@pulumi/vault 7.11.0-alpha.1784706233 → 7.11.0

package/activationFlags.d.ts

@@ -0,0 +1,88 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Activates a single activation flag in Vault.
+ *
+ * > **Important** Activation flags require Vault 1.16 or later.
+ *
+ * > **Important** Activation flags are available only in Vault Enterprise.
+ *
+ * > **Important** The activation flags endpoint is root-namespace-only. This resource does not accept a `namespace` argument.
+ *
+ * > **Important** Vault exposes activation for individual flags at `PUT /sys/activation-flags/:feature/activate`, but does not expose a public deactivation API.
+ *
+ * ## Example Usage
+ *
+ * ### Activate a Feature
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const example = new vault.ActivationFlags("example", {feature: "secrets-sync"});
+ * ```
+ *
+ * ## Notes
+ *
+ * * Each `vault.ActivationFlags` resource activates exactly one feature by calling `PUT /sys/activation-flags/:feature/activate`.
+ * * Destroying this resource removes it from Terraform state only. It does not deactivate the flag in Vault.
+ * * Activation flag names must exactly match the feature keys returned by `GET /sys/activation-flags`.
+ *
+ * ## Import
+ *
+ * The activation flags resource can be imported using the feature key, e.g.
+ *
+ * ```sh
+ * $ pulumi import vault:index/activationFlags:ActivationFlags example secret_sync
+ * ```
+ */
+export declare class ActivationFlags extends pulumi.CustomResource {
+    /**
+     * Get an existing ActivationFlags resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ActivationFlagsState, opts?: pulumi.CustomResourceOptions): ActivationFlags;
+    /**
+     * Returns true if the given object is an instance of ActivationFlags.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ActivationFlags;
+    /**
+     * Exact activation flag key to activate.
+     * The value must match a feature name returned by `GET /sys/activation-flags`.
+     */
+    readonly feature: pulumi.Output<string>;
+    /**
+     * Create a ActivationFlags resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ActivationFlagsArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ActivationFlags resources.
+ */
+export interface ActivationFlagsState {
+    /**
+     * Exact activation flag key to activate.
+     * The value must match a feature name returned by `GET /sys/activation-flags`.
+     */
+    feature?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a ActivationFlags resource.
+ */
+export interface ActivationFlagsArgs {
+    /**
+     * Exact activation flag key to activate.
+     * The value must match a feature name returned by `GET /sys/activation-flags`.
+     */
+    feature: pulumi.Input<string>;
+}
+//# sourceMappingURL=activationFlags.d.ts.map

package/activationFlags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activationFlags.d.ts","sourceRoot":"","sources":["../activationFlags.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,qBAAa,eAAgB,SAAQ,MAAM,CAAC,cAAc;IACtD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,eAAe;IAOhJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,eAAe;IAO1D;;;OAGG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAiB3F;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC"}

package/activationFlags.js

@@ -0,0 +1,111 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActivationFlags = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * Activates a single activation flag in Vault.
+ *
+ * > **Important** Activation flags require Vault 1.16 or later.
+ *
+ * > **Important** Activation flags are available only in Vault Enterprise.
+ *
+ * > **Important** The activation flags endpoint is root-namespace-only. This resource does not accept a `namespace` argument.
+ *
+ * > **Important** Vault exposes activation for individual flags at `PUT /sys/activation-flags/:feature/activate`, but does not expose a public deactivation API.
+ *
+ * ## Example Usage
+ *
+ * ### Activate a Feature
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const example = new vault.ActivationFlags("example", {feature: "secrets-sync"});
+ * ```
+ *
+ * ## Notes
+ *
+ * * Each `vault.ActivationFlags` resource activates exactly one feature by calling `PUT /sys/activation-flags/:feature/activate`.
+ * * Destroying this resource removes it from Terraform state only. It does not deactivate the flag in Vault.
+ * * Activation flag names must exactly match the feature keys returned by `GET /sys/activation-flags`.
+ *
+ * ## Import
+ *
+ * The activation flags resource can be imported using the feature key, e.g.
+ *
+ * ```sh
+ * $ pulumi import vault:index/activationFlags:ActivationFlags example secret_sync
+ * ```
+ */
+class ActivationFlags extends pulumi.CustomResource {
+    /**
+     * Get an existing ActivationFlags resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ActivationFlags(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'vault:index/activationFlags:ActivationFlags';
+    /**
+     * Returns true if the given object is an instance of ActivationFlags.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ActivationFlags.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["feature"] = state?.feature;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.feature === undefined && !opts.urn) {
+                throw new Error("Missing required property 'feature'");
+            }
+            resourceInputs["feature"] = args?.feature;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ActivationFlags.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ActivationFlags = ActivationFlags;
+//# sourceMappingURL=activationFlags.js.map

