pulumi-alicloud 3.56.0a1717132537__py3-none-any.whl → 3.56.0a1717175543__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-alicloud might be problematic. Click here for more details.

Files changed (43) hide show
  1. pulumi_alicloud/__init__.py +96 -0
  2. pulumi_alicloud/alikafka/instance.py +47 -0
  3. pulumi_alicloud/apigateway/__init__.py +1 -0
  4. pulumi_alicloud/apigateway/_inputs.py +40 -0
  5. pulumi_alicloud/apigateway/access_control_list.py +322 -0
  6. pulumi_alicloud/apigateway/get_apis.py +96 -23
  7. pulumi_alicloud/apigateway/outputs.py +72 -14
  8. pulumi_alicloud/apigateway/plugin.py +225 -73
  9. pulumi_alicloud/cen/get_transit_router_vpc_attachments.py +171 -18
  10. pulumi_alicloud/cen/outputs.py +51 -22
  11. pulumi_alicloud/cloudfirewall/__init__.py +2 -0
  12. pulumi_alicloud/cloudfirewall/_inputs.py +68 -0
  13. pulumi_alicloud/cloudfirewall/nat_firewall.py +811 -0
  14. pulumi_alicloud/cloudfirewall/nat_firewall_control_policy.py +1589 -0
  15. pulumi_alicloud/cloudfirewall/outputs.py +75 -0
  16. pulumi_alicloud/ecs/security_group_rule.py +75 -53
  17. pulumi_alicloud/ess/_inputs.py +56 -0
  18. pulumi_alicloud/ess/outputs.py +61 -0
  19. pulumi_alicloud/ess/scaling_group.py +101 -7
  20. pulumi_alicloud/kms/key.py +251 -333
  21. pulumi_alicloud/kms/secret.py +210 -125
  22. pulumi_alicloud/nas/__init__.py +2 -0
  23. pulumi_alicloud/nas/_inputs.py +126 -0
  24. pulumi_alicloud/nas/access_point.py +743 -0
  25. pulumi_alicloud/nas/outputs.py +128 -0
  26. pulumi_alicloud/oss/__init__.py +7 -0
  27. pulumi_alicloud/oss/account_public_access_block.py +200 -0
  28. pulumi_alicloud/oss/bucket_access_monitor.py +206 -0
  29. pulumi_alicloud/oss/bucket_data_redundancy_transition.py +290 -0
  30. pulumi_alicloud/oss/bucket_meta_query.py +270 -0
  31. pulumi_alicloud/oss/bucket_public_access_block.py +258 -0
  32. pulumi_alicloud/oss/bucket_transfer_acceleration.py +205 -0
  33. pulumi_alicloud/oss/bucket_user_defined_log_fields.py +328 -0
  34. pulumi_alicloud/pulumi-plugin.json +1 -1
  35. pulumi_alicloud/redis/tair_instance.py +188 -0
  36. pulumi_alicloud/sls/__init__.py +1 -0
  37. pulumi_alicloud/sls/_inputs.py +384 -0
  38. pulumi_alicloud/sls/outputs.py +358 -0
  39. pulumi_alicloud/sls/scheduled_sql.py +523 -0
  40. {pulumi_alicloud-3.56.0a1717132537.dist-info → pulumi_alicloud-3.56.0a1717175543.dist-info}/METADATA +1 -1
  41. {pulumi_alicloud-3.56.0a1717132537.dist-info → pulumi_alicloud-3.56.0a1717175543.dist-info}/RECORD +43 -30
  42. {pulumi_alicloud-3.56.0a1717132537.dist-info → pulumi_alicloud-3.56.0a1717175543.dist-info}/WHEEL +0 -0
  43. {pulumi_alicloud-3.56.0a1717132537.dist-info → pulumi_alicloud-3.56.0a1717175543.dist-info}/top_level.txt +0 -0
pulumi_alicloud/kms/secret.py CHANGED
@@ -23,6 +23,7 @@ class SecretArgs:
23
23
  encryption_key_id: Optional[pulumi.Input[str]] = None,
24
24
  extended_config: Optional[pulumi.Input[str]] = None,
25
25
  force_delete_without_recovery: Optional[pulumi.Input[bool]] = None,
26
+ policy: Optional[pulumi.Input[str]] = None,
26
27
  recovery_window_in_days: Optional[pulumi.Input[int]] = None,
27
28
  rotation_interval: Optional[pulumi.Input[str]] = None,
28
29
  secret_data_type: Optional[pulumi.Input[str]] = None,
@@ -31,25 +32,26 @@ class SecretArgs:
31
32
  version_stages: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
32
33
  """
33
34
  The set of arguments for constructing a Secret resource.
34
- :param pulumi.Input[str] secret_data: The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores it in the initial version. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
35
+ :param pulumi.Input[str] secret_data: The data of the secret. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
35
36
  :param pulumi.Input[str] secret_name: The name of the secret.
36
- :param pulumi.Input[str] version_id: The version number of the initial version. Version numbers are unique in each secret object.
37
+ :param pulumi.Input[str] version_id: The version number of the initial version.
37
38
  :param pulumi.Input[str] description: The description of the secret.
38
- :param pulumi.Input[str] dkms_instance_id: The instance ID of the exclusive KMS instance.
39
- :param pulumi.Input[bool] enable_automatic_rotation: Whether to enable automatic key rotation.
40
- :param pulumi.Input[str] encryption_key_id: The ID of the KMS CMK that is used to encrypt the secret value. If you do not specify this parameter, Secrets Manager automatically creates an encryption key to encrypt the secret.
41
- :param pulumi.Input[str] extended_config: The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
42
- :param pulumi.Input[bool] force_delete_without_recovery: Specifies whether to forcibly delete the secret. If this parameter is set to true, the secret cannot be recovered. Valid values: true, false. Default to: false.
43
- :param pulumi.Input[int] recovery_window_in_days: Specifies the recovery period of the secret if you do not forcibly delete it. Default value: 30. It will be ignored when `force_delete_without_recovery` is true.
44
- :param pulumi.Input[str] rotation_interval: The time period of automatic rotation. The format is integer[unit], where integer represents the length of time, and unit represents the unit of time. The legal unit units are: d (day), h (hour), m (minute), s (second). 7d or 604800s both indicate a 7-day cycle.
45
- :param pulumi.Input[str] secret_data_type: The type of the secret value. Valid values: text, binary. Default to "text".
39
+ :param pulumi.Input[str] dkms_instance_id: The ID of the KMS instance.
40
+ :param pulumi.Input[bool] enable_automatic_rotation: Specifies whether to enable automatic rotation. Default value: `false`. Valid values: `true`, `false`.
41
+ :param pulumi.Input[str] encryption_key_id: The ID of the KMS key.
42
+ :param pulumi.Input[str] extended_config: The extended configuration of the secret. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
43
+ :param pulumi.Input[bool] force_delete_without_recovery: Specifies whether to immediately delete a secret. Default value: `false`. Valid values: `true`, `false`.
44
+ :param pulumi.Input[str] policy: The content of the secret policy. The value is in the JSON format. The value can be up to 32,768 bytes in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/kms/developer-reference/api-setsecretpolicy).
45
+ :param pulumi.Input[int] recovery_window_in_days: Specifies the recovery period of the secret if you do not forcibly delete it. Default value: `30`. **NOTE:** If `force_delete_without_recovery` is set to `true`, `recovery_window_in_days` will be ignored.
46
+ :param pulumi.Input[str] rotation_interval: The interval for automatic rotation.
47
+ :param pulumi.Input[str] secret_data_type: The type of the secret value. Default value: `text`. Valid values: `text`, `binary`.
46
48
  :param pulumi.Input[str] secret_type: The type of the secret. Valid values:
47
- - `Generic`: specifies a generic secret.
48
- - `Rds`: specifies a managed ApsaraDB RDS secret.
49
- - `RAMCredentials`: indicates a managed RAM secret.
50
- - `ECS`: specifies a managed ECS secret.
49
+ - `Generic`: Generic secret.
50
+ - `Rds`: ApsaraDB RDS secret.
51
+ - `RAMCredentials`: RAM secret.
52
+ - `ECS`: ECS secret.
51
53
  :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
52
- :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
54
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: The stage label that is used to mark the new version.
53
55
  """
54
56
  pulumi.set(__self__, "secret_data", secret_data)
55
57
  pulumi.set(__self__, "secret_name", secret_name)
@@ -66,6 +68,8 @@ class SecretArgs:
66
68
  pulumi.set(__self__, "extended_config", extended_config)
67
69
  if force_delete_without_recovery is not None:
68
70
  pulumi.set(__self__, "force_delete_without_recovery", force_delete_without_recovery)
71
+ if policy is not None:
72
+ pulumi.set(__self__, "policy", policy)
69
73
  if recovery_window_in_days is not None:
70
74
  pulumi.set(__self__, "recovery_window_in_days", recovery_window_in_days)
71
75
  if rotation_interval is not None:
@@ -83,7 +87,7 @@ class SecretArgs:
83
87
  @pulumi.getter(name="secretData")
84
88
  def secret_data(self) -> pulumi.Input[str]:
85
89
  """
86
- The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores it in the initial version. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
90
+ The data of the secret. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
87
91
  """
88
92
  return pulumi.get(self, "secret_data")
89
93
 
