@pulumi/vault 6.1.0 → 6.1.1

package/types/output.d.ts

@@ -78,23 +78,11 @@ export interface GetPolicyDocumentRule {
     requiredParameters?: string[];
 }
 export interface GetPolicyDocumentRuleAllowedParameter {
-    /**
-     * name of permitted or denied parameter.
-     */
     key: string;
-    /**
-     * list of values what are permitted or denied by policy rule.
-     */
     values: string[];
 }
 export interface GetPolicyDocumentRuleDeniedParameter {
-    /**
-     * name of permitted or denied parameter.
-     */
     key: string;
-    /**
-     * list of values what are permitted or denied by policy rule.
-     */
     values: string[];
 }
 export declare namespace azure {
@@ -508,35 +496,31 @@ export declare namespace config {
 export declare namespace database {
     interface SecretBackendConnectionCassandra {
         /**
-         * The number of seconds to use as a connection
-         * timeout.
+         * The number of seconds to use as a connection timeout.
          */
         connectTimeout?: number;
         /**
-         * The hosts to connect to.
+         * Cassandra hosts to connect to.
          */
         hosts?: string[];
         /**
-         * Whether to skip verification of the server
-         * certificate when using TLS.
+         * Whether to skip verification of the server certificate when using TLS.
          */
         insecureTls?: boolean;
         /**
-         * The password to authenticate with.
+         * The password to use when authenticating with Cassandra.
          */
         password?: string;
         /**
-         * Concatenated PEM blocks configuring the certificate
-         * chain.
+         * Concatenated PEM blocks containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.
          */
         pemBundle?: string;
         /**
-         * A JSON structure configuring the certificate chain.
+         * Specifies JSON containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.
          */
         pemJson?: string;
         /**
-         * The default port to connect to if no port is specified as
-         * part of the host.
+         * The transport port to use to connect to Cassandra.
          */
         port?: number;
         /**
@@ -548,7 +532,7 @@ export declare namespace database {
          */
         tls?: boolean;
         /**
-         * The username to authenticate with.
+         * The username to use when authenticating with Cassandra.
          */
         username?: string;
     }
@@ -562,24 +546,23 @@ export declare namespace database {
          */
         bucketName?: string;
         /**
-         * The hosts to connect to.
+         * A set of Couchbase URIs to connect to. Must use `couchbases://` scheme if `tls` is `true`.
          */
         hosts: string[];
         /**
-         * Whether to skip verification of the server
-         * certificate when using TLS.
+         * Specifies whether to skip verification of the server certificate when using TLS.
          */
         insecureTls?: boolean;
         /**
-         * The password to authenticate with.
+         * Specifies the password corresponding to the given username.
          */
         password: string;
         /**
-         * Whether to use TLS when connecting to Cassandra.
+         * Specifies whether to use TLS when connecting to Couchbase.
          */
         tls?: boolean;
         /**
-         * The username to authenticate with.
+         * Specifies the username for Vault to use.
          */
         username: string;
         /**
@@ -589,40 +572,39 @@ export declare namespace database {
     }
     interface SecretBackendConnectionElasticsearch {
         /**
-         * The path to a PEM-encoded CA cert file to use to verify the Elasticsearch server's identity.
+         * The path to a PEM-encoded CA cert file to use to verify the Elasticsearch server's identity
          */
         caCert?: string;
         /**
-         * The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.
+         * The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity
          */
         caPath?: string;
         /**
-         * The path to the certificate for the Elasticsearch client to present for communication.
+         * The path to the certificate for the Elasticsearch client to present for communication
          */
         clientCert?: string;
         /**
-         * The path to the key for the Elasticsearch client to use for communication.
+         * The path to the key for the Elasticsearch client to use for communication
          */
         clientKey?: string;
         /**
-         * Whether to disable certificate verification.
+         * Whether to disable certificate verification
          */
         insecure?: boolean;
         /**
-         * The password to authenticate with.
+         * The password to be used in the connection URL
          */
         password: string;
         /**
-         * This, if set, is used to set the SNI host when connecting via TLS.
+         * This, if set, is used to set the SNI host when connecting via TLS
          */
         tlsServerName?: string;
         /**
-         * The URL for Elasticsearch's API. https requires certificate
-         * by trusted CA if used.