package/activationFlags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activationFlags.js","sourceRoot":"","sources":["../activationFlags.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,eAAgB,SAAQ,MAAM,CAAC,cAAc;IACtD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4B,EAAE,IAAmC;QAC1H,OAAO,IAAI,eAAe,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,6CAA6C,CAAC;IAEpF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC;IAChE,CAAC;IAgBD,YAAY,IAAY,EAAE,WAAwD,EAAE,IAAmC;QACnH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+C,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;SAC9C;aAAM;YACH,MAAM,IAAI,GAAG,WAA8C,CAAC;YAC5D,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;SAC7C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;;AAzDL,0CA0DC"}

package/agentRegistration.d.ts

@@ -0,0 +1,204 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * > **Preview feature:** This feature is currently available as a preview and is possibly incomplete and subject to change. **We strongly discourage using preview or beta features with production workflows.**
+ *
+ * Manages Agent Registry records in Vault Enterprise. An Agent Registry record allows you to register Vault agents with specific identity entities and configure ceiling policies that limit the maximum permissions an agent can obtain.
+ *
+ * > **Important** This resource is available only in Vault Enterprise and requires Vault 2.0.1 or later.
+ *
+ * ## Notes
+ *
+ * * **Mount:** The Agent Registry is mounted by default. There is no need to take action to enable it.
+ *
+ * * **Ceiling Policies**: Ceiling policies define the maximum permissions an agent can obtain. Even if the associated entity or token policies grant broader permissions, the agent will be limited to the intersection of all applicable policies and the ceiling policies.
+ *
+ * * **Default Ceiling Policy**: By default, Vault applies a default ceiling policy to Agent Registry records. This policy is automatically filtered out when reading the resource state, so only user-specified ceiling policies appear in the `ceilingPolicies` attribute.
+ *
+ * * **Entity Requirement**: The identity entity specified in `entityId` must exist before you create the Agent Registry record. The entity defines the base identity for the agent.
+ *
+ * * **Display Name Uniqueness**: The `displayName` must be unique within the namespace. Attempting to create multiple Agent Registry records with the same display name will result in an error.
+ *
+ * * **Immutable Display Name**: Changing the `displayName` requires destroying and recreating the Agent Registry record, as it serves as the unique identifier.
+ *
+ * * **Enterprise Feature**: Agent Registry records are only available in Vault Enterprise. Attempting to use this resource with Vault Community Edition will result in an error.
+ *
+ * * **Version Requirement**: This resource requires Vault 2.0.1 or later.
+ *
+ * ## Import
+ *
+ * You can import Agent Registry records using either their `displayName` or their
+ * `id` (UUID). The provider auto-detects which you supplied: if the import string
+ * parses as a UUID, the provider reads the record by `id`; otherwise it reads the
+ * record by `displayName`.
+ *
+ * ```sh
+ * $ pulumi import vault:index/agentRegistration:AgentRegistration example my-agent
+ * ```
+ *
+ * To import a record by `id`:
+ *
+ * ```sh
+ * $ pulumi import vault:index/agentRegistration:AgentRegistration example 550e8400-e29b-41d4-a716-446655440000
+ * ```
+ *
+ * The import string does not encode the namespace. To import a record from a
+ * namespace, set the `TERRAFORM_VAULT_NAMESPACE_IMPORT` environment variable:
+ *
+ * ```sh
+ * $ TERRAFORM_VAULT_NAMESPACE_IMPORT=application terraform import vault_agent_registration.example my-agent
+ * ```
+ */
+export declare class AgentRegistration extends pulumi.CustomResource {
+    /**
+     * Get an existing AgentRegistration resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: AgentRegistrationState, opts?: pulumi.CustomResourceOptions): AgentRegistration;