@@ -107,7 +111,7 @@ class SecretArgs:
107
111
  @pulumi.getter(name="versionId")
108
112
  def version_id(self) -> pulumi.Input[str]:
109
113
  """
110
- The version number of the initial version. Version numbers are unique in each secret object.
114
+ The version number of the initial version.
111
115
  """
112
116
  return pulumi.get(self, "version_id")
113
117
 
@@ -131,7 +135,7 @@ class SecretArgs:
131
135
  @pulumi.getter(name="dkmsInstanceId")
132
136
  def dkms_instance_id(self) -> Optional[pulumi.Input[str]]:
133
137
  """
134
- The instance ID of the exclusive KMS instance.
138
+ The ID of the KMS instance.
135
139
  """
136
140
  return pulumi.get(self, "dkms_instance_id")
137
141
 
@@ -143,7 +147,7 @@ class SecretArgs:
143
147
  @pulumi.getter(name="enableAutomaticRotation")
144
148
  def enable_automatic_rotation(self) -> Optional[pulumi.Input[bool]]:
145
149
  """
146
- Whether to enable automatic key rotation.
150
+ Specifies whether to enable automatic rotation. Default value: `false`. Valid values: `true`, `false`.
147
151
  """
148
152
  return pulumi.get(self, "enable_automatic_rotation")
149
153
 
@@ -155,7 +159,7 @@ class SecretArgs:
155
159
  @pulumi.getter(name="encryptionKeyId")
156
160
  def encryption_key_id(self) -> Optional[pulumi.Input[str]]:
157
161
  """
158
- The ID of the KMS CMK that is used to encrypt the secret value. If you do not specify this parameter, Secrets Manager automatically creates an encryption key to encrypt the secret.
162
+ The ID of the KMS key.
159
163
  """
160
164
  return pulumi.get(self, "encryption_key_id")
161
165
 
@@ -167,7 +171,7 @@ class SecretArgs:
167
171
  @pulumi.getter(name="extendedConfig")
168
172
  def extended_config(self) -> Optional[pulumi.Input[str]]:
169
173
  """
170
- The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
174
+ The extended configuration of the secret. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
171
175
  """
172
176
  return pulumi.get(self, "extended_config")
173
177
 
@@ -179,7 +183,7 @@ class SecretArgs:
179
183
  @pulumi.getter(name="forceDeleteWithoutRecovery")
180
184
  def force_delete_without_recovery(self) -> Optional[pulumi.Input[bool]]:
181
185
  """
182
- Specifies whether to forcibly delete the secret. If this parameter is set to true, the secret cannot be recovered. Valid values: true, false. Default to: false.
186
+ Specifies whether to immediately delete a secret. Default value: `false`. Valid values: `true`, `false`.
183
187
  """
184
188
  return pulumi.get(self, "force_delete_without_recovery")
185
189
 
@@ -187,11 +191,23 @@ class SecretArgs:
187
191
  def force_delete_without_recovery(self, value: Optional[pulumi.Input[bool]]):
188
192
  pulumi.set(self, "force_delete_without_recovery", value)
189
193
 