+         * The URL for Elasticsearch's API
          */
         url: string;
         /**
-         * The username to authenticate with.
+         * The username to be used in the connection URL
          */
         username: string;
         /**
@@ -632,79 +614,69 @@ export declare namespace database {
     }
     interface SecretBackendConnectionHana {
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * Disable special character escaping in username and password.
+         * Disable special character escaping in username and password
          */
         disableEscaping?: boolean;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
     }
     interface SecretBackendConnectionInfluxdb {
         /**
-         * The number of seconds to use as a connection
-         * timeout.
+         * The number of seconds to use as a connection timeout.
          */
         connectTimeout?: number;
         /**
-         * The host to connect to.
+         * Influxdb host to connect to.
          */
         host: string;
         /**
-         * Whether to skip verification of the server
-         * certificate when using TLS.
+         * Whether to skip verification of the server certificate when using TLS.
          */
         insecureTls?: boolean;
         /**
-         * The password to authenticate with.
+         * Specifies the password corresponding to the given username.
          */
         password: string;
         /**
-         * Concatenated PEM blocks configuring the certificate
-         * chain.
+         * Concatenated PEM blocks containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.
          */
         pemBundle?: string;
         /**
-         * A JSON structure configuring the certificate chain.
+         * Specifies JSON containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.
          */
         pemJson?: string;
         /**
-         * The default port to connect to if no port is specified as
-         * part of the host.
+         * The transport port to use to connect to Influxdb.
          */
         port?: number;
         /**
-         * Whether to use TLS when connecting to Cassandra.
+         * Whether to use TLS when connecting to Influxdb.
          */
         tls?: boolean;
         /**
-         * The username to authenticate with.
+         * Specifies the username to use for superuser access.
          */
         username: string;
         /**
@@ -714,37 +686,31 @@ export declare namespace database {
     }
     interface SecretBackendConnectionMongodb {
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
@@ -764,84 +730,69 @@ export declare namespace database {
     }
     interface SecretBackendConnectionMssql {
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * For Vault v1.9+. Set to true when the target is a
-         * Contained Database, e.g. AzureSQL.
-         * See the [Vault
-         * docs](https://www.vaultproject.io/api/secret/databases/mssql#contained_db)
+         * Set to true when the target is a Contained Database, e.g. AzureSQL.
          */
         containedDb?: boolean;
         /**
-         * Disable special character escaping in username and password.
+         * Disable special character escaping in username and password
          */
         disableEscaping?: boolean;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
     interface SecretBackendConnectionMysql {
         /**
-         * Enable IAM authentication to a Google Cloud instance when set to `gcpIam`
+         * Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
          */
         authType?: string;
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * JSON encoding of an IAM access key. Requires `authType` to be `gcpIam`.
+         * A JSON encoded credential for use with IAM authorization
          */
         serviceAccountJson?: string;
         /**
@@ -853,47 +804,41 @@ export declare namespace database {
          */
         tlsCertificateKey?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
     interface SecretBackendConnectionMysqlAurora {
         /**
-         * Enable IAM authentication to a Google Cloud instance when set to `gcpIam`
+         * Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
          */
         authType?: string;
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * JSON encoding of an IAM access key. Requires `authType` to be `gcpIam`.
+         * A JSON encoded credential for use with IAM authorization
          */
         serviceAccountJson?: string;
         /**
@@ -905,47 +850,41 @@ export declare namespace database {
          */
         tlsCertificateKey?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
     interface SecretBackendConnectionMysqlLegacy {
         /**
-         * Enable IAM authentication to a Google Cloud instance when set to `gcpIam`
+         * Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
          */
         authType?: string;
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * JSON encoding of an IAM access key. Requires `authType` to be `gcpIam`.
+         * A JSON encoded credential for use with IAM authorization
          */
         serviceAccountJson?: string;
         /**
@@ -957,47 +896,41 @@ export declare namespace database {
          */
         tlsCertificateKey?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
     interface SecretBackendConnectionMysqlRds {
         /**
-         * Enable IAM authentication to a Google Cloud instance when set to `gcpIam`
+         * Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
          */
         authType?: string;
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * JSON encoding of an IAM access key. Requires `authType` to be `gcpIam`.
