pulumi-alicloud 3.56.0a1716440817__py3-none-any.whl → 3.56.0a1716959723__py3-none-any.whl

pulumi_alicloud/kms/key.py

@@ -30,7 +30,10 @@ class KeyArgs:
                  tags: Optional[pulumi.Input[Mapping[str, Any]]] = None):
         """
         The set of arguments for constructing a Key resource.
-        :param pulumi.Input[str] automatic_rotation: Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values:
+        :param pulumi.Input[str] automatic_rotation: Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values: 
+               - `Enabled`
+               - `Disabled`
+               **NOTE**: If you set the origin parameter to EXTERNAL or the key_spec parameter to an asymmetric CMK type, automatic key rotation is unavailable.
         :param pulumi.Input[int] deletion_window_in_days: Field `deletion_window_in_days` has been deprecated from provider version 1.85.0. New field `pending_window_in_days` instead.
         :param pulumi.Input[str] description: The description of the CMK. The description can be 0 to 8,192 characters in length.
         :param pulumi.Input[str] dkms_instance_id: The instance ID of the exclusive KMS instance.
@@ -42,12 +45,22 @@ class KeyArgs:
         :param pulumi.Input[str] key_usage: The usage of the CMK. Default value: `ENCRYPT/DECRYPT`. Valid values:
                - `ENCRYPT/DECRYPT`: encrypts or decrypts data.
                - `SIGN/VERIFY`: generates or verifies a digital signature.
-        :param pulumi.Input[str] origin: The source of key material. Default value: `Aliyun_KMS`. Valid values:
+        :param pulumi.Input[str] origin: The source of key material. Default value: `Aliyun_KMS`. Valid values: 
+               - `Aliyun_KMS`
+               - `EXTERNAL`
+               **NOTE**: The value of this parameter is case-sensitive. If you set the `key_spec` to an asymmetric CMK type,
+               you are not allowed to set the `origin` to EXTERNAL. If you set the `origin` to EXTERNAL, you must import key material.
+               For more information, see [import key material](https://www.alibabacloud.com/help/en/doc-detail/68523.htm).
         :param pulumi.Input[int] pending_window_in_days: The number of days before the CMK is deleted. 
                During this period, the CMK is in the PendingDeletion state.
                After this period ends, you cannot cancel the deletion. Valid values: 7 to 366. Unit: days.
                **NOTE:** From version 1.184.0, `pending_window_in_days` can be set to `366`.
         :param pulumi.Input[str] protection_level: The protection level of the CMK. Default value: `SOFTWARE`. Valid values:
+               - `SOFTWARE`
+               - `HSM`
+               **NOTE**: The value of this parameter is case-sensitive. Assume that you set this parameter to HSM.
+               If you set the origin parameter to Aliyun_KMS, the CMK is created in a managed hardware security module (HSM).
+               If you set the origin parameter to EXTERNA, you can import an external key to the managed HSM.
         :param pulumi.Input[str] rotation_interval: The interval for automatic key rotation. Specify the value in the integer[unit] format.
                The following units are supported: d (day), h (hour), m (minute), and s (second).
                For example, you can use either 7d or 604800s to specify a seven-day interval.
@@ -55,7 +68,10 @@ class KeyArgs:
                **NOTE**: It is Required when `automatic_rotation = "Enabled"`
                
                > **NOTE:** When the pre-deletion days elapses, the key is permanently deleted and cannot be recovered.
-        :param pulumi.Input[str] status: The status of CMK. Default value: `Enabled`. Valid Values:
+        :param pulumi.Input[str] status: The status of CMK. Default value: `Enabled`. Valid Values: 
+               - `Disabled`
+               - `Enabled`
+               - `PendingDeletion`
         :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
         """
         if automatic_rotation is not None:
@@ -100,7 +116,10 @@ class KeyArgs:
     @pulumi.getter(name="automaticRotation")
     def automatic_rotation(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values:
+        Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values: 
+        - `Enabled`
+        - `Disabled`
+        **NOTE**: If you set the origin parameter to EXTERNAL or the key_spec parameter to an asymmetric CMK type, automatic key rotation is unavailable.
         """
         return pulumi.get(self, "automatic_rotation")
 
@@ -209,7 +228,12 @@ class KeyArgs:
     @pulumi.getter
     def origin(self) -> Optional[pulumi.Input[str]]:
         """
-        The source of key material. Default value: `Aliyun_KMS`. Valid values:
+        The source of key material. Default value: `Aliyun_KMS`. Valid values: 
+        - `Aliyun_KMS`
+        - `EXTERNAL`
+        **NOTE**: The value of this parameter is case-sensitive. If you set the `key_spec` to an asymmetric CMK type,
+        you are not allowed to set the `origin` to EXTERNAL. If you set the `origin` to EXTERNAL, you must import key material.
+        For more information, see [import key material](https://www.alibabacloud.com/help/en/doc-detail/68523.htm).
         """
         return pulumi.get(self, "origin")
 
