrationConfigArgs {
         roleArn?: pulumi.Input<string>;
         templateBody?: pulumi.Input<string>;
@@ -16165,6 +16454,43 @@ export declare namespace iot {
     interface ThingAttributePayloadArgs {
         attributes?: any;
     }
+    interface ThingGroupAttributePayloadArgs {
+        attributes?: any;
+    }
+    interface ThingGroupPropertiesPropertiesArgs {
+        attributePayload?: pulumi.Input<inputs.iot.ThingGroupAttributePayloadArgs>;
+        thingGroupDescription?: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface ThingGroupTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
+    interface ThingTypePropertiesPropertiesArgs {
+        searchableAttributes?: pulumi.Input<pulumi.Input<string>[]>;
+        thingTypeDescription?: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface ThingTypeTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
     /**
      * Specifies the amount of time each device has to finish its execution of the job.
      */
@@ -19525,7 +19851,6 @@ export declare namespace kinesisfirehose {
     }
     interface DeliveryStreamAmazonOpenSearchServerlessDestinationConfigurationArgs {
         bufferingHints?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamAmazonOpenSearchServerlessBufferingHintsArgs>;
-        bulkRequestCustomizationConfiguration?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamBulkRequestCustomizationConfigurationArgs>;
         cloudWatchLoggingOptions?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamCloudWatchLoggingOptionsArgs>;
         collectionEndpoint?: pulumi.Input<string>;
         indexName: pulumi.Input<string>;
@@ -19545,7 +19870,6 @@ export declare namespace kinesisfirehose {
     }
     interface DeliveryStreamAmazonopensearchserviceDestinationConfigurationArgs {
         bufferingHints?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamAmazonopensearchserviceBufferingHintsArgs>;
-        bulkRequestCustomizationConfiguration?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamBulkRequestCustomizationConfigurationArgs>;
         cloudWatchLoggingOptions?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamCloudWatchLoggingOptionsArgs>;
         clusterEndpoint?: pulumi.Input<string>;
         documentIdOptions?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamDocumentIdOptionsArgs>;
@@ -19567,11 +19891,6 @@ export declare namespace kinesisfirehose {
         intervalInSeconds?: pulumi.Input<number>;
         sizeInMBs?: pulumi.Input<number>;
     }
-    interface DeliveryStreamBulkRequestCustomizationConfigurationArgs {
-        enabled?: pulumi.Input<boolean>;
-        jqExpression?: pulumi.Input<string>;
-        jqVersion?: pulumi.Input<enums.kinesisfirehose.DeliveryStreamBulkRequestCustomizationConfigurationJqVersion>;
-    }
     interface DeliveryStreamCloudWatchLoggingOptionsArgs {
         enabled?: pulumi.Input<boolean>;
         logGroupName?: pulumi.Input<string>;
@@ -19605,7 +19924,6 @@ export declare namespace kinesisfirehose {
     }
     interface DeliveryStreamElasticsearchDestinationConfigurationArgs {
         bufferingHints?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamElasticsearchBufferingHintsArgs>;
-        bulkRequestCustomizationConfiguration?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamBulkRequestCustomizationConfigurationArgs>;
         cloudWatchLoggingOptions?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamCloudWatchLoggingOptionsArgs>;
         clusterEndpoint?: pulumi.Input<string>;
         documentIdOptions?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamDocumentIdOptionsArgs>;
@@ -21715,6 +22033,19 @@ export declare namespace lightsail {
          */
         snapshotTimeOfDay?: pulumi.Input<string>;
     }
+    /**
+     * Location of a resource.
+     */
+    interface DiskLocationArgs {
+        /**
+         * The Availability Zone in which to create your disk. Use the following format: us-east-2a (case sensitive). Be sure to add the include Availability Zones parameter to your request.
+         */
+        availabilityZone?: pulumi.Input<string>;
+        /**
+         * The Region Name in which to create your disk.