+         * A JSON encoded credential for use with IAM authorization
          */
         serviceAccountJson?: string;
         /**
@@ -1009,230 +942,203 @@ export declare namespace database {
          */
         tlsCertificateKey?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
     interface SecretBackendConnectionOracle {
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * Enable the built-in session disconnect mechanism.
+         * Set to true to disconnect any open sessions prior to running the revocation statements.
          */
         disconnectSessions?: boolean;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * Enable spliting statements after semi-colons.
+         * Set to true in order to split statements after semi-colons.
          */
         splitStatements?: boolean;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
     interface SecretBackendConnectionPostgresql {
         /**
-         * Enable IAM authentication to a Google Cloud instance when set to `gcpIam`
+         * Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
          */
         authType?: string;
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * Disable special character escaping in username and password.
+         * Disable special character escaping in username and password
          */
         disableEscaping?: boolean;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * JSON encoding of an IAM access key. Requires `authType` to be `gcpIam`.
+         * A JSON encoded credential for use with IAM authorization
          */
         serviceAccountJson?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
     interface SecretBackendConnectionRedis {
         /**
-         * The path to a PEM-encoded CA cert file to use to verify the Elasticsearch server's identity.
+         * The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.
          */
         caCert?: string;
         /**
-         * The host to connect to.
+         * Specifies the host to connect to
          */
         host: string;
         /**
-         * Whether to skip verification of the server
-         * certificate when using TLS.
+         * Specifies whether to skip verification of the server certificate when using TLS.
          */
         insecureTls?: boolean;
         /**
-         * The password to authenticate with.
+         * Specifies the password corresponding to the given username.
          */
         password: string;
         /**
-         * The default port to connect to if no port is specified as
-         * part of the host.
+         * The transport port to use to connect to Redis.
          */
         port?: number;
         /**
-         * Whether to use TLS when connecting to Cassandra.
+         * Specifies whether to use TLS when connecting to Redis.
          */
         tls?: boolean;
         /**
-         * The username to authenticate with.
+         * Specifies the username for Vault to use.
          */
         username: string;
     }
     interface SecretBackendConnectionRedisElasticache {
         /**
-         * The password to authenticate with.
+         * The AWS secret key id to use to talk to ElastiCache. If omitted the credentials chain provider is used instead.
          */
         password?: string;
         /**
-         * The region where the ElastiCache cluster is hosted. If omitted Vault tries to infer from the environment instead.
+         * The AWS region where the ElastiCache cluster is hosted. If omitted the plugin tries to infer the region from the environment.
          */
         region?: string;
         /**
-         * The URL for Elasticsearch's API. https requires certificate
-         * by trusted CA if used.
+         * The configuration endpoint for the ElastiCache cluster to connect to.
          */
         url: string;
         /**
-         * The username to authenticate with.
+         * The AWS access key id to use to talk to ElastiCache. If omitted the credentials chain provider is used instead.
          */
         username?: string;
     }
     interface SecretBackendConnectionRedshift {
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * Disable special character escaping in username and password.
+         * Disable special character escaping in username and password
          */
         disableEscaping?: boolean;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
     interface SecretBackendConnectionSnowflake {
         /**
-         * A URL containing connection information. See
-         * the [Vault
-         * docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-         * for an example.
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * The maximum number of seconds to keep
-         * a connection alive for.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * maintain.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * use.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
-         * The password to authenticate with.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
-         * The username to authenticate with.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * Template describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
     }
@@ -1243,8 +1149,7 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * The number of seconds to use as a connection
-         * timeout.
+         * The number of seconds to use as a connection timeout.
          */
         connectTimeout?: number;
         /**
@@ -1256,12 +1161,11 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The hosts to connect to.
+         * Cassandra hosts to connect to.
          */
         hosts?: string[];
         /**
-         * Whether to skip verification of the server
-         * certificate when using TLS.
+         * Whether to skip verification of the server certificate when using TLS.
          */
         insecureTls?: boolean;
         /**
@@ -1269,16 +1173,15 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The password to use when authenticating with Cassandra.
          */
         password?: string;
         /**
-         * Concatenated PEM blocks configuring the certificate
-         * chain.
+         * Concatenated PEM blocks containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.
          */
         pemBundle?: string;
         /**
-         * A JSON structure configuring the certificate chain.
+         * Specifies JSON containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.