194
+ @property
195
+ @pulumi.getter
196
+ def policy(self) -> Optional[pulumi.Input[str]]:
197
+ """
198
+ The content of the secret policy. The value is in the JSON format. The value can be up to 32,768 bytes in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/kms/developer-reference/api-setsecretpolicy).
199
+ """
200
+ return pulumi.get(self, "policy")
201
+
202
+ @policy.setter
203
+ def policy(self, value: Optional[pulumi.Input[str]]):
204
+ pulumi.set(self, "policy", value)
205
+
190
206
  @property
191
207
  @pulumi.getter(name="recoveryWindowInDays")
192
208
  def recovery_window_in_days(self) -> Optional[pulumi.Input[int]]:
193
209
  """
194
- Specifies the recovery period of the secret if you do not forcibly delete it. Default value: 30. It will be ignored when `force_delete_without_recovery` is true.
210
+ Specifies the recovery period of the secret if you do not forcibly delete it. Default value: `30`. **NOTE:** If `force_delete_without_recovery` is set to `true`, `recovery_window_in_days` will be ignored.
195
211
  """
196
212
  return pulumi.get(self, "recovery_window_in_days")
197
213
 
@@ -203,7 +219,7 @@ class SecretArgs:
203
219
  @pulumi.getter(name="rotationInterval")
204
220
  def rotation_interval(self) -> Optional[pulumi.Input[str]]:
205
221
  """
206
- The time period of automatic rotation. The format is integer[unit], where integer represents the length of time, and unit represents the unit of time. The legal unit units are: d (day), h (hour), m (minute), s (second). 7d or 604800s both indicate a 7-day cycle.
222
+ The interval for automatic rotation.
207
223
  """
208
224
  return pulumi.get(self, "rotation_interval")
209
225
 
@@ -215,7 +231,7 @@ class SecretArgs:
215
231
  @pulumi.getter(name="secretDataType")
216
232
  def secret_data_type(self) -> Optional[pulumi.Input[str]]:
217
233
  """
218
- The type of the secret value. Valid values: text, binary. Default to "text".
234
+ The type of the secret value. Default value: `text`. Valid values: `text`, `binary`.
219
235
  """
220
236
  return pulumi.get(self, "secret_data_type")
221
237
 
@@ -228,10 +244,10 @@ class SecretArgs:
228
244
  def secret_type(self) -> Optional[pulumi.Input[str]]:
229
245
  """
230
246
  The type of the secret. Valid values:
231
- - `Generic`: specifies a generic secret.
232
- - `Rds`: specifies a managed ApsaraDB RDS secret.
233
- - `RAMCredentials`: indicates a managed RAM secret.
234
- - `ECS`: specifies a managed ECS secret.
247
+ - `Generic`: Generic secret.
248
+ - `Rds`: ApsaraDB RDS secret.
249
+ - `RAMCredentials`: RAM secret.
250
+ - `ECS`: ECS secret.
235
251
  """
236
252
  return pulumi.get(self, "secret_type")
237
253
 
@@ -255,7 +271,7 @@ class SecretArgs:
255
271
  @pulumi.getter(name="versionStages")
256
272
  def version_stages(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
257
273
  """
258
- ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
274
+ The stage label that is used to mark the new version.
259
275
  """
260
276
  return pulumi.get(self, "version_stages")
261
277
 
@@ -268,6 +284,7 @@ class SecretArgs:
268
284
  class _SecretState:
269
285
  def __init__(__self__, *,
270
286
  arn: Optional[pulumi.Input[str]] = None,
287
+ create_time: Optional[pulumi.Input[str]] = None,
271
288
  description: Optional[pulumi.Input[str]] = None,
272
289
  dkms_instance_id: Optional[pulumi.Input[str]] = None,
273
290
  enable_automatic_rotation: Optional[pulumi.Input[bool]] = None,
@@ -275,6 +292,7 @@ class _SecretState:
275
292
  extended_config: Optional[pulumi.Input[str]] = None,
276
293
  force_delete_without_recovery: Optional[pulumi.Input[bool]] = None,
277
294
  planned_delete_time: Optional[pulumi.Input[str]] = None,
295
+ policy: Optional[pulumi.Input[str]] = None,
278
296
  recovery_window_in_days: Optional[pulumi.Input[int]] = None,
279
297
  rotation_interval: Optional[pulumi.Input[str]] = None,
280
298
  secret_data: Optional[pulumi.Input[str]] = None,
@@ -286,30 +304,34 @@ class _SecretState:
286
304
  version_stages: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
287
305
  """
288
306
  Input properties used for looking up and filtering Secret resources.
289
- :param pulumi.Input[str] arn: The Alicloud Resource Name (ARN) of the secret.
307
+ :param pulumi.Input[str] arn: The ARN of the secret.
308
+ :param pulumi.Input[str] create_time: (Available since v1.224.0) The time when the secret is created.
290
309
  :param pulumi.Input[str] description: The description of the secret.
291
- :param pulumi.Input[str] dkms_instance_id: The instance ID of the exclusive KMS instance.
292
- :param pulumi.Input[bool] enable_automatic_rotation: Whether to enable automatic key rotation.
293
- :param pulumi.Input[str] encryption_key_id: The ID of the KMS CMK that is used to encrypt the secret value. If you do not specify this parameter, Secrets Manager automatically creates an encryption key to encrypt the secret.
294
- :param pulumi.Input[str] extended_config: The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
295
- :param pulumi.Input[bool] force_delete_without_recovery: Specifies whether to forcibly delete the secret. If this parameter is set to true, the secret cannot be recovered. Valid values: true, false. Default to: false.
310
+ :param pulumi.Input[str] dkms_instance_id: The ID of the KMS instance.
311
+ :param pulumi.Input[bool] enable_automatic_rotation: Specifies whether to enable automatic rotation. Default value: `false`. Valid values: `true`, `false`.
312
+ :param pulumi.Input[str] encryption_key_id: The ID of the KMS key.
313
+ :param pulumi.Input[str] extended_config: The extended configuration of the secret. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
314
+ :param pulumi.Input[bool] force_delete_without_recovery: Specifies whether to immediately delete a secret. Default value: `false`. Valid values: `true`, `false`.
296
315
  :param pulumi.Input[str] planned_delete_time: The time when the secret is scheduled to be deleted.
297
- :param pulumi.Input[int] recovery_window_in_days: Specifies the recovery period of the secret if you do not forcibly delete it. Default value: 30. It will be ignored when `force_delete_without_recovery` is true.
298
- :param pulumi.Input[str] rotation_interval: The time period of automatic rotation. The format is integer[unit], where integer represents the length of time, and unit represents the unit of time. The legal unit units are: d (day), h (hour), m (minute), s (second). 7d or 604800s both indicate a 7-day cycle.
299
- :param pulumi.Input[str] secret_data: The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores it in the initial version. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
300
- :param pulumi.Input[str] secret_data_type: The type of the secret value. Valid values: text, binary. Default to "text".
316
+ :param pulumi.Input[str] policy: The content of the secret policy. The value is in the JSON format. The value can be up to 32,768 bytes in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/kms/developer-reference/api-setsecretpolicy).
317
+ :param pulumi.Input[int] recovery_window_in_days: Specifies the recovery period of the secret if you do not forcibly delete it. Default value: `30`. **NOTE:** If `force_delete_without_recovery` is set to `true`, `recovery_window_in_days` will be ignored.
318
+ :param pulumi.Input[str] rotation_interval: The interval for automatic rotation.
319
+ :param pulumi.Input[str] secret_data: The data of the secret. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
320
+ :param pulumi.Input[str] secret_data_type: The type of the secret value. Default value: `text`. Valid values: `text`, `binary`.
301
321
  :param pulumi.Input[str] secret_name: The name of the secret.
302
322
  :param pulumi.Input[str] secret_type: The type of the secret. Valid values:
303
- - `Generic`: specifies a generic secret.
304
- - `Rds`: specifies a managed ApsaraDB RDS secret.
305
- - `RAMCredentials`: indicates a managed RAM secret.
306
- - `ECS`: specifies a managed ECS secret.
323
+ - `Generic`: Generic secret.
324
+ - `Rds`: ApsaraDB RDS secret.
325
+ - `RAMCredentials`: RAM secret.
326
+ - `ECS`: ECS secret.
307
327
  :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
308
- :param pulumi.Input[str] version_id: The version number of the initial version. Version numbers are unique in each secret object.
309
- :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
328
+ :param pulumi.Input[str] version_id: The version number of the initial version.
329
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: The stage label that is used to mark the new version.
310
330
  """
311
331
  if arn is not None:
312
332
  pulumi.set(__self__, "arn", arn)
333
+ if create_time is not None:
334
+ pulumi.set(__self__, "create_time", create_time)
313
335
  if description is not None:
314
336
  pulumi.set(__self__, "description", description)
315
337
  if dkms_instance_id is not None:
@@ -324,6 +346,8 @@ class _SecretState:
324
346
  pulumi.set(__self__, "force_delete_without_recovery", force_delete_without_recovery)
325
347
  if planned_delete_time is not None:
326
348
  pulumi.set(__self__, "planned_delete_time", planned_delete_time)
349
+ if policy is not None:
350
+ pulumi.set(__self__, "policy", policy)
327
351
  if recovery_window_in_days is not None:
328
352
  pulumi.set(__self__, "recovery_window_in_days", recovery_window_in_days)
329
353
  if rotation_interval is not None:
@@ -347,7 +371,7 @@ class _SecretState:
347
371
  @pulumi.getter
348
372
  def arn(self) -> Optional[pulumi.Input[str]]:
349
373
  """
350
- The Alicloud Resource Name (ARN) of the secret.
374
+ The ARN of the secret.
351
375
  """
352
376
  return pulumi.get(self, "arn")
353
377
 