@@ -237,6 +261,11 @@ class KeyArgs:
     def protection_level(self) -> Optional[pulumi.Input[str]]:
         """
         The protection level of the CMK. Default value: `SOFTWARE`. Valid values:
+        - `SOFTWARE`
+        - `HSM`
+        **NOTE**: The value of this parameter is case-sensitive. Assume that you set this parameter to HSM.
+        If you set the origin parameter to Aliyun_KMS, the CMK is created in a managed hardware security module (HSM).
+        If you set the origin parameter to EXTERNA, you can import an external key to the managed HSM.
         """
         return pulumi.get(self, "protection_level")
 
@@ -266,7 +295,10 @@ class KeyArgs:
     @pulumi.getter
     def status(self) -> Optional[pulumi.Input[str]]:
         """
-        The status of CMK. Default value: `Enabled`. Valid Values:
+        The status of CMK. Default value: `Enabled`. Valid Values: 
+        - `Disabled`
+        - `Enabled`
+        - `PendingDeletion`
         """
         return pulumi.get(self, "status")
 
@@ -315,7 +347,10 @@ class _KeyState:
         """
         Input properties used for looking up and filtering Key resources.
         :param pulumi.Input[str] arn: The Alicloud Resource Name (ARN) of the key.
-        :param pulumi.Input[str] automatic_rotation: Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values:
+        :param pulumi.Input[str] automatic_rotation: Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values: 
+               - `Enabled`
+               - `Disabled`
+               **NOTE**: If you set the origin parameter to EXTERNAL or the key_spec parameter to an asymmetric CMK type, automatic key rotation is unavailable.
         :param pulumi.Input[str] creation_date: The date and time when the CMK was created. The time is displayed in UTC.
         :param pulumi.Input[str] creator: The creator of the CMK.
         :param pulumi.Input[str] delete_date: The scheduled date to delete CMK. The time is displayed in UTC. This value is returned only when the KeyState value is PendingDeletion.
@@ -333,13 +368,23 @@ class _KeyState:
         :param pulumi.Input[str] last_rotation_date: The date and time the last rotation was performed. The time is displayed in UTC.
         :param pulumi.Input[str] material_expire_time: The time and date the key material for the CMK expires. The time is displayed in UTC. If the value is empty, the key material for the CMK does not expire.
         :param pulumi.Input[str] next_rotation_date: The time the next rotation is scheduled for execution.
-        :param pulumi.Input[str] origin: The source of key material. Default value: `Aliyun_KMS`. Valid values:
+        :param pulumi.Input[str] origin: The source of key material. Default value: `Aliyun_KMS`. Valid values: 
+               - `Aliyun_KMS`
+               - `EXTERNAL`
+               **NOTE**: The value of this parameter is case-sensitive. If you set the `key_spec` to an asymmetric CMK type,
+               you are not allowed to set the `origin` to EXTERNAL. If you set the `origin` to EXTERNAL, you must import key material.
+               For more information, see [import key material](https://www.alibabacloud.com/help/en/doc-detail/68523.htm).
         :param pulumi.Input[int] pending_window_in_days: The number of days before the CMK is deleted. 
                During this period, the CMK is in the PendingDeletion state.
                After this period ends, you cannot cancel the deletion. Valid values: 7 to 366. Unit: days.
                **NOTE:** From version 1.184.0, `pending_window_in_days` can be set to `366`.
         :param pulumi.Input[str] primary_key_version: The ID of the current primary key version of the symmetric CMK.
         :param pulumi.Input[str] protection_level: The protection level of the CMK. Default value: `SOFTWARE`. Valid values:
+               - `SOFTWARE`
+               - `HSM`
+               **NOTE**: The value of this parameter is case-sensitive. Assume that you set this parameter to HSM.
+               If you set the origin parameter to Aliyun_KMS, the CMK is created in a managed hardware security module (HSM).
+               If you set the origin parameter to EXTERNA, you can import an external key to the managed HSM.
         :param pulumi.Input[str] rotation_interval: The interval for automatic key rotation. Specify the value in the integer[unit] format.
                The following units are supported: d (day), h (hour), m (minute), and s (second).
                For example, you can use either 7d or 604800s to specify a seven-day interval.
@@ -347,7 +392,10 @@ class _KeyState:
                **NOTE**: It is Required when `automatic_rotation = "Enabled"`
                
                > **NOTE:** When the pre-deletion days elapses, the key is permanently deleted and cannot be recovered.
-        :param pulumi.Input[str] status: The status of CMK. Default value: `Enabled`. Valid Values:
+        :param pulumi.Input[str] status: The status of CMK. Default value: `Enabled`. Valid Values: 
+               - `Disabled`
+               - `Enabled`
+               - `PendingDeletion`
         :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
         """
         if arn is not None:
@@ -420,7 +468,10 @@ class _KeyState:
     @pulumi.getter(name="automaticRotation")
     def automatic_rotation(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values:
+        Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values: 
+        - `Enabled`
+        - `Disabled`
+        **NOTE**: If you set the origin parameter to EXTERNAL or the key_spec parameter to an asymmetric CMK type, automatic key rotation is unavailable.
         """
         return pulumi.get(self, "automatic_rotation")
 