          */
         pemJson?: string;
         /**
@@ -1286,8 +1189,7 @@ export declare namespace database {
          */
         pluginName: string;
         /**
-         * The default port to connect to if no port is specified as
-         * part of the host.
+         * The transport port to use to connect to Cassandra.
          */
         port?: number;
         /**
@@ -1303,7 +1205,7 @@ export declare namespace database {
          */
         tls?: boolean;
         /**
-         * The root credential username used in the connection URL.
+         * The username to use when authenticating with Cassandra.
          */
         username?: string;
         /**
@@ -1335,12 +1237,11 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The hosts to connect to.
+         * A set of Couchbase URIs to connect to. Must use `couchbases://` scheme if `tls` is `true`.
          */
         hosts: string[];
         /**
-         * Whether to skip verification of the server
-         * certificate when using TLS.
+         * Specifies whether to skip verification of the server certificate when using TLS.
          */
         insecureTls?: boolean;
         /**
@@ -1348,7 +1249,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * Specifies the password corresponding to the given username.
          */
         password: string;
         /**
@@ -1360,15 +1261,15 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * Whether to use TLS when connecting to Cassandra.
+         * Specifies whether to use TLS when connecting to Couchbase.
          */
         tls?: boolean;
         /**
-         * The root credential username used in the connection URL.
+         * Specifies the username for Vault to use.
          */
         username: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Template describing how dynamic usernames are generated.
          */
         usernameTemplate?: string;
         /**
@@ -1384,19 +1285,19 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * The path to a PEM-encoded CA cert file to use to verify the Elasticsearch server's identity.
+         * The path to a PEM-encoded CA cert file to use to verify the Elasticsearch server's identity
          */
         caCert?: string;
         /**
-         * The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.
+         * The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity
          */
         caPath?: string;
         /**
-         * The path to the certificate for the Elasticsearch client to present for communication.
+         * The path to the certificate for the Elasticsearch client to present for communication
          */
         clientCert?: string;
         /**
-         * The path to the key for the Elasticsearch client to use for communication.
+         * The path to the key for the Elasticsearch client to use for communication
          */
         clientKey?: string;
         /**
@@ -1408,7 +1309,7 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * Whether to disable certificate verification.
+         * Whether to disable certificate verification
          */
         insecure?: boolean;
         /**
@@ -1416,7 +1317,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The password to be used in the connection URL
          */
         password: string;
         /**
@@ -1428,20 +1329,19 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * This, if set, is used to set the SNI host when connecting via TLS.
+         * This, if set, is used to set the SNI host when connecting via TLS
          */
         tlsServerName?: string;
         /**
-         * The URL for Elasticsearch's API. https requires certificate
-         * by trusted CA if used.
+         * The URL for Elasticsearch's API
          */
         url: string;
         /**
-         * The root credential username used in the connection URL.
+         * The username to be used in the connection URL
          */
         username: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Template describing how dynamic usernames are generated.
          */
         usernameTemplate?: string;
         /**
@@ -1457,8 +1357,7 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -1470,21 +1369,19 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * Disable special character escaping in username and password.
+         * Disable special character escaping in username and password
          */
         disableEscaping?: boolean;
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -1492,7 +1389,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -1504,7 +1401,7 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
@@ -1520,8 +1417,7 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * The number of seconds to use as a connection
-         * timeout.
+         * The number of seconds to use as a connection timeout.
          */
         connectTimeout?: number;
         /**
@@ -1533,12 +1429,11 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The host to connect to.
+         * Influxdb host to connect to.
          */
         host: string;
         /**
-         * Whether to skip verification of the server
-         * certificate when using TLS.
+         * Whether to skip verification of the server certificate when using TLS.
          */
         insecureTls?: boolean;
         /**
@@ -1546,16 +1441,15 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * Specifies the password corresponding to the given username.
          */
         password: string;
         /**
-         * Concatenated PEM blocks configuring the certificate
-         * chain.
+         * Concatenated PEM blocks containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.
          */
         pemBundle?: string;
         /**
-         * A JSON structure configuring the certificate chain.
+         * Specifies JSON containing a certificate and private key; a certificate, private key, and issuing CA certificate; or just a CA certificate.
          */
         pemJson?: string;
         /**
@@ -1563,8 +1457,7 @@ export declare namespace database {
          */
         pluginName: string;
         /**
-         * The default port to connect to if no port is specified as
-         * part of the host.