@@ -355,6 +379,18 @@ class _SecretState:
355
379
  def arn(self, value: Optional[pulumi.Input[str]]):
356
380
  pulumi.set(self, "arn", value)
357
381
 
382
+ @property
383
+ @pulumi.getter(name="createTime")
384
+ def create_time(self) -> Optional[pulumi.Input[str]]:
385
+ """
386
+ (Available since v1.224.0) The time when the secret is created.
387
+ """
388
+ return pulumi.get(self, "create_time")
389
+
390
+ @create_time.setter
391
+ def create_time(self, value: Optional[pulumi.Input[str]]):
392
+ pulumi.set(self, "create_time", value)
393
+
358
394
  @property
359
395
  @pulumi.getter
360
396
  def description(self) -> Optional[pulumi.Input[str]]:
@@ -371,7 +407,7 @@ class _SecretState:
371
407
  @pulumi.getter(name="dkmsInstanceId")
372
408
  def dkms_instance_id(self) -> Optional[pulumi.Input[str]]:
373
409
  """
374
- The instance ID of the exclusive KMS instance.
410
+ The ID of the KMS instance.
375
411
  """
376
412
  return pulumi.get(self, "dkms_instance_id")
377
413
 
@@ -383,7 +419,7 @@ class _SecretState:
383
419
  @pulumi.getter(name="enableAutomaticRotation")
384
420
  def enable_automatic_rotation(self) -> Optional[pulumi.Input[bool]]:
385
421
  """
386
- Whether to enable automatic key rotation.
422
+ Specifies whether to enable automatic rotation. Default value: `false`. Valid values: `true`, `false`.
387
423
  """
388
424
  return pulumi.get(self, "enable_automatic_rotation")
389
425
 
@@ -395,7 +431,7 @@ class _SecretState:
395
431
  @pulumi.getter(name="encryptionKeyId")
396
432
  def encryption_key_id(self) -> Optional[pulumi.Input[str]]:
397
433
  """
398
- The ID of the KMS CMK that is used to encrypt the secret value. If you do not specify this parameter, Secrets Manager automatically creates an encryption key to encrypt the secret.
434
+ The ID of the KMS key.
399
435
  """
400
436
  return pulumi.get(self, "encryption_key_id")
401
437
 
@@ -407,7 +443,7 @@ class _SecretState:
407
443
  @pulumi.getter(name="extendedConfig")
408
444
  def extended_config(self) -> Optional[pulumi.Input[str]]:
409
445
  """
410
- The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
446
+ The extended configuration of the secret. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
411
447
  """
412
448
  return pulumi.get(self, "extended_config")
413
449
 
@@ -419,7 +455,7 @@ class _SecretState:
419
455
  @pulumi.getter(name="forceDeleteWithoutRecovery")
420
456
  def force_delete_without_recovery(self) -> Optional[pulumi.Input[bool]]:
421
457
  """
422
- Specifies whether to forcibly delete the secret. If this parameter is set to true, the secret cannot be recovered. Valid values: true, false. Default to: false.
458
+ Specifies whether to immediately delete a secret. Default value: `false`. Valid values: `true`, `false`.
423
459
  """
424
460
  return pulumi.get(self, "force_delete_without_recovery")
425
461
 
@@ -439,11 +475,23 @@ class _SecretState:
439
475
  def planned_delete_time(self, value: Optional[pulumi.Input[str]]):
440
476
  pulumi.set(self, "planned_delete_time", value)
441
477
 