@@ -601,7 +652,12 @@ class _KeyState:
     @pulumi.getter
     def origin(self) -> Optional[pulumi.Input[str]]:
         """
-        The source of key material. Default value: `Aliyun_KMS`. Valid values:
+        The source of key material. Default value: `Aliyun_KMS`. Valid values: 
+        - `Aliyun_KMS`
+        - `EXTERNAL`
+        **NOTE**: The value of this parameter is case-sensitive. If you set the `key_spec` to an asymmetric CMK type,
+        you are not allowed to set the `origin` to EXTERNAL. If you set the `origin` to EXTERNAL, you must import key material.
+        For more information, see [import key material](https://www.alibabacloud.com/help/en/doc-detail/68523.htm).
         """
         return pulumi.get(self, "origin")
 
@@ -641,6 +697,11 @@ class _KeyState:
     def protection_level(self) -> Optional[pulumi.Input[str]]:
         """
         The protection level of the CMK. Default value: `SOFTWARE`. Valid values:
+        - `SOFTWARE`
+        - `HSM`
+        **NOTE**: The value of this parameter is case-sensitive. Assume that you set this parameter to HSM.
+        If you set the origin parameter to Aliyun_KMS, the CMK is created in a managed hardware security module (HSM).
+        If you set the origin parameter to EXTERNA, you can import an external key to the managed HSM.
         """
         return pulumi.get(self, "protection_level")
 
@@ -670,7 +731,10 @@ class _KeyState:
     @pulumi.getter
     def status(self) -> Optional[pulumi.Input[str]]:
         """
-        The status of CMK. Default value: `Enabled`. Valid Values:
+        The status of CMK. Default value: `Enabled`. Valid Values: 
+        - `Disabled`
+        - `Enabled`
+        - `PendingDeletion`
         """
         return pulumi.get(self, "status")
 
@@ -740,7 +804,10 @@ class Key(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[str] automatic_rotation: Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values:
+        :param pulumi.Input[str] automatic_rotation: Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values: 
+               - `Enabled`
+               - `Disabled`
+               **NOTE**: If you set the origin parameter to EXTERNAL or the key_spec parameter to an asymmetric CMK type, automatic key rotation is unavailable.
         :param pulumi.Input[int] deletion_window_in_days: Field `deletion_window_in_days` has been deprecated from provider version 1.85.0. New field `pending_window_in_days` instead.
         :param pulumi.Input[str] description: The description of the CMK. The description can be 0 to 8,192 characters in length.
         :param pulumi.Input[str] dkms_instance_id: The instance ID of the exclusive KMS instance.
@@ -752,12 +819,22 @@ class Key(pulumi.CustomResource):
         :param pulumi.Input[str] key_usage: The usage of the CMK. Default value: `ENCRYPT/DECRYPT`. Valid values:
                - `ENCRYPT/DECRYPT`: encrypts or decrypts data.
                - `SIGN/VERIFY`: generates or verifies a digital signature.
-        :param pulumi.Input[str] origin: The source of key material. Default value: `Aliyun_KMS`. Valid values:
+        :param pulumi.Input[str] origin: The source of key material. Default value: `Aliyun_KMS`. Valid values: 
+               - `Aliyun_KMS`
+               - `EXTERNAL`
+               **NOTE**: The value of this parameter is case-sensitive. If you set the `key_spec` to an asymmetric CMK type,
+               you are not allowed to set the `origin` to EXTERNAL. If you set the `origin` to EXTERNAL, you must import key material.
+               For more information, see [import key material](https://www.alibabacloud.com/help/en/doc-detail/68523.htm).
         :param pulumi.Input[int] pending_window_in_days: The number of days before the CMK is deleted. 
                During this period, the CMK is in the PendingDeletion state.
                After this period ends, you cannot cancel the deletion. Valid values: 7 to 366. Unit: days.
                **NOTE:** From version 1.184.0, `pending_window_in_days` can be set to `366`.
         :param pulumi.Input[str] protection_level: The protection level of the CMK. Default value: `SOFTWARE`. Valid values:
+               - `SOFTWARE`
+               - `HSM`
+               **NOTE**: The value of this parameter is case-sensitive. Assume that you set this parameter to HSM.
+               If you set the origin parameter to Aliyun_KMS, the CMK is created in a managed hardware security module (HSM).
+               If you set the origin parameter to EXTERNA, you can import an external key to the managed HSM.
         :param pulumi.Input[str] rotation_interval: The interval for automatic key rotation. Specify the value in the integer[unit] format.
                The following units are supported: d (day), h (hour), m (minute), and s (second).
                For example, you can use either 7d or 604800s to specify a seven-day interval.
@@ -765,7 +842,10 @@ class Key(pulumi.CustomResource):
                **NOTE**: It is Required when `automatic_rotation = "Enabled"`
                