+    /**
+     * Returns true if the given object is an instance of AgentRegistration.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is AgentRegistration;
+    /**
+     * A list of policy names that define the maximum permissions this agent can obtain. These policies act as a ceiling - the agent cannot obtain permissions beyond what these policies allow, even if the entity or token policies would grant more permissions. By default, Vault applies a default ceiling policy unless `noDefaultCeilingPolicy` is set to `true`.
+     */
+    readonly ceilingPolicies: pulumi.Output<string[]>;
+    /**
+     * The timestamp when the Agent Registry record was created, in RFC3339 format.
+     */
+    readonly creationTime: pulumi.Output<string>;
+    /**
+     * A human-readable description of the Agent Registry record. This field is for documentation purposes and does not affect the agent's behavior.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The display name for the Agent Registry record. This field must be unique per Vault namespace. Within Terraform, this is used as the unique identifier for the agent. Changing this on an existing resource will force the resource to be deleted from Vault and a new resource to be created in Vault.
+     */
+    readonly displayName: pulumi.Output<string>;
+    /**
+     * The ID of the identity entity to associate with this Agent Registry record. The entity must exist before you create the Agent Registry record.
+     */
+    readonly entityId: pulumi.Output<string>;
+    /**
+     * The timestamp when the Agent Registry record was last updated, in RFC3339 format.
+     */
+    readonly lastUpdatedTime: pulumi.Output<string>;
+    /**
+     * The namespace to provision the resource in.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     */
+    readonly namespace: pulumi.Output<string | undefined>;
+    /**
+     * When set to `true`, prevents Vault from applying the default ceiling policy to this agent. This allows you to have complete control over the agent's ceiling policies. Defaults to `false`.
+     */
+    readonly noDefaultCeilingPolicy: pulumi.Output<boolean>;
+    /**
+     * When `false`, RAR (Rich Authorization Requests) is mandatory and authorizationDetails must be present in the token. When set to `true`, authorizationDetails in the JWT token are optional for this agent. This setting works in conjunction with the OAuth Resource Server profile's optionalAuthorizationDetails setting - RAR is optional if EITHER is `true`. Defaults to `false`. Requires Vault 2.0.3 or later.
+     */
+    readonly optionalAuthorizationDetails: pulumi.Output<boolean>;
+    /**
+     * Owner of the Agent Registry record.
+     */
+    readonly owner: pulumi.Output<string | undefined>;
+    /**
+     * Create a AgentRegistration resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: AgentRegistrationArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering AgentRegistration resources.
+ */
+export interface AgentRegistrationState {
+    /**
+     * A list of policy names that define the maximum permissions this agent can obtain. These policies act as a ceiling - the agent cannot obtain permissions beyond what these policies allow, even if the entity or token policies would grant more permissions. By default, Vault applies a default ceiling policy unless `noDefaultCeilingPolicy` is set to `true`.
+     */
+    ceilingPolicies?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * The timestamp when the Agent Registry record was created, in RFC3339 format.
+     */
+    creationTime?: pulumi.Input<string | undefined>;
+    /**
+     * A human-readable description of the Agent Registry record. This field is for documentation purposes and does not affect the agent's behavior.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * The display name for the Agent Registry record. This field must be unique per Vault namespace. Within Terraform, this is used as the unique identifier for the agent. Changing this on an existing resource will force the resource to be deleted from Vault and a new resource to be created in Vault.