478
+ @property
479
+ @pulumi.getter
480
+ def policy(self) -> Optional[pulumi.Input[str]]:
481
+ """
482
+ The content of the secret policy. The value is in the JSON format. The value can be up to 32,768 bytes in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/kms/developer-reference/api-setsecretpolicy).
483
+ """
484
+ return pulumi.get(self, "policy")
485
+
486
+ @policy.setter
487
+ def policy(self, value: Optional[pulumi.Input[str]]):
488
+ pulumi.set(self, "policy", value)
489
+
442
490
  @property
443
491
  @pulumi.getter(name="recoveryWindowInDays")
444
492
  def recovery_window_in_days(self) -> Optional[pulumi.Input[int]]:
445
493
  """
446
- Specifies the recovery period of the secret if you do not forcibly delete it. Default value: 30. It will be ignored when `force_delete_without_recovery` is true.
494
+ Specifies the recovery period of the secret if you do not forcibly delete it. Default value: `30`. **NOTE:** If `force_delete_without_recovery` is set to `true`, `recovery_window_in_days` will be ignored.
447
495
  """
448
496
  return pulumi.get(self, "recovery_window_in_days")
449
497
 
@@ -455,7 +503,7 @@ class _SecretState:
455
503
  @pulumi.getter(name="rotationInterval")
456
504
  def rotation_interval(self) -> Optional[pulumi.Input[str]]:
457
505
  """
458
- The time period of automatic rotation. The format is integer[unit], where integer represents the length of time, and unit represents the unit of time. The legal unit units are: d (day), h (hour), m (minute), s (second). 7d or 604800s both indicate a 7-day cycle.
506
+ The interval for automatic rotation.
459
507
  """
460
508
  return pulumi.get(self, "rotation_interval")
461
509
 
@@ -467,7 +515,7 @@ class _SecretState:
467
515
  @pulumi.getter(name="secretData")
468
516
  def secret_data(self) -> Optional[pulumi.Input[str]]:
469
517
  """
470
- The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores it in the initial version. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
518
+ The data of the secret. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
471
519
  """
472
520
  return pulumi.get(self, "secret_data")
473
521
 
@@ -479,7 +527,7 @@ class _SecretState:
479
527
  @pulumi.getter(name="secretDataType")
480
528
  def secret_data_type(self) -> Optional[pulumi.Input[str]]:
481
529
  """
482
- The type of the secret value. Valid values: text, binary. Default to "text".
530
+ The type of the secret value. Default value: `text`. Valid values: `text`, `binary`.
483
531
  """
484
532
  return pulumi.get(self, "secret_data_type")
485
533
 
@@ -504,10 +552,10 @@ class _SecretState:
504
552
  def secret_type(self) -> Optional[pulumi.Input[str]]:
505
553
  """
506
554
  The type of the secret. Valid values:
507
- - `Generic`: specifies a generic secret.
508
- - `Rds`: specifies a managed ApsaraDB RDS secret.
509
- - `RAMCredentials`: indicates a managed RAM secret.
510
- - `ECS`: specifies a managed ECS secret.
555
+ - `Generic`: Generic secret.
556
+ - `Rds`: ApsaraDB RDS secret.
557
+ - `RAMCredentials`: RAM secret.
558
+ - `ECS`: ECS secret.
511
559
  """
512
560
  return pulumi.get(self, "secret_type")
513
561
 
@@ -531,7 +579,7 @@ class _SecretState:
531
579
  @pulumi.getter(name="versionId")
532
580
  def version_id(self) -> Optional[pulumi.Input[str]]:
533
581
  """
534
- The version number of the initial version. Version numbers are unique in each secret object.
582
+ The version number of the initial version.
535
583
  """
536
584
  return pulumi.get(self, "version_id")
537
585
 
@@ -543,7 +591,7 @@ class _SecretState:
543
591
  @pulumi.getter(name="versionStages")
544
592
  def version_stages(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
545
593
  """
546
- ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
594
+ The stage label that is used to mark the new version.
547
595
  """
548
596
  return pulumi.get(self, "version_stages")
549
597
 
@@ -563,6 +611,7 @@ class Secret(pulumi.CustomResource):
563
611
  encryption_key_id: Optional[pulumi.Input[str]] = None,
564
612
  extended_config: Optional[pulumi.Input[str]] = None,
565
613
  force_delete_without_recovery: Optional[pulumi.Input[bool]] = None,
614
+ policy: Optional[pulumi.Input[str]] = None,
566
615
  recovery_window_in_days: Optional[pulumi.Input[int]] = None,
567
616
  rotation_interval: Optional[pulumi.Input[str]] = None,
568
617
  secret_data: Optional[pulumi.Input[str]] = None,
@@ -574,9 +623,11 @@ class Secret(pulumi.CustomResource):
574
623
  version_stages: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
575
624
  __props__=None):
576
625
  """
577
- This resouce used to create a secret and store its initial version.
626
+ Provides a KMS Secret resource.
627
+
628
+ For information about KMS Secret and how to use it, see [What is Secret](https://www.alibabacloud.com/help/en/kms/developer-reference/api-createsecret).
578
629
 
579
- > **NOTE:** Available in 1.76.0+.
630
+ > **NOTE:** Available since v1.76.0.
580
631
 
581
632
  ## Example Usage
582
633
 
@@ -586,43 +637,47 @@ class Secret(pulumi.CustomResource):
586
637
  import pulumi
587
638
  import pulumi_alicloud as alicloud
588
639
 