+         * The transport port to use to connect to Influxdb.
          */
         port?: number;
         /**
@@ -1572,15 +1465,15 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * Whether to use TLS when connecting to Cassandra.
+         * Whether to use TLS when connecting to Influxdb.
          */
         tls?: boolean;
         /**
-         * The root credential username used in the connection URL.
+         * Specifies the username to use for superuser access.
          */
         username: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Template describing how dynamic usernames are generated.
          */
         usernameTemplate?: string;
         /**
@@ -1596,8 +1489,7 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -1609,17 +1501,15 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -1627,7 +1517,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -1639,11 +1529,11 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -1703,14 +1593,11 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
-         * For Vault v1.9+. Set to true when the target is a
-         * Contained Database, e.g. AzureSQL.
-         * See [Vault docs](https://www.vaultproject.io/api/secret/databases/mssql#contained_db)
+         * Set to true when the target is a Contained Database, e.g. AzureSQL.
          */
         containedDb?: boolean;
         /**
@@ -1722,21 +1609,19 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * Disable special character escaping in username and password.
+         * Disable special character escaping in username and password
          */
         disableEscaping?: boolean;
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -1744,7 +1629,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -1756,11 +1641,11 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -1780,8 +1665,7 @@ export declare namespace database {
          */
         authType?: string;
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -1793,17 +1677,15 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -1811,7 +1693,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -1835,11 +1717,11 @@ export declare namespace database {
          */
         tlsCertificateKey?: string;
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -1859,8 +1741,7 @@ export declare namespace database {
          */
         authType?: string;
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -1872,17 +1753,15 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -1890,7 +1769,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -1914,11 +1793,11 @@ export declare namespace database {
          */
         tlsCertificateKey?: string;
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -1938,8 +1817,7 @@ export declare namespace database {
          */
         authType?: string;
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -1951,17 +1829,15 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -1969,7 +1845,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -1993,11 +1869,11 @@ export declare namespace database {
          */
         tlsCertificateKey?: string;
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -2017,8 +1893,7 @@ export declare namespace database {
          */
         authType?: string;
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -2030,17 +1905,15 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -2048,7 +1921,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -2072,11 +1945,11 @@ export declare namespace database {
          */
         tlsCertificateKey?: string;
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -2092,8 +1965,7 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -2109,17 +1981,15 @@ export declare namespace database {
          */
         disconnectSessions?: boolean;
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -2127,7 +1997,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -2143,11 +2013,11 @@ export declare namespace database {
          */
         splitStatements?: boolean;
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -2167,8 +2037,7 @@ export declare namespace database {
          */
         authType?: string;
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -2180,21 +2049,19 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * Disable special character escaping in username and password.
+         * Disable special character escaping in username and password
          */
         disableEscaping?: boolean;
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -2202,7 +2069,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -2218,11 +2085,11 @@ export declare namespace database {
          */
         serviceAccountJson?: string;
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -2238,7 +2105,7 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * The path to a PEM-encoded CA cert file to use to verify the Elasticsearch server's identity.
+         * The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.
          */
         caCert?: string;
         /**
@@ -2250,12 +2117,11 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The host to connect to.
+         * Specifies the host to connect to
          */
         host: string;
         /**
-         * Whether to skip verification of the server
-         * certificate when using TLS.
+         * Specifies whether to skip verification of the server certificate when using TLS.
          */
         insecureTls?: boolean;
         /**
@@ -2263,7 +2129,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * Specifies the password corresponding to the given username.
          */
         password: string;
         /**
@@ -2271,8 +2137,7 @@ export declare namespace database {
          */
         pluginName: string;
         /**
-         * The default port to connect to if no port is specified as
-         * part of the host.
+         * The transport port to use to connect to Redis.
          */
         port?: number;
         /**
@@ -2280,11 +2145,11 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * Whether to use TLS when connecting to Cassandra.
+         * Specifies whether to use TLS when connecting to Redis.
          */
         tls?: boolean;
         /**
-         * The root credential username used in the connection URL.
+         * Specifies the username for Vault to use.
          */
         username: string;
         /**
@@ -2312,7 +2177,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The AWS secret key id to use to talk to ElastiCache. If omitted the credentials chain provider is used instead.