                > **NOTE:** When the pre-deletion days elapses, the key is permanently deleted and cannot be recovered.
-        :param pulumi.Input[str] status: The status of CMK. Default value: `Enabled`. Valid Values:
+        :param pulumi.Input[str] status: The status of CMK. Default value: `Enabled`. Valid Values: 
+               - `Disabled`
+               - `Enabled`
+               - `PendingDeletion`
         :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
         """
         ...
@@ -901,7 +981,10 @@ class Key(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] arn: The Alicloud Resource Name (ARN) of the key.
-        :param pulumi.Input[str] automatic_rotation: Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values:
+        :param pulumi.Input[str] automatic_rotation: Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values: 
+               - `Enabled`
+               - `Disabled`
+               **NOTE**: If you set the origin parameter to EXTERNAL or the key_spec parameter to an asymmetric CMK type, automatic key rotation is unavailable.
         :param pulumi.Input[str] creation_date: The date and time when the CMK was created. The time is displayed in UTC.
         :param pulumi.Input[str] creator: The creator of the CMK.
         :param pulumi.Input[str] delete_date: The scheduled date to delete CMK. The time is displayed in UTC. This value is returned only when the KeyState value is PendingDeletion.
@@ -919,13 +1002,23 @@ class Key(pulumi.CustomResource):
         :param pulumi.Input[str] last_rotation_date: The date and time the last rotation was performed. The time is displayed in UTC.
         :param pulumi.Input[str] material_expire_time: The time and date the key material for the CMK expires. The time is displayed in UTC. If the value is empty, the key material for the CMK does not expire.
         :param pulumi.Input[str] next_rotation_date: The time the next rotation is scheduled for execution.
-        :param pulumi.Input[str] origin: The source of key material. Default value: `Aliyun_KMS`. Valid values:
+        :param pulumi.Input[str] origin: The source of key material. Default value: `Aliyun_KMS`. Valid values: 
+               - `Aliyun_KMS`
+               - `EXTERNAL`
+               **NOTE**: The value of this parameter is case-sensitive. If you set the `key_spec` to an asymmetric CMK type,
+               you are not allowed to set the `origin` to EXTERNAL. If you set the `origin` to EXTERNAL, you must import key material.
+               For more information, see [import key material](https://www.alibabacloud.com/help/en/doc-detail/68523.htm).
         :param pulumi.Input[int] pending_window_in_days: The number of days before the CMK is deleted. 
                During this period, the CMK is in the PendingDeletion state.
                After this period ends, you cannot cancel the deletion. Valid values: 7 to 366. Unit: days.
                **NOTE:** From version 1.184.0, `pending_window_in_days` can be set to `366`.
         :param pulumi.Input[str] primary_key_version: The ID of the current primary key version of the symmetric CMK.
         :param pulumi.Input[str] protection_level: The protection level of the CMK. Default value: `SOFTWARE`. Valid values:
+               - `SOFTWARE`
+               - `HSM`
+               **NOTE**: The value of this parameter is case-sensitive. Assume that you set this parameter to HSM.
+               If you set the origin parameter to Aliyun_KMS, the CMK is created in a managed hardware security module (HSM).
+               If you set the origin parameter to EXTERNA, you can import an external key to the managed HSM.
         :param pulumi.Input[str] rotation_interval: The interval for automatic key rotation. Specify the value in the integer[unit] format.
                The following units are supported: d (day), h (hour), m (minute), and s (second).
                For example, you can use either 7d or 604800s to specify a seven-day interval.
@@ -933,7 +1026,10 @@ class Key(pulumi.CustomResource):
                **NOTE**: It is Required when `automatic_rotation = "Enabled"`
                
                > **NOTE:** When the pre-deletion days elapses, the key is permanently deleted and cannot be recovered.
-        :param pulumi.Input[str] status: The status of CMK. Default value: `Enabled`. Valid Values:
+        :param pulumi.Input[str] status: The status of CMK. Default value: `Enabled`. Valid Values: 
+               - `Disabled`
+               - `Enabled`
+               - `PendingDeletion`
         :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -976,7 +1072,10 @@ class Key(pulumi.CustomResource):
     @pulumi.getter(name="automaticRotation")
     def automatic_rotation(self) -> pulumi.Output[str]:
         """
-        Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values:
+        Specifies whether to enable automatic key rotation. Default value: `Disabled`. Valid values: 
+        - `Enabled`
+        - `Disabled`
+        **NOTE**: If you set the origin parameter to EXTERNAL or the key_spec parameter to an asymmetric CMK type, automatic key rotation is unavailable.
         """
         return pulumi.get(self, "automatic_rotation")
 
@@ -1101,7 +1200,12 @@ class Key(pulumi.CustomResource):
     @pulumi.getter
     def origin(self) -> pulumi.Output[str]:
         """
-        The source of key material. Default value: `Aliyun_KMS`. Valid values:
+        The source of key material. Default value: `Aliyun_KMS`. Valid values: 
+        - `Aliyun_KMS`
+        - `EXTERNAL`
+        **NOTE**: The value of this parameter is case-sensitive. If you set the `key_spec` to an asymmetric CMK type,
+        you are not allowed to set the `origin` to EXTERNAL. If you set the `origin` to EXTERNAL, you must import key material.
+        For more information, see [import key material](https://www.alibabacloud.com/help/en/doc-detail/68523.htm).
         """
         return pulumi.get(self, "origin")
 