640
+ config = pulumi.Config()
641
+ name = config.get("name")
642
+ if name is None:
643
+ name = "terraform-example"
589
644
  default = alicloud.kms.Secret("default",
590
- secret_name="secret-foo",
591
- description="from terraform",
592
- secret_data="Secret data.",
593
- version_id="000000000001",
645
+ secret_name=name,
646
+ secret_data="Secret data",
647
+ version_id="v1",
594
648
  force_delete_without_recovery=True)
595
649
  ```
596
650
 
597
651
  ## Import
598
652
 
599
- KMS secret can be imported using the id, e.g.
653
+ KMS Secret can be imported using the id, e.g.
600
654
 
601
655
  ```sh
602
- $ pulumi import alicloud:kms/secret:Secret default <id>
656
+ $ pulumi import alicloud:kms/secret:Secret example <id>
603
657
  ```
604
658
 
605
659
  :param str resource_name: The name of the resource.
606
660
  :param pulumi.ResourceOptions opts: Options for the resource.
607
661
  :param pulumi.Input[str] description: The description of the secret.
608
- :param pulumi.Input[str] dkms_instance_id: The instance ID of the exclusive KMS instance.
609
- :param pulumi.Input[bool] enable_automatic_rotation: Whether to enable automatic key rotation.
610
- :param pulumi.Input[str] encryption_key_id: The ID of the KMS CMK that is used to encrypt the secret value. If you do not specify this parameter, Secrets Manager automatically creates an encryption key to encrypt the secret.
611
- :param pulumi.Input[str] extended_config: The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
612
- :param pulumi.Input[bool] force_delete_without_recovery: Specifies whether to forcibly delete the secret. If this parameter is set to true, the secret cannot be recovered. Valid values: true, false. Default to: false.
613
- :param pulumi.Input[int] recovery_window_in_days: Specifies the recovery period of the secret if you do not forcibly delete it. Default value: 30. It will be ignored when `force_delete_without_recovery` is true.
614
- :param pulumi.Input[str] rotation_interval: The time period of automatic rotation. The format is integer[unit], where integer represents the length of time, and unit represents the unit of time. The legal unit units are: d (day), h (hour), m (minute), s (second). 7d or 604800s both indicate a 7-day cycle.
615
- :param pulumi.Input[str] secret_data: The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores it in the initial version. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
616
- :param pulumi.Input[str] secret_data_type: The type of the secret value. Valid values: text, binary. Default to "text".
662
+ :param pulumi.Input[str] dkms_instance_id: The ID of the KMS instance.
663
+ :param pulumi.Input[bool] enable_automatic_rotation: Specifies whether to enable automatic rotation. Default value: `false`. Valid values: `true`, `false`.
664
+ :param pulumi.Input[str] encryption_key_id: The ID of the KMS key.
665
+ :param pulumi.Input[str] extended_config: The extended configuration of the secret. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
666
+ :param pulumi.Input[bool] force_delete_without_recovery: Specifies whether to immediately delete a secret. Default value: `false`. Valid values: `true`, `false`.
667
+ :param pulumi.Input[str] policy: The content of the secret policy. The value is in the JSON format. The value can be up to 32,768 bytes in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/kms/developer-reference/api-setsecretpolicy).
668
+ :param pulumi.Input[int] recovery_window_in_days: Specifies the recovery period of the secret if you do not forcibly delete it. Default value: `30`. **NOTE:** If `force_delete_without_recovery` is set to `true`, `recovery_window_in_days` will be ignored.
669
+ :param pulumi.Input[str] rotation_interval: The interval for automatic rotation.
670
+ :param pulumi.Input[str] secret_data: The data of the secret. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
671
+ :param pulumi.Input[str] secret_data_type: The type of the secret value. Default value: `text`. Valid values: `text`, `binary`.
617
672
  :param pulumi.Input[str] secret_name: The name of the secret.
618
673
  :param pulumi.Input[str] secret_type: The type of the secret. Valid values:
619
- - `Generic`: specifies a generic secret.
620
- - `Rds`: specifies a managed ApsaraDB RDS secret.
621
- - `RAMCredentials`: indicates a managed RAM secret.
622
- - `ECS`: specifies a managed ECS secret.
674
+ - `Generic`: Generic secret.
675
+ - `Rds`: ApsaraDB RDS secret.
676
+ - `RAMCredentials`: RAM secret.
677
+ - `ECS`: ECS secret.
623
678
  :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
624
- :param pulumi.Input[str] version_id: The version number of the initial version. Version numbers are unique in each secret object.
625
- :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
679
+ :param pulumi.Input[str] version_id: The version number of the initial version.
680
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: The stage label that is used to mark the new version.
626
681
  """
627
682
  ...
628
683
  @overload
@@ -631,9 +686,11 @@ class Secret(pulumi.CustomResource):
631
686
  args: SecretArgs,
632
687
  opts: Optional[pulumi.ResourceOptions] = None):
633
688
  """
634
- This resouce used to create a secret and store its initial version.
689
+ Provides a KMS Secret resource.
635
690
 
636
- > **NOTE:** Available in 1.76.0+.
691
+ For information about KMS Secret and how to use it, see [What is Secret](https://www.alibabacloud.com/help/en/kms/developer-reference/api-createsecret).
692
+
693
+ > **NOTE:** Available since v1.76.0.
637
694
 
638
695
  ## Example Usage
639
696
 
@@ -643,20 +700,23 @@ class Secret(pulumi.CustomResource):
643
700
  import pulumi
644
701
  import pulumi_alicloud as alicloud
645
702
 
703
+ config = pulumi.Config()
704
+ name = config.get("name")
705
+ if name is None:
706
+ name = "terraform-example"
646
707
  default = alicloud.kms.Secret("default",
647
- secret_name="secret-foo",
648
- description="from terraform",
649
- secret_data="Secret data.",
650
- version_id="000000000001",
708
+ secret_name=name,
709
+ secret_data="Secret data",
710
+ version_id="v1",
651
711
  force_delete_without_recovery=True)
652
712
  ```
653
713
 
654
714
  ## Import
655
715
 
656
- KMS secret can be imported using the id, e.g.
716
+ KMS Secret can be imported using the id, e.g.
657
717
 
658
718
  ```sh
659
- $ pulumi import alicloud:kms/secret:Secret default <id>
719
+ $ pulumi import alicloud:kms/secret:Secret example <id>
660
720
  ```
661
721
 