          */
         password?: string;
         /**
@@ -2320,8 +2185,7 @@ export declare namespace database {
          */
         pluginName: string;
         /**
-         * The AWS region where the ElastiCache cluster is hosted.
-         * If omitted the plugin tries to infer the region from the environment.
+         * The AWS region where the ElastiCache cluster is hosted. If omitted the plugin tries to infer the region from the environment.
          */
         region?: string;
         /**
@@ -2329,12 +2193,11 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * The URL for Elasticsearch's API. https requires certificate
-         * by trusted CA if used.
+         * The configuration endpoint for the ElastiCache cluster to connect to.
          */
         url: string;
         /**
-         * The root credential username used in the connection URL.
+         * The AWS access key id to use to talk to ElastiCache. If omitted the credentials chain provider is used instead.
          */
         username?: string;
         /**
@@ -2350,8 +2213,7 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -2363,21 +2225,19 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * Disable special character escaping in username and password.
+         * Disable special character escaping in username and password
          */
         disableEscaping?: boolean;
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -2385,7 +2245,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -2397,11 +2257,11 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -2417,8 +2277,7 @@ export declare namespace database {
          */
         allowedRoles?: string[];
         /**
-         * Specifies the Redshift DSN.
-         * See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
+         * Connection string to use to connect to the database.
          */
         connectionUrl?: string;
         /**
@@ -2430,17 +2289,15 @@ export declare namespace database {
             [key: string]: any;
         };
         /**
-         * The maximum amount of time a connection may be reused.
+         * Maximum number of seconds a connection may be reused.
          */
         maxConnectionLifetime?: number;
         /**
-         * The maximum number of idle connections to
-         * the database.
+         * Maximum number of idle connections to the database.
          */
         maxIdleConnections?: number;
         /**
-         * The maximum number of open connections to
-         * the database.
+         * Maximum number of open connections to the database.
          */
         maxOpenConnections?: number;
         /**
@@ -2448,7 +2305,7 @@ export declare namespace database {
          */
         name: string;
         /**
-         * The root credential password used in the connection URL.
+         * The root credential password used in the connection URL
          */
         password?: string;
         /**
@@ -2460,11 +2317,11 @@ export declare namespace database {
          */
         rootRotationStatements?: string[];
         /**
-         * The root credential username used in the connection URL.
+         * The root credential username used in the connection URL
          */
         username?: string;
         /**
-         * [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
+         * Username generation template.
          */
         usernameTemplate?: string;
         /**
@@ -2730,62 +2587,55 @@ export declare namespace kv {
 export declare namespace managed {
     interface KeysAw {
         /**
-         * The AWS access key to use.
+         * The AWS access key to use
          */
         accessKey: string;
         /**
-         * If no existing key can be found in
-         * the referenced backend, instructs Vault to generate a key within the backend.
+         * If no existing key can be found in the referenced backend, instructs Vault to generate a key within the backend
          */
         allowGenerateKey: boolean;
         /**
-         * Controls the ability for Vault to replace through
-         * generation or importing a key into the configured backend even
-         * if a key is present, if set to `false` those operations are forbidden
-         * if a key exists.
+         * Controls the ability for Vault to replace through generation or importing a key into the configured backend even if a key is present, if set to false those operations are forbidden if a key exists.
          */
         allowReplaceKey: boolean;
         /**
-         * Controls the ability for Vault to import a key to the
-         * configured backend, if `false`, those operations will be forbidden.
+         * Controls the ability for Vault to import a key to the configured backend, if 'false', those operations will be forbidden
          */
         allowStoreKey: boolean;
         /**
-         * If `true`, allows usage from any mount point within the
-         * namespace.
+         * Allow usage from any mount point within the namespace if 'true'
          */
         anyMount: boolean;
         /**
-         * The curve to use for an ECDSA key. Used when `keyType`
-         * is `ECDSA`. Required if `allowGenerateKey` is `true`.
+         * The curve to use for an ECDSA key. Used when keyType is 'ECDSA'. Required if 'allow_generate_key' is true
          */
         curve?: string;
         /**
-         * Used to specify a custom AWS endpoint.
+         * Used to specify a custom AWS endpoint
          */
         endpoint?: string;
         /**
-         * The size in bits for an RSA key.
+         * The size in bits for an RSA key. This field is required when 'key_type' is 'RSA'
          */
         keyBits: string;
         /**
-         * The type of key to use.