+     */
+    displayName?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the identity entity to associate with this Agent Registry record. The entity must exist before you create the Agent Registry record.
+     */
+    entityId?: pulumi.Input<string | undefined>;
+    /**
+     * The timestamp when the Agent Registry record was last updated, in RFC3339 format.
+     */
+    lastUpdatedTime?: pulumi.Input<string | undefined>;
+    /**
+     * The namespace to provision the resource in.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     */
+    namespace?: pulumi.Input<string | undefined>;
+    /**
+     * When set to `true`, prevents Vault from applying the default ceiling policy to this agent. This allows you to have complete control over the agent's ceiling policies. Defaults to `false`.
+     */
+    noDefaultCeilingPolicy?: pulumi.Input<boolean | undefined>;
+    /**
+     * When `false`, RAR (Rich Authorization Requests) is mandatory and authorizationDetails must be present in the token. When set to `true`, authorizationDetails in the JWT token are optional for this agent. This setting works in conjunction with the OAuth Resource Server profile's optionalAuthorizationDetails setting - RAR is optional if EITHER is `true`. Defaults to `false`. Requires Vault 2.0.3 or later.
+     */
+    optionalAuthorizationDetails?: pulumi.Input<boolean | undefined>;
+    /**
+     * Owner of the Agent Registry record.
+     */
+    owner?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a AgentRegistration resource.
+ */
+export interface AgentRegistrationArgs {
+    /**
+     * A list of policy names that define the maximum permissions this agent can obtain. These policies act as a ceiling - the agent cannot obtain permissions beyond what these policies allow, even if the entity or token policies would grant more permissions. By default, Vault applies a default ceiling policy unless `noDefaultCeilingPolicy` is set to `true`.
+     */
+    ceilingPolicies?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * A human-readable description of the Agent Registry record. This field is for documentation purposes and does not affect the agent's behavior.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * The display name for the Agent Registry record. This field must be unique per Vault namespace. Within Terraform, this is used as the unique identifier for the agent. Changing this on an existing resource will force the resource to be deleted from Vault and a new resource to be created in Vault.
+     */
+    displayName: pulumi.Input<string>;
+    /**
+     * The ID of the identity entity to associate with this Agent Registry record. The entity must exist before you create the Agent Registry record.
+     */
+    entityId: pulumi.Input<string>;
+    /**
+     * The namespace to provision the resource in.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     */
+    namespace?: pulumi.Input<string | undefined>;
+    /**
+     * When set to `true`, prevents Vault from applying the default ceiling policy to this agent. This allows you to have complete control over the agent's ceiling policies. Defaults to `false`.
+     */
+    noDefaultCeilingPolicy?: pulumi.Input<boolean | undefined>;
+    /**
+     * When `false`, RAR (Rich Authorization Requests) is mandatory and authorizationDetails must be present in the token. When set to `true`, authorizationDetails in the JWT token are optional for this agent. This setting works in conjunction with the OAuth Resource Server profile's optionalAuthorizationDetails setting - RAR is optional if EITHER is `true`. Defaults to `false`. Requires Vault 2.0.3 or later.
+     */
+    optionalAuthorizationDetails?: pulumi.Input<boolean | undefined>;
+    /**
+     * Owner of the Agent Registry record.
+     */
+    owner?: pulumi.Input<string | undefined>;
+}
+//# sourceMappingURL=agentRegistration.d.ts.map