+         */
+        regionName?: pulumi.Input<string>;
+    }
     /**
      * A key-value pair to associate with a resource.
      */
@@ -24718,6 +25049,7 @@ export declare namespace neptune {
 }
 export declare namespace networkfirewall {
     interface FirewallPolicyArgs {
+        policyVariables?: pulumi.Input<inputs.networkfirewall.FirewallPolicyPolicyVariablesPropertiesArgs>;
         statefulDefaultActions?: pulumi.Input<pulumi.Input<string>[]>;
         statefulEngineOptions?: pulumi.Input<inputs.networkfirewall.FirewallPolicyStatefulEngineOptionsArgs>;
         statefulRuleGroupReferences?: pulumi.Input<pulumi.Input<inputs.networkfirewall.FirewallPolicyStatefulRuleGroupReferenceArgs>[]>;
@@ -24736,9 +25068,14 @@ export declare namespace networkfirewall {
     interface FirewallPolicyDimensionArgs {
         value: pulumi.Input<string>;
     }
+    interface FirewallPolicyPolicyVariablesPropertiesArgs {
+        ruleVariables?: pulumi.Input<inputs.networkfirewall.FirewallPolicyRuleVariablesArgs>;
+    }
     interface FirewallPolicyPublishMetricActionArgs {
         dimensions: pulumi.Input<pulumi.Input<inputs.networkfirewall.FirewallPolicyDimensionArgs>[]>;
     }
+    interface FirewallPolicyRuleVariablesArgs {
+    }
     interface FirewallPolicyStatefulEngineOptionsArgs {
         ruleOrder?: pulumi.Input<enums.networkfirewall.FirewallPolicyRuleOrder>;
         streamExceptionPolicy?: pulumi.Input<enums.networkfirewall.FirewallPolicyStreamExceptionPolicy>;
@@ -25626,6 +25963,53 @@ export declare namespace organizations {
         value: pulumi.Input<string>;
     }
 }
+export declare namespace osis {
+    /**
+     * Key-value pairs to configure log publishing.
+     */
+    interface PipelineLogPublishingOptionsArgs {
+        /**
+         * The destination for OpenSearch Ingestion Service logs sent to Amazon CloudWatch.
+         */
+        cloudWatchLogDestination?: pulumi.Input<inputs.osis.PipelineLogPublishingOptionsCloudWatchLogDestinationPropertiesArgs>;
+        /**
+         * Whether logs should be published.
+         */
+        isLoggingEnabled?: pulumi.Input<boolean>;
+    }
+    /**
+     * The destination for OpenSearch Ingestion Service logs sent to Amazon CloudWatch.
+     */
+    interface PipelineLogPublishingOptionsCloudWatchLogDestinationPropertiesArgs {
+        logGroup?: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface PipelineTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
+    /**
+     * Container for the values required to configure VPC access for the pipeline. If you don't specify these values, OpenSearch Ingestion Service creates the pipeline with a public endpoint.
+     */
+    interface PipelineVpcOptionsArgs {
+        /**
+         * A list of security groups associated with the VPC endpoint.
+         */
+        securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * A list of subnet IDs associated with the VPC endpoint.