+         * The type of key to use
          */
         keyType: string;
         /**
-         * An identifier for the key.
+         * An identifier for the key
          */
         kmsKey: string;
         /**
-         * A unique lowercase name that serves as identifying the key.
+         * A unique lowercase name that serves as identifying the key
          */
         name: string;
         /**
-         * The AWS region where the keys are stored (or will be stored).
+         * The AWS region where the keys are stored (or will be stored)
          */
         region: string;
         /**
-         * The AWS access key to use.
+         * The AWS secret key to use
          */
         secretKey: string;
         /**
@@ -2795,61 +2645,55 @@ export declare namespace managed {
     }
     interface KeysAzure {
         /**
-         * If no existing key can be found in
-         * the referenced backend, instructs Vault to generate a key within the backend.
+         * If no existing key can be found in the referenced backend, instructs Vault to generate a key within the backend
          */
         allowGenerateKey: boolean;
         /**
-         * Controls the ability for Vault to replace through
-         * generation or importing a key into the configured backend even
-         * if a key is present, if set to `false` those operations are forbidden
-         * if a key exists.
+         * Controls the ability for Vault to replace through generation or importing a key into the configured backend even if a key is present, if set to false those operations are forbidden if a key exists.
          */
         allowReplaceKey: boolean;
         /**
-         * Controls the ability for Vault to import a key to the
-         * configured backend, if `false`, those operations will be forbidden.
+         * Controls the ability for Vault to import a key to the configured backend, if 'false', those operations will be forbidden
          */
         allowStoreKey: boolean;
         /**
-         * If `true`, allows usage from any mount point within the
-         * namespace.
+         * Allow usage from any mount point within the namespace if 'true'
          */
         anyMount: boolean;
         /**
-         * The client id for credentials to query the Azure APIs.
+         * The client id for credentials to query the Azure APIs
          */
         clientId: string;
         /**
-         * The client secret for credentials to query the Azure APIs.
+         * The client secret for credentials to query the Azure APIs
          */
         clientSecret: string;
         /**
-         * The Azure Cloud environment API endpoints to use.
+         * The Azure Cloud environment API endpoints to use
          */
         environment: string;
         /**
-         * The size in bits for an RSA key.
+         * The size in bits for an RSA key. This field is required when 'key_type' is 'RSA' or when 'allow_generate_key' is true
          */
         keyBits?: string;
         /**
-         * The Key Vault key to use for encryption and decryption.
+         * The Key Vault key to use for encryption and decryption
          */
         keyName: string;
         /**
-         * The type of key to use.
+         * The type of key to use
          */
         keyType: string;
         /**
-         * A unique lowercase name that serves as identifying the key.
+         * A unique lowercase name that serves as identifying the key
          */
         name: string;
         /**
-         * The Azure Key Vault resource's DNS Suffix to connect to.
+         * The Azure Key Vault resource's DNS Suffix to connect to
          */
         resource: string;
         /**
-         * The tenant id for the Azure Active Directory organization.
+         * The tenant id for the Azure Active Directory organization
          */
         tenantId: string;
         /**
@@ -2857,80 +2701,69 @@ export declare namespace managed {
          */
         uuid: string;
         /**
-         * The Key Vault vault to use for encryption and decryption.
+         * The Key Vault vault to use the encryption keys for encryption and decryption
          */
         vaultName: string;
     }
     interface KeysPkc {
         /**
-         * If no existing key can be found in
-         * the referenced backend, instructs Vault to generate a key within the backend.
+         * If no existing key can be found in the referenced backend, instructs Vault to generate a key within the backend
          */
         allowGenerateKey: boolean;
         /**
-         * Controls the ability for Vault to replace through
-         * generation or importing a key into the configured backend even
-         * if a key is present, if set to `false` those operations are forbidden
-         * if a key exists.
+         * Controls the ability for Vault to replace through generation or importing a key into the configured backend even if a key is present, if set to false those operations are forbidden if a key exists.
          */
         allowReplaceKey: boolean;
         /**
-         * Controls the ability for Vault to import a key to the
-         * configured backend, if `false`, those operations will be forbidden.
+         * Controls the ability for Vault to import a key to the configured backend, if 'false', those operations will be forbidden
          */
         allowStoreKey: boolean;
         /**
-         * If `true`, allows usage from any mount point within the
-         * namespace.