662
722
  :param str resource_name: The name of the resource.
@@ -680,6 +740,7 @@ class Secret(pulumi.CustomResource):
680
740
  encryption_key_id: Optional[pulumi.Input[str]] = None,
681
741
  extended_config: Optional[pulumi.Input[str]] = None,
682
742
  force_delete_without_recovery: Optional[pulumi.Input[bool]] = None,
743
+ policy: Optional[pulumi.Input[str]] = None,
683
744
  recovery_window_in_days: Optional[pulumi.Input[int]] = None,
684
745
  rotation_interval: Optional[pulumi.Input[str]] = None,
685
746
  secret_data: Optional[pulumi.Input[str]] = None,
@@ -704,6 +765,7 @@ class Secret(pulumi.CustomResource):
704
765
  __props__.__dict__["encryption_key_id"] = encryption_key_id
705
766
  __props__.__dict__["extended_config"] = extended_config
706
767
  __props__.__dict__["force_delete_without_recovery"] = force_delete_without_recovery
768
+ __props__.__dict__["policy"] = policy
707
769
  __props__.__dict__["recovery_window_in_days"] = recovery_window_in_days
708
770
  __props__.__dict__["rotation_interval"] = rotation_interval
709
771
  if secret_data is None and not opts.urn:
@@ -720,6 +782,7 @@ class Secret(pulumi.CustomResource):
720
782
  __props__.__dict__["version_id"] = version_id
721
783
  __props__.__dict__["version_stages"] = version_stages
722
784
  __props__.__dict__["arn"] = None
785
+ __props__.__dict__["create_time"] = None
723
786
  __props__.__dict__["planned_delete_time"] = None
724
787
  secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["secretData"])
725
788
  opts = pulumi.ResourceOptions.merge(opts, secret_opts)
@@ -734,6 +797,7 @@ class Secret(pulumi.CustomResource):
734
797
  id: pulumi.Input[str],
735
798
  opts: Optional[pulumi.ResourceOptions] = None,
736
799
  arn: Optional[pulumi.Input[str]] = None,
800
+ create_time: Optional[pulumi.Input[str]] = None,
737
801
  description: Optional[pulumi.Input[str]] = None,
738
802
  dkms_instance_id: Optional[pulumi.Input[str]] = None,
739
803
  enable_automatic_rotation: Optional[pulumi.Input[bool]] = None,
@@ -741,6 +805,7 @@ class Secret(pulumi.CustomResource):
741
805
  extended_config: Optional[pulumi.Input[str]] = None,
742
806
  force_delete_without_recovery: Optional[pulumi.Input[bool]] = None,
743
807
  planned_delete_time: Optional[pulumi.Input[str]] = None,
808
+ policy: Optional[pulumi.Input[str]] = None,
744
809
  recovery_window_in_days: Optional[pulumi.Input[int]] = None,
745
810
  rotation_interval: Optional[pulumi.Input[str]] = None,
746
811
  secret_data: Optional[pulumi.Input[str]] = None,
@@ -757,33 +822,36 @@ class Secret(pulumi.CustomResource):
757
822
  :param str resource_name: The unique name of the resulting resource.
758
823
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
759
824
  :param pulumi.ResourceOptions opts: Options for the resource.
760
- :param pulumi.Input[str] arn: The Alicloud Resource Name (ARN) of the secret.
825
+ :param pulumi.Input[str] arn: The ARN of the secret.
826
+ :param pulumi.Input[str] create_time: (Available since v1.224.0) The time when the secret is created.
761
827
  :param pulumi.Input[str] description: The description of the secret.
762
- :param pulumi.Input[str] dkms_instance_id: The instance ID of the exclusive KMS instance.
763
- :param pulumi.Input[bool] enable_automatic_rotation: Whether to enable automatic key rotation.
764
- :param pulumi.Input[str] encryption_key_id: The ID of the KMS CMK that is used to encrypt the secret value. If you do not specify this parameter, Secrets Manager automatically creates an encryption key to encrypt the secret.
765
- :param pulumi.Input[str] extended_config: The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
766
- :param pulumi.Input[bool] force_delete_without_recovery: Specifies whether to forcibly delete the secret. If this parameter is set to true, the secret cannot be recovered. Valid values: true, false. Default to: false.
828
+ :param pulumi.Input[str] dkms_instance_id: The ID of the KMS instance.
829
+ :param pulumi.Input[bool] enable_automatic_rotation: Specifies whether to enable automatic rotation. Default value: `false`. Valid values: `true`, `false`.
830
+ :param pulumi.Input[str] encryption_key_id: The ID of the KMS key.
831
+ :param pulumi.Input[str] extended_config: The extended configuration of the secret. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
832
+ :param pulumi.Input[bool] force_delete_without_recovery: Specifies whether to immediately delete a secret. Default value: `false`. Valid values: `true`, `false`.
767
833
  :param pulumi.Input[str] planned_delete_time: The time when the secret is scheduled to be deleted.
768
- :param pulumi.Input[int] recovery_window_in_days: Specifies the recovery period of the secret if you do not forcibly delete it. Default value: 30. It will be ignored when `force_delete_without_recovery` is true.
769
- :param pulumi.Input[str] rotation_interval: The time period of automatic rotation. The format is integer[unit], where integer represents the length of time, and unit represents the unit of time. The legal unit units are: d (day), h (hour), m (minute), s (second). 7d or 604800s both indicate a 7-day cycle.
770
- :param pulumi.Input[str] secret_data: The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores it in the initial version. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
771
- :param pulumi.Input[str] secret_data_type: The type of the secret value. Valid values: text, binary. Default to "text".
834
+ :param pulumi.Input[str] policy: The content of the secret policy. The value is in the JSON format. The value can be up to 32,768 bytes in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/kms/developer-reference/api-setsecretpolicy).
835
+ :param pulumi.Input[int] recovery_window_in_days: Specifies the recovery period of the secret if you do not forcibly delete it. Default value: `30`. **NOTE:** If `force_delete_without_recovery` is set to `true`, `recovery_window_in_days` will be ignored.
836
+ :param pulumi.Input[str] rotation_interval: The interval for automatic rotation.
837
+ :param pulumi.Input[str] secret_data: The data of the secret. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
838
+ :param pulumi.Input[str] secret_data_type: The type of the secret value. Default value: `text`. Valid values: `text`, `binary`.
772
839
  :param pulumi.Input[str] secret_name: The name of the secret.
773
840
  :param pulumi.Input[str] secret_type: The type of the secret. Valid values:
774
- - `Generic`: specifies a generic secret.
775
- - `Rds`: specifies a managed ApsaraDB RDS secret.
776
- - `RAMCredentials`: indicates a managed RAM secret.
777
- - `ECS`: specifies a managed ECS secret.
841
+ - `Generic`: Generic secret.
842
+ - `Rds`: ApsaraDB RDS secret.
843
+ - `RAMCredentials`: RAM secret.
844
+ - `ECS`: ECS secret.
778
845
  :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
779
- :param pulumi.Input[str] version_id: The version number of the initial version. Version numbers are unique in each secret object.
780
- :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
846
+ :param pulumi.Input[str] version_id: The version number of the initial version.
847
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] version_stages: The stage label that is used to mark the new version.
781
848
  """
782
849
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
783
850
 