@@ -1129,6 +1233,11 @@ class Key(pulumi.CustomResource):
     def protection_level(self) -> pulumi.Output[Optional[str]]:
         """
         The protection level of the CMK. Default value: `SOFTWARE`. Valid values:
+        - `SOFTWARE`
+        - `HSM`
+        **NOTE**: The value of this parameter is case-sensitive. Assume that you set this parameter to HSM.
+        If you set the origin parameter to Aliyun_KMS, the CMK is created in a managed hardware security module (HSM).
+        If you set the origin parameter to EXTERNA, you can import an external key to the managed HSM.
         """
         return pulumi.get(self, "protection_level")
 
@@ -1150,7 +1259,10 @@ class Key(pulumi.CustomResource):
     @pulumi.getter
     def status(self) -> pulumi.Output[str]:
         """
-        The status of CMK. Default value: `Enabled`. Valid Values:
+        The status of CMK. Default value: `Enabled`. Valid Values: 
+        - `Disabled`
+        - `Enabled`
+        - `PendingDeletion`
         """
         return pulumi.get(self, "status")
 

pulumi_alicloud/kms/secret.py

@@ -44,6 +44,10 @@ class SecretArgs:
         :param pulumi.Input[str] rotation_interval: The time period of automatic rotation. The format is integer[unit], where integer represents the length of time, and unit represents the unit of time. The legal unit units are: d (day), h (hour), m (minute), s (second). 7d or 604800s both indicate a 7-day cycle.
         :param pulumi.Input[str] secret_data_type: The type of the secret value. Valid values: text, binary. Default to "text".
         :param pulumi.Input[str] secret_type: The type of the secret. Valid values:
+               - `Generic`: specifies a generic secret.
+               - `Rds`: specifies a managed ApsaraDB RDS secret.
+               - `RAMCredentials`: indicates a managed RAM secret.
+               - `ECS`: specifies a managed ECS secret.
         :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
         """
@@ -224,6 +228,10 @@ class SecretArgs:
     def secret_type(self) -> Optional[pulumi.Input[str]]:
         """
         The type of the secret. Valid values:
+        - `Generic`: specifies a generic secret.
+        - `Rds`: specifies a managed ApsaraDB RDS secret.
+        - `RAMCredentials`: indicates a managed RAM secret.
+        - `ECS`: specifies a managed ECS secret.
         """
         return pulumi.get(self, "secret_type")
 
@@ -292,6 +300,10 @@ class _SecretState:
         :param pulumi.Input[str] secret_data_type: The type of the secret value. Valid values: text, binary. Default to "text".
         :param pulumi.Input[str] secret_name: The name of the secret.
         :param pulumi.Input[str] secret_type: The type of the secret. Valid values:
+               - `Generic`: specifies a generic secret.
+               - `Rds`: specifies a managed ApsaraDB RDS secret.
+               - `RAMCredentials`: indicates a managed RAM secret.
+               - `ECS`: specifies a managed ECS secret.
         :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
         :param pulumi.Input[str] version_id: The version number of the initial version. Version numbers are unique in each secret object.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
@@ -492,6 +504,10 @@ class _SecretState:
     def secret_type(self) -> Optional[pulumi.Input[str]]:
         """
         The type of the secret. Valid values:
+        - `Generic`: specifies a generic secret.
+        - `Rds`: specifies a managed ApsaraDB RDS secret.
+        - `RAMCredentials`: indicates a managed RAM secret.
+        - `ECS`: specifies a managed ECS secret.
         """
         return pulumi.get(self, "secret_type")
 
@@ -600,6 +616,10 @@ class Secret(pulumi.CustomResource):
         :param pulumi.Input[str] secret_data_type: The type of the secret value. Valid values: text, binary. Default to "text".
         :param pulumi.Input[str] secret_name: The name of the secret.
         :param pulumi.Input[str] secret_type: The type of the secret. Valid values:
+               - `Generic`: specifies a generic secret.
+               - `Rds`: specifies a managed ApsaraDB RDS secret.
+               - `RAMCredentials`: indicates a managed RAM secret.
+               - `ECS`: specifies a managed ECS secret.
         :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
         :param pulumi.Input[str] version_id: The version number of the initial version. Version numbers are unique in each secret object.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
@@ -751,6 +771,10 @@ class Secret(pulumi.CustomResource):
         :param pulumi.Input[str] secret_data_type: The type of the secret value. Valid values: text, binary. Default to "text".
         :param pulumi.Input[str] secret_name: The name of the secret.
         :param pulumi.Input[str] secret_type: The type of the secret. Valid values:
+               - `Generic`: specifies a generic secret.
+               - `Rds`: specifies a managed ApsaraDB RDS secret.
+               - `RAMCredentials`: indicates a managed RAM secret.
+               - `ECS`: specifies a managed ECS secret.
         :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
         :param pulumi.Input[str] version_id: The version number of the initial version. Version numbers are unique in each secret object.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
@@ -887,6 +911,10 @@ class Secret(pulumi.CustomResource):
     def secret_type(self) -> pulumi.Output[str]:
         """
         The type of the secret. Valid values:
+        - `Generic`: specifies a generic secret.
+        - `Rds`: specifies a managed ApsaraDB RDS secret.
+        - `RAMCredentials`: indicates a managed RAM secret.
+        - `ECS`: specifies a managed ECS secret.
         """
         return pulumi.get(self, "secret_type")
 