package/agentRegistration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentRegistration.d.ts","sourceRoot":"","sources":["../agentRegistration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,qBAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,iBAAiB;IAOpJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,iBAAiB;IAO5D;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE;;OAEG;IACH,SAAgC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD;;OAEG;IACH,SAAgC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE;;;;OAIG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,SAAwB,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEjE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAsC7F;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5C"}

package/agentRegistration.js

@@ -0,0 +1,145 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentRegistration = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * > **Preview feature:** This feature is currently available as a preview and is possibly incomplete and subject to change. **We strongly discourage using preview or beta features with production workflows.**
+ *
+ * Manages Agent Registry records in Vault Enterprise. An Agent Registry record allows you to register Vault agents with specific identity entities and configure ceiling policies that limit the maximum permissions an agent can obtain.
+ *
+ * > **Important** This resource is available only in Vault Enterprise and requires Vault 2.0.1 or later.
+ *
+ * ## Notes
+ *
+ * * **Mount:** The Agent Registry is mounted by default. There is no need to take action to enable it.
+ *
+ * * **Ceiling Policies**: Ceiling policies define the maximum permissions an agent can obtain. Even if the associated entity or token policies grant broader permissions, the agent will be limited to the intersection of all applicable policies and the ceiling policies.
+ *
+ * * **Default Ceiling Policy**: By default, Vault applies a default ceiling policy to Agent Registry records. This policy is automatically filtered out when reading the resource state, so only user-specified ceiling policies appear in the `ceilingPolicies` attribute.
+ *
+ * * **Entity Requirement**: The identity entity specified in `entityId` must exist before you create the Agent Registry record. The entity defines the base identity for the agent.
+ *
+ * * **Display Name Uniqueness**: The `displayName` must be unique within the namespace. Attempting to create multiple Agent Registry records with the same display name will result in an error.
+ *
+ * * **Immutable Display Name**: Changing the `displayName` requires destroying and recreating the Agent Registry record, as it serves as the unique identifier.
+ *
+ * * **Enterprise Feature**: Agent Registry records are only available in Vault Enterprise. Attempting to use this resource with Vault Community Edition will result in an error.
+ *
+ * * **Version Requirement**: This resource requires Vault 2.0.1 or later.
+ *
+ * ## Import
+ *
+ * You can import Agent Registry records using either their `displayName` or their
+ * `id` (UUID). The provider auto-detects which you supplied: if the import string
+ * parses as a UUID, the provider reads the record by `id`; otherwise it reads the
+ * record by `displayName`.
+ *
+ * ```sh
+ * $ pulumi import vault:index/agentRegistration:AgentRegistration example my-agent
+ * ```
+ *
+ * To import a record by `id`:
+ *
+ * ```sh
+ * $ pulumi import vault:index/agentRegistration:AgentRegistration example 550e8400-e29b-41d4-a716-446655440000
+ * ```
+ *
+ * The import string does not encode the namespace. To import a record from a
+ * namespace, set the `TERRAFORM_VAULT_NAMESPACE_IMPORT` environment variable:
+ *
+ * ```sh
+ * $ TERRAFORM_VAULT_NAMESPACE_IMPORT=application terraform import vault_agent_registration.example my-agent
+ * ```
+ */
+class AgentRegistration extends pulumi.CustomResource {
+    /**
+     * Get an existing AgentRegistration resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new AgentRegistration(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'vault:index/agentRegistration:AgentRegistration';
+    /**
+     * Returns true if the given object is an instance of AgentRegistration.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === AgentRegistration.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["ceilingPolicies"] = state?.ceilingPolicies;
+            resourceInputs["creationTime"] = state?.creationTime;
+            resourceInputs["description"] = state?.description;
+            resourceInputs["displayName"] = state?.displayName;
+            resourceInputs["entityId"] = state?.entityId;
+            resourceInputs["lastUpdatedTime"] = state?.lastUpdatedTime;
+            resourceInputs["namespace"] = state?.namespace;
+            resourceInputs["noDefaultCeilingPolicy"] = state?.noDefaultCeilingPolicy;
+            resourceInputs["optionalAuthorizationDetails"] = state?.optionalAuthorizationDetails;
+            resourceInputs["owner"] = state?.owner;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.displayName === undefined && !opts.urn) {
+                throw new Error("Missing required property 'displayName'");
+            }
+            if (args?.entityId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'entityId'");
+            }
+            resourceInputs["ceilingPolicies"] = args?.ceilingPolicies;
+            resourceInputs["description"] = args?.description;
+            resourceInputs["displayName"] = args?.displayName;
+            resourceInputs["entityId"] = args?.entityId;
+            resourceInputs["namespace"] = args?.namespace;
+            resourceInputs["noDefaultCeilingPolicy"] = args?.noDefaultCeilingPolicy;
+            resourceInputs["optionalAuthorizationDetails"] = args?.optionalAuthorizationDetails;
+            resourceInputs["owner"] = args?.owner;
+            resourceInputs["creationTime"] = undefined /*out*/;
+            resourceInputs["lastUpdatedTime"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(AgentRegistration.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.AgentRegistration = AgentRegistration;
+//# sourceMappingURL=agentRegistration.js.map

package/agentRegistration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentRegistration.js","sourceRoot":"","sources":["../agentRegistration.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,iDAAiD,CAAC;IAExF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;IAqDD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,EAAE,sBAAsB,CAAC;YACzE,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,EAAE,4BAA4B,CAAC;YACrF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;SAC1C;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,EAAE,sBAAsB,CAAC;YACxE,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,EAAE,4BAA4B,CAAC;YACpF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;;AAnHL,8CAoHC"}