+         * Allow usage from any mount point within the namespace if 'true'
          */
         anyMount: boolean;
         /**
-         * The curve to use for an ECDSA key. Used when `keyType`
-         * is `ECDSA`. Required if `allowGenerateKey` is `true`.
+         * Supplies the curve value when using the 'CKM_ECDSA' mechanism. Required if 'allow_generate_key' is true
          */
         curve?: string;
         /**
-         * Force all operations to open up a read-write session to
-         * the HSM.
+         * Force all operations to open up a read-write session to the HSM
          */
         forceRwSession?: string;
         /**
-         * The size in bits for an RSA key.
+         * Supplies the size in bits of the key when using 'CKM_RSA_PKCS_PSS', 'CKM_RSA_PKCS_OAEP' or 'CKM_RSA_PKCS' as a value for 'mechanism'. Required if 'allow_generate_key' is true
          */
         keyBits?: string;
         /**
-         * The id of a PKCS#11 key to use.
+         * The id of a PKCS#11 key to use
          */
         keyId: string;
         /**
-         * The label of the key to use.
+         * The label of the key to use
          */
         keyLabel: string;
         /**
-         * The name of the kmsLibrary stanza to use from Vault's config
-         * to lookup the local library path.
+         * The name of the kmsLibrary stanza to use from Vault's config to lookup the local library path
          */
         library: string;
         /**
-         * The encryption/decryption mechanism to use, specified as a
-         * hexadecimal (prefixed by 0x) string.
+         * The encryption/decryption mechanism to use, specified as a hexadecimal (prefixed by 0x) string.
          */
         mechanism: string;
         /**
-         * A unique lowercase name that serves as identifying the key.
+         * A unique lowercase name that serves as identifying the key
          */
         name: string;
         /**
-         * The PIN for login.
+         * The PIN for login
          */
         pin: string;
         /**
-         * The slot number to use, specified as a string in a decimal format
-         * (e.g. `2305843009213693953`).
+         * The slot number to use, specified as a string in a decimal format (e.g. '2305843009213693953')
          */
         slot?: string;
         /**
-         * The slot token label to use.
+         * The slot token label to use
          */
         tokenLabel?: string;
         /**
@@ -2942,21 +2775,21 @@ export declare namespace managed {
 export declare namespace okta {
     interface AuthBackendGroup {
         /**
-         * Name of the group within the Okta
+         * Name of the Okta group
          */
         groupName: string;
         /**
-         * Vault policies to associate with this group
+         * Policies to associate with this group
          */
         policies: string[];
     }
     interface AuthBackendUser {
         /**
-         * List of Okta groups to associate with this user
+         * Groups within the Okta auth backend to associate with this user
          */
         groups?: string[];
         /**
-         * Vault policies to associate with this group
+         * Policies to associate with this user
          */
         policies?: string[];
         /**
@@ -3051,25 +2884,12 @@ export declare namespace secrets {
 export declare namespace ssh {
     interface SecretBackendRoleAllowedUserKeyConfig {
         /**
-         * A list of allowed key lengths as integers.
-         * For key types that do not support setting the length a value of `[0]` should be used.
-         * Setting multiple lengths is only supported on Vault 1.10+. For prior releases `length`
-         * must be set to a single element list.
-         *
-         * Example configuration blocks that might be included in the `vault.ssh.SecretBackendRole`
-         *
-         * <!--Start PulumiCodeChooser -->
-         * ```typescript
-         * import * as pulumi from "@pulumi/pulumi";
-         * ```
-         * <!--End PulumiCodeChooser -->
+         * List of allowed key lengths, vault-1.10 and above
          */
         lengths: number[];
         /**
-         * The SSH public key type.
-         * *Supported key types are:*
-         * `rsa`, `ecdsa`, `ec`, `dsa`, `ed25519`, `ssh-rsa`, `ssh-dss`, `ssh-ed25519`,
-         * `ecdsa-sha2-nistp256`, `ecdsa-sha2-nistp384`, `ecdsa-sha2-nistp521`
+         * Key type, choices:
+         * rsa, ecdsa, ec, dsa, ed25519, ssh-rsa, ssh-dss, ssh-ed25519, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521
          */
         type: string;
     }