pulumi_alicloud/kvstore/account.py

@@ -30,7 +30,9 @@ class AccountArgs:
                * The name cannot be one of the reserved words in the [Reserved words for Redis account names](https://www.alibabacloud.com/help/zh/doc-detail/92665.htm) section.
         :param pulumi.Input[str] instance_id: The Id of instance in which account belongs (The engine version of instance must be 4.0 or 4.0+).
         :param pulumi.Input[str] account_password: The password of the account. The password must be 8 to 32 characters in length. It must contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters. Special characters include `!@ # $ % ^ & * ( ) _ + - =`. You have to specify one of `account_password` and `kms_encrypted_password` fields.
-        :param pulumi.Input[str] account_privilege: The privilege of account access database. Default value: `RoleReadWrite`
+        :param pulumi.Input[str] account_privilege: The privilege of account access database. Default value: `RoleReadWrite` 
+               - `RoleReadOnly`: This value is only for Redis and Memcache
+               - `RoleReadWrite`: This value is only for Redis and Memcache
         :param pulumi.Input[str] account_type: Privilege type of account.
                - Normal: Common privilege.
                Default to Normal.
@@ -96,7 +98,9 @@ class AccountArgs:
     @pulumi.getter(name="accountPrivilege")
     def account_privilege(self) -> Optional[pulumi.Input[str]]:
         """
-        The privilege of account access database. Default value: `RoleReadWrite`
+        The privilege of account access database. Default value: `RoleReadWrite` 
+        - `RoleReadOnly`: This value is only for Redis and Memcache
+        - `RoleReadWrite`: This value is only for Redis and Memcache
         """
         return pulumi.get(self, "account_privilege")
 
@@ -174,7 +178,9 @@ class _AccountState:
                * The name can be up to 100 characters in length.
                * The name cannot be one of the reserved words in the [Reserved words for Redis account names](https://www.alibabacloud.com/help/zh/doc-detail/92665.htm) section.
         :param pulumi.Input[str] account_password: The password of the account. The password must be 8 to 32 characters in length. It must contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters. Special characters include `!@ # $ % ^ & * ( ) _ + - =`. You have to specify one of `account_password` and `kms_encrypted_password` fields.
-        :param pulumi.Input[str] account_privilege: The privilege of account access database. Default value: `RoleReadWrite`
+        :param pulumi.Input[str] account_privilege: The privilege of account access database. Default value: `RoleReadWrite` 
+               - `RoleReadOnly`: This value is only for Redis and Memcache
+               - `RoleReadWrite`: This value is only for Redis and Memcache
         :param pulumi.Input[str] account_type: Privilege type of account.
                - Normal: Common privilege.
                Default to Normal.
@@ -234,7 +240,9 @@ class _AccountState:
     @pulumi.getter(name="accountPrivilege")
     def account_privilege(self) -> Optional[pulumi.Input[str]]:
         """
-        The privilege of account access database. Default value: `RoleReadWrite`
+        The privilege of account access database. Default value: `RoleReadWrite` 
+        - `RoleReadOnly`: This value is only for Redis and Memcache
+        - `RoleReadWrite`: This value is only for Redis and Memcache
         """
         return pulumi.get(self, "account_privilege")
 
@@ -398,7 +406,9 @@ class Account(pulumi.CustomResource):
                * The name can be up to 100 characters in length.
                * The name cannot be one of the reserved words in the [Reserved words for Redis account names](https://www.alibabacloud.com/help/zh/doc-detail/92665.htm) section.
         :param pulumi.Input[str] account_password: The password of the account. The password must be 8 to 32 characters in length. It must contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters. Special characters include `!@ # $ % ^ & * ( ) _ + - =`. You have to specify one of `account_password` and `kms_encrypted_password` fields.
-        :param pulumi.Input[str] account_privilege: The privilege of account access database. Default value: `RoleReadWrite`
+        :param pulumi.Input[str] account_privilege: The privilege of account access database. Default value: `RoleReadWrite` 
+               - `RoleReadOnly`: This value is only for Redis and Memcache
+               - `RoleReadWrite`: This value is only for Redis and Memcache
         :param pulumi.Input[str] account_type: Privilege type of account.
                - Normal: Common privilege.
                Default to Normal.
@@ -551,7 +561,9 @@ class Account(pulumi.CustomResource):
                * The name can be up to 100 characters in length.
                * The name cannot be one of the reserved words in the [Reserved words for Redis account names](https://www.alibabacloud.com/help/zh/doc-detail/92665.htm) section.
         :param pulumi.Input[str] account_password: The password of the account. The password must be 8 to 32 characters in length. It must contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters. Special characters include `!@ # $ % ^ & * ( ) _ + - =`. You have to specify one of `account_password` and `kms_encrypted_password` fields.
-        :param pulumi.Input[str] account_privilege: The privilege of account access database. Default value: `RoleReadWrite`
+        :param pulumi.Input[str] account_privilege: The privilege of account access database. Default value: `RoleReadWrite` 
+               - `RoleReadOnly`: This value is only for Redis and Memcache
+               - `RoleReadWrite`: This value is only for Redis and Memcache
         :param pulumi.Input[str] account_type: Privilege type of account.
                - Normal: Common privilege.
                Default to Normal.
@@ -599,7 +611,9 @@ class Account(pulumi.CustomResource):
     @pulumi.getter(name="accountPrivilege")
     def account_privilege(self) -> pulumi.Output[Optional[str]]:
         """
-        The privilege of account access database. Default value: `RoleReadWrite`
+        The privilege of account access database. Default value: `RoleReadWrite` 
+        - `RoleReadOnly`: This value is only for Redis and Memcache
+        - `RoleReadWrite`: This value is only for Redis and Memcache
         """
         return pulumi.get(self, "account_privilege")
 