+         */
+        subnetIds?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+}
 export declare namespace panorama {
     interface ApplicationInstanceManifestOverridesPayloadArgs {
         payloadData?: pulumi.Input<string>;
@@ -26461,6 +26845,47 @@ export declare namespace pipes {
         invocationType?: pulumi.Input<enums.pipes.PipeTargetInvocationType>;
     }
 }
+export declare namespace proton {
+    /**
+     * <p>A description of a resource tag.</p>
+     */
+    interface EnvironmentAccountConnectionTagArgs {
+        /**
+         * <p>The key of the resource tag.</p>
+         */
+        key: pulumi.Input<string>;
+        /**
+         * <p>The value of the resource tag.</p>
+         */
+        value: pulumi.Input<string>;
+    }
+    /**
+     * <p>A description of a resource tag.</p>
+     */
+    interface EnvironmentTemplateTagArgs {
+        /**
+         * <p>The key of the resource tag.</p>
+         */
+        key: pulumi.Input<string>;
+        /**
+         * <p>The value of the resource tag.</p>
+         */
+        value: pulumi.Input<string>;
+    }
+    /**
+     * <p>A description of a resource tag.</p>
+     */
+    interface ServiceTemplateTagArgs {
+        /**
+         * <p>The key of the resource tag.</p>
+         */
+        key: pulumi.Input<string>;
+        /**
+         * <p>The value of the resource tag.</p>
+         */
+        value: pulumi.Input<string>;
+    }
+}
 export declare namespace qldb {
     interface LedgerTagArgs {
         key: pulumi.Input<string>;
@@ -40161,23 +40586,71 @@ export declare namespace secretsmanager {
         scheduleExpression?: pulumi.Input<string>;
     }
     interface SecretGenerateSecretStringArgs {
+        /**
+         * A string that excludes characters in the generated password. By default, all characters from the included sets can be used. The string can be a minimum length of 0 characters and a maximum length of 7168 characters.
+         */
         excludeCharacters?: pulumi.Input<string>;
+        /**
+         * Specifies the generated password should not include lowercase letters. By default, ecrets Manager disables this parameter, and the generated password can include lowercase False, and the generated password can include lowercase letters.
+         */
         excludeLowercase?: pulumi.Input<boolean>;
+        /**
+         * Specifies that the generated password should exclude digits. By default, Secrets Manager does not enable the parameter, False, and the generated password can include digits.
+         */
         excludeNumbers?: pulumi.Input<boolean>;
+        /**
+         * Specifies that the generated password should not include punctuation characters. The default if you do not include this switch parameter is that punctuation characters can be included.
+         */
         excludePunctuation?: pulumi.Input<boolean>;
+        /**
+         * Specifies that the generated password should not include uppercase letters. The default behavior is False, and the generated password can include uppercase letters.
+         */
         excludeUppercase?: pulumi.Input<boolean>;
+        /**
+         * The JSON key name used to add the generated password to the JSON structure specified by the SecretStringTemplate parameter. If you specify this parameter, then you must also specify SecretStringTemplate.
+         */
         generateStringKey?: pulumi.Input<string>;
+        /**
+         * Specifies that the generated password can include the space character. By default, Secrets Manager disables this parameter, and the generated password doesn't include space
+         */
         includeSpace?: pulumi.Input<boolean>;
+        /**
+         * The desired length of the generated password. The default value if you do not include this parameter is 32 characters.
+         */
         passwordLength?: pulumi.Input<number>;
+        /**
+         * Specifies whether the generated password must include at least one of every allowed character type. By default, Secrets Manager enables this parameter, and the generated password includes at least one of every character type.
+         */
         requireEachIncludedType?: pulumi.Input<boolean>;
+        /**
+         * A properly structured JSON string that the generated password can be added to. If you specify this parameter, then you must also specify GenerateStringKey.
+         */
         secretStringTemplate?: pulumi.Input<string>;
     }
+    /**
+     * A custom type that specifies a Region and the KmsKeyId for a replica secret.
+     */
     interface SecretReplicaRegionArgs {
+        /**
+         * The ARN, key ID, or alias of the KMS key to encrypt the secret. If you don't include this field, Secrets Manager uses aws/secretsmanager.
+         */
         kmsKeyId?: pulumi.Input<string>;
+        /**
+         * (Optional) A string that represents a Region, for example "us-east-1".
+         */
         region: pulumi.Input<string>;
     }
+    /**
+     * A list of tags to attach to the secret. Each tag is a key and value pair of strings in a JSON text string.
+     */
     interface SecretTagArgs {
+        /**
+         * The value for the tag. You can specify a value that's 1 to 256 characters in length.
+         */
         key: pulumi.Input<string>;
+        /**
+         * The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws.
+         */
         value: pulumi.Input<string>;
     }
 }