package/alicloud/index.d.ts

@@ -1,4 +1,10 @@
 export { AuthBackendRoleArgs, AuthBackendRoleState } from "./authBackendRole";
 export type AuthBackendRole = import("./authBackendRole").AuthBackendRole;
 export declare const AuthBackendRole: typeof import("./authBackendRole").AuthBackendRole;
+export { SecretBackendArgs, SecretBackendState } from "./secretBackend";
+export type SecretBackend = import("./secretBackend").SecretBackend;
+export declare const SecretBackend: typeof import("./secretBackend").SecretBackend;
+export { SecretBackendRoleArgs, SecretBackendRoleState } from "./secretBackendRole";
+export type SecretBackendRole = import("./secretBackendRole").SecretBackendRole;
+export declare const SecretBackendRole: typeof import("./secretBackendRole").SecretBackendRole;
 //# sourceMappingURL=index.d.ts.map

package/alicloud/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../alicloud/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,OAAO,mBAAmB,EAAE,eAAe,CAAC;AAC1E,eAAO,MAAM,eAAe,EAAE,cAAc,mBAAmB,EAAE,eAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../alicloud/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,OAAO,mBAAmB,EAAE,eAAe,CAAC;AAC1E,eAAO,MAAM,eAAe,EAAE,cAAc,mBAAmB,EAAE,eAA6B,CAAC;AAG/F,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,OAAO,iBAAiB,EAAE,aAAa,CAAC;AACpE,eAAO,MAAM,aAAa,EAAE,cAAc,iBAAiB,EAAE,aAA2B,CAAC;AAGzF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACpF,MAAM,MAAM,iBAAiB,GAAG,OAAO,qBAAqB,EAAE,iBAAiB,CAAC;AAChF,eAAO,MAAM,iBAAiB,EAAE,cAAc,qBAAqB,EAAE,iBAA+B,CAAC"}

package/alicloud/index.js

@@ -25,21 +25,31 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthBackendRole = void 0;
+exports.SecretBackendRole = exports.SecretBackend = exports.AuthBackendRole = void 0;
 const pulumi = __importStar(require("@pulumi/pulumi"));
 const utilities = __importStar(require("../utilities"));
 exports.AuthBackendRole = null;
 utilities.lazyLoad(exports, ["AuthBackendRole"], () => require("./authBackendRole"));
+exports.SecretBackend = null;
+utilities.lazyLoad(exports, ["SecretBackend"], () => require("./secretBackend"));
+exports.SecretBackendRole = null;
+utilities.lazyLoad(exports, ["SecretBackendRole"], () => require("./secretBackendRole"));
 const _module = {
     version: utilities.getVersion(),
     construct: (name, type, urn) => {
         switch (type) {
             case "vault:alicloud/authBackendRole:AuthBackendRole":
                 return new exports.AuthBackendRole(name, undefined, { urn });
+            case "vault:alicloud/secretBackend:SecretBackend":
+                return new exports.SecretBackend(name, undefined, { urn });
+            case "vault:alicloud/secretBackendRole:SecretBackendRole":
+                return new exports.SecretBackendRole(name, undefined, { urn });
             default:
                 throw new Error(`unknown resource type ${type}`);
         }
     },
 };
 pulumi.runtime.registerResourceModule("vault", "alicloud/authBackendRole", _module);
+pulumi.runtime.registerResourceModule("vault", "alicloud/secretBackend", _module);
+pulumi.runtime.registerResourceModule("vault", "alicloud/secretBackendRole", _module);
 //# sourceMappingURL=index.js.map

package/alicloud/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../alicloud/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAK7B,QAAA,eAAe,GAAuD,IAAW,CAAC;AAC/F,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAGrF,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,gDAAgD;gBACjD,OAAO,IAAI,uBAAe,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../alicloud/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAK7B,QAAA,eAAe,GAAuD,IAAW,CAAC;AAC/F,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAIxE,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,iBAAiB,GAA2D,IAAW,CAAC;AACrG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAGzF,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,gDAAgD;gBACjD,OAAO,IAAI,uBAAe,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,KAAK,4CAA4C;gBAC7C,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,oDAAoD;gBACrD,OAAO,IAAI,yBAAiB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/D;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAA;AACnF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,EAAE,OAAO,CAAC,CAAA;AACjF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,4BAA4B,EAAE,OAAO,CAAC,CAAA"}