pulumi_alicloud/kvstore/get_accounts.py

@@ -144,7 +144,7 @@ def get_accounts(account_name: Optional[str] = None,
     :param str account_name: The name of the account.
     :param str instance_id: The Id of instance in which account belongs.
     :param str output_file: File name where to save data source results (after running `pulumi preview`).
-    :param str status: The status of account.
+    :param str status: The status of KVStore Account. Valid Values: `"Available` `Unavailable`
     """
     __args__ = dict()
     __args__['accountName'] = account_name
@@ -195,6 +195,6 @@ def get_accounts_output(account_name: Optional[pulumi.Input[Optional[str]]] = No
     :param str account_name: The name of the account.
     :param str instance_id: The Id of instance in which account belongs.
     :param str output_file: File name where to save data source results (after running `pulumi preview`).
-    :param str status: The status of account.
+    :param str status: The status of KVStore Account. Valid Values: `"Available` `Unavailable`
     """
     ...

pulumi_alicloud/kvstore/instance.py

@@ -93,6 +93,8 @@ class InstanceArgs:
         :param pulumi.Input[str] dedicated_host_group_id: The ID of the dedicated cluster. This parameter is required when you create an ApsaraDB for Redis instance in a dedicated cluster.
         :param pulumi.Input[bool] dry_run: Specifies whether to precheck the request. Valid values:
         :param pulumi.Input[str] effective_time: The time when the database is switched after the instance is migrated, or when the major version is upgraded, or when the instance class is upgraded. Valid values:
+               - `Immediately` (Default): The configurations are immediately changed.
+               - `MaintainTime`: The configurations are changed within the maintenance window. You can set `maintain_start_time` and `maintain_end_time` to change the maintenance window.
         :param pulumi.Input[int] enable_backup_log: Turn on or off incremental backup. Valid values: `1`, `0`. Default value: `0`
         :param pulumi.Input[bool] enable_public: It has been deprecated from provider version 1.101.0 and resource `kvstore.Connection` instead.
         :param pulumi.Input[str] encryption_key: The Custom key ID, which you can get by calling DescribeEncryptionKeyList.If this parameter is not passed, the key is automatically generated by the key management service. To create a custom key, you can call the CreateKey interface of the key management service.
@@ -474,6 +476,8 @@ class InstanceArgs:
     def effective_time(self) -> Optional[pulumi.Input[str]]:
         """
         The time when the database is switched after the instance is migrated, or when the major version is upgraded, or when the instance class is upgraded. Valid values:
+        - `Immediately` (Default): The configurations are immediately changed.
+        - `MaintainTime`: The configurations are changed within the maintenance window. You can set `maintain_start_time` and `maintain_end_time` to change the maintenance window.
         """
         return pulumi.get(self, "effective_time")
 
@@ -1108,6 +1112,8 @@ class _InstanceState:
         :param pulumi.Input[str] dedicated_host_group_id: The ID of the dedicated cluster. This parameter is required when you create an ApsaraDB for Redis instance in a dedicated cluster.
         :param pulumi.Input[bool] dry_run: Specifies whether to precheck the request. Valid values:
         :param pulumi.Input[str] effective_time: The time when the database is switched after the instance is migrated, or when the major version is upgraded, or when the instance class is upgraded. Valid values:
+               - `Immediately` (Default): The configurations are immediately changed.
+               - `MaintainTime`: The configurations are changed within the maintenance window. You can set `maintain_start_time` and `maintain_end_time` to change the maintenance window.
         :param pulumi.Input[int] enable_backup_log: Turn on or off incremental backup. Valid values: `1`, `0`. Default value: `0`
         :param pulumi.Input[bool] enable_public: It has been deprecated from provider version 1.101.0 and resource `kvstore.Connection` instead.
         :param pulumi.Input[str] encryption_key: The Custom key ID, which you can get by calling DescribeEncryptionKeyList.If this parameter is not passed, the key is automatically generated by the key management service. To create a custom key, you can call the CreateKey interface of the key management service.
@@ -1546,6 +1552,8 @@ class _InstanceState:
     def effective_time(self) -> Optional[pulumi.Input[str]]:
         """
         The time when the database is switched after the instance is migrated, or when the major version is upgraded, or when the instance class is upgraded. Valid values:
+        - `Immediately` (Default): The configurations are immediately changed.
+        - `MaintainTime`: The configurations are changed within the maintenance window. You can set `maintain_start_time` and `maintain_end_time` to change the maintenance window.
         """
         return pulumi.get(self, "effective_time")
 
@@ -2219,6 +2227,8 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] dedicated_host_group_id: The ID of the dedicated cluster. This parameter is required when you create an ApsaraDB for Redis instance in a dedicated cluster.
         :param pulumi.Input[bool] dry_run: Specifies whether to precheck the request. Valid values:
         :param pulumi.Input[str] effective_time: The time when the database is switched after the instance is migrated, or when the major version is upgraded, or when the instance class is upgraded. Valid values:
+               - `Immediately` (Default): The configurations are immediately changed.
+               - `MaintainTime`: The configurations are changed within the maintenance window. You can set `maintain_start_time` and `maintain_end_time` to change the maintenance window.
         :param pulumi.Input[int] enable_backup_log: Turn on or off incremental backup. Valid values: `1`, `0`. Default value: `0`
         :param pulumi.Input[bool] enable_public: It has been deprecated from provider version 1.101.0 and resource `kvstore.Connection` instead.
         :param pulumi.Input[str] encryption_key: The Custom key ID, which you can get by calling DescribeEncryptionKeyList.If this parameter is not passed, the key is automatically generated by the key management service. To create a custom key, you can call the CreateKey interface of the key management service.
@@ -2535,6 +2545,8 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] dedicated_host_group_id: The ID of the dedicated cluster. This parameter is required when you create an ApsaraDB for Redis instance in a dedicated cluster.
         :param pulumi.Input[bool] dry_run: Specifies whether to precheck the request. Valid values:
         :param pulumi.Input[str] effective_time: The time when the database is switched after the instance is migrated, or when the major version is upgraded, or when the instance class is upgraded. Valid values:
+               - `Immediately` (Default): The configurations are immediately changed.
+               - `MaintainTime`: The configurations are changed within the maintenance window. You can set `maintain_start_time` and `maintain_end_time` to change the maintenance window.
         :param pulumi.Input[int] enable_backup_log: Turn on or off incremental backup. Valid values: `1`, `0`. Default value: `0`
         :param pulumi.Input[bool] enable_public: It has been deprecated from provider version 1.101.0 and resource `kvstore.Connection` instead.
         :param pulumi.Input[str] encryption_key: The Custom key ID, which you can get by calling DescribeEncryptionKeyList.If this parameter is not passed, the key is automatically generated by the key management service. To create a custom key, you can call the CreateKey interface of the key management service.
@@ -2817,6 +2829,8 @@ class Instance(pulumi.CustomResource):
     def effective_time(self) -> pulumi.Output[Optional[str]]:
         """
         The time when the database is switched after the instance is migrated, or when the major version is upgraded, or when the instance class is upgraded. Valid values:
+        - `Immediately` (Default): The configurations are immediately changed.
+        - `MaintainTime`: The configurations are changed within the maintenance window. You can set `maintain_start_time` and `maintain_end_time` to change the maintenance window.
         """
         return pulumi.get(self, "effective_time")
 

pulumi_alicloud/lindorm/get_instances.py

@@ -159,7 +159,7 @@ def get_instances(enable_details: Optional[bool] = None,
     :param str name_regex: A regex string to filter results by Instance name.
     :param str output_file: File name where to save data source results (after running `pulumi preview`).
     :param str query_str: The query str, which can use `instance_name` keyword for fuzzy search.
-    :param str status: The status of Instance, enumerative: Valid values: `ACTIVATION`, `DELETED`, `CREATING`, `CLASS_CHANGING`, `LOCKED`, `INSTANCE_LEVEL_MODIFY`, `NET_MODIFYING`, `RESIZING`, `RESTARTING`, `MINOR_VERSION_TRANSING`.
+    :param str status: Instance status, Valid values: `ACTIVATION`, `DELETED`, `CREATING`, `CLASS_CHANGING`, `LOCKED`, `INSTANCE_LEVEL_MODIFY`, `NET_MODIFYING`, `RESIZING`, `RESTARTING`, `MINOR_VERSION_TRANSING`.
     :param int support_engine: The support engine. Valid values: `1` to `7`.
     """
     __args__ = dict()
@@ -220,7 +220,7 @@ def get_instances_output(enable_details: Optional[pulumi.Input[Optional[bool]]]
     :param str name_regex: A regex string to filter results by Instance name.
     :param str output_file: File name where to save data source results (after running `pulumi preview`).
     :param str query_str: The query str, which can use `instance_name` keyword for fuzzy search.
-    :param str status: The status of Instance, enumerative: Valid values: `ACTIVATION`, `DELETED`, `CREATING`, `CLASS_CHANGING`, `LOCKED`, `INSTANCE_LEVEL_MODIFY`, `NET_MODIFYING`, `RESIZING`, `RESTARTING`, `MINOR_VERSION_TRANSING`.
+    :param str status: Instance status, Valid values: `ACTIVATION`, `DELETED`, `CREATING`, `CLASS_CHANGING`, `LOCKED`, `INSTANCE_LEVEL_MODIFY`, `NET_MODIFYING`, `RESIZING`, `RESTARTING`, `MINOR_VERSION_TRANSING`.
     :param int support_engine: The support engine. Valid values: `1` to `7`.
     """
     ...