784
851
  __props__ = _SecretState.__new__(_SecretState)
785
852
 
786
853
  __props__.__dict__["arn"] = arn
854
+ __props__.__dict__["create_time"] = create_time
787
855
  __props__.__dict__["description"] = description
788
856
  __props__.__dict__["dkms_instance_id"] = dkms_instance_id
789
857
  __props__.__dict__["enable_automatic_rotation"] = enable_automatic_rotation
@@ -791,6 +859,7 @@ class Secret(pulumi.CustomResource):
791
859
  __props__.__dict__["extended_config"] = extended_config
792
860
  __props__.__dict__["force_delete_without_recovery"] = force_delete_without_recovery
793
861
  __props__.__dict__["planned_delete_time"] = planned_delete_time
862
+ __props__.__dict__["policy"] = policy
794
863
  __props__.__dict__["recovery_window_in_days"] = recovery_window_in_days
795
864
  __props__.__dict__["rotation_interval"] = rotation_interval
796
865
  __props__.__dict__["secret_data"] = secret_data
@@ -806,10 +875,18 @@ class Secret(pulumi.CustomResource):
806
875
  @pulumi.getter
807
876
  def arn(self) -> pulumi.Output[str]:
808
877
  """
809
- The Alicloud Resource Name (ARN) of the secret.
878
+ The ARN of the secret.
810
879
  """
811
880
  return pulumi.get(self, "arn")
812
881
 
882
+ @property
883
+ @pulumi.getter(name="createTime")
884
+ def create_time(self) -> pulumi.Output[str]:
885
+ """
886
+ (Available since v1.224.0) The time when the secret is created.
887
+ """
888
+ return pulumi.get(self, "create_time")
889
+
813
890
  @property
814
891
  @pulumi.getter
815
892
  def description(self) -> pulumi.Output[Optional[str]]:
@@ -822,7 +899,7 @@ class Secret(pulumi.CustomResource):
822
899
  @pulumi.getter(name="dkmsInstanceId")
823
900
  def dkms_instance_id(self) -> pulumi.Output[Optional[str]]:
824
901
  """
825
- The instance ID of the exclusive KMS instance.
902
+ The ID of the KMS instance.
826
903
  """
827
904
  return pulumi.get(self, "dkms_instance_id")
828
905
 
@@ -830,7 +907,7 @@ class Secret(pulumi.CustomResource):
830
907
  @pulumi.getter(name="enableAutomaticRotation")
831
908
  def enable_automatic_rotation(self) -> pulumi.Output[Optional[bool]]:
832
909
  """
833
- Whether to enable automatic key rotation.
910
+ Specifies whether to enable automatic rotation. Default value: `false`. Valid values: `true`, `false`.
834
911
  """
835
912
  return pulumi.get(self, "enable_automatic_rotation")
836
913
 
@@ -838,7 +915,7 @@ class Secret(pulumi.CustomResource):
838
915
  @pulumi.getter(name="encryptionKeyId")
839
916
  def encryption_key_id(self) -> pulumi.Output[Optional[str]]:
840
917
  """
841
- The ID of the KMS CMK that is used to encrypt the secret value. If you do not specify this parameter, Secrets Manager automatically creates an encryption key to encrypt the secret.
918
+ The ID of the KMS key.
842
919
  """
843
920
  return pulumi.get(self, "encryption_key_id")
844
921
 
@@ -846,7 +923,7 @@ class Secret(pulumi.CustomResource):
846
923
  @pulumi.getter(name="extendedConfig")
847
924
  def extended_config(self) -> pulumi.Output[Optional[str]]:
848
925
  """
849
- The extended configuration of the secret. This parameter specifies the properties of the secret of the specific type. The description can be up to 1,024 characters in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
926
+ The extended configuration of the secret. For more information, see [How to use it](https://www.alibabacloud.com/help/en/key-management-service/latest/kms-createsecret).
850
927
  """
851
928
  return pulumi.get(self, "extended_config")
852
929
 
@@ -854,7 +931,7 @@ class Secret(pulumi.CustomResource):
854
931
  @pulumi.getter(name="forceDeleteWithoutRecovery")
855
932
  def force_delete_without_recovery(self) -> pulumi.Output[Optional[bool]]:
856
933
  """
857
- Specifies whether to forcibly delete the secret. If this parameter is set to true, the secret cannot be recovered. Valid values: true, false. Default to: false.
934
+ Specifies whether to immediately delete a secret. Default value: `false`. Valid values: `true`, `false`.
858
935
  """
859
936
  return pulumi.get(self, "force_delete_without_recovery")
860
937
 
@@ -866,11 +943,19 @@ class Secret(pulumi.CustomResource):
866
943
  """
867
944
  return pulumi.get(self, "planned_delete_time")
868
945
 
946
+ @property
947
+ @pulumi.getter
948
+ def policy(self) -> pulumi.Output[str]:
949
+ """
950
+ The content of the secret policy. The value is in the JSON format. The value can be up to 32,768 bytes in length. For more information, see [How to use it](https://www.alibabacloud.com/help/en/kms/developer-reference/api-setsecretpolicy).
951
+ """
952
+ return pulumi.get(self, "policy")
953
+
869
954
  @property
870
955
  @pulumi.getter(name="recoveryWindowInDays")
871
956
  def recovery_window_in_days(self) -> pulumi.Output[Optional[int]]:
872
957
  """
873
- Specifies the recovery period of the secret if you do not forcibly delete it. Default value: 30. It will be ignored when `force_delete_without_recovery` is true.
958
+ Specifies the recovery period of the secret if you do not forcibly delete it. Default value: `30`. **NOTE:** If `force_delete_without_recovery` is set to `true`, `recovery_window_in_days` will be ignored.
874
959
  """
875
960
  return pulumi.get(self, "recovery_window_in_days")
876
961
 
@@ -878,7 +963,7 @@ class Secret(pulumi.CustomResource):
878
963
  @pulumi.getter(name="rotationInterval")
879
964
  def rotation_interval(self) -> pulumi.Output[Optional[str]]:
880
965
  """
881
- The time period of automatic rotation. The format is integer[unit], where integer represents the length of time, and unit represents the unit of time. The legal unit units are: d (day), h (hour), m (minute), s (second). 7d or 604800s both indicate a 7-day cycle.
966
+ The interval for automatic rotation.
882
967
  """
883
968
  return pulumi.get(self, "rotation_interval")
884
969
 
@@ -886,7 +971,7 @@ class Secret(pulumi.CustomResource):
886
971
  @pulumi.getter(name="secretData")
887
972
  def secret_data(self) -> pulumi.Output[str]:
888
973
  """
889
- The value of the secret that you want to create. Secrets Manager encrypts the secret value and stores it in the initial version. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
974
+ The data of the secret. **NOTE:** From version 1.204.1, attribute `secret_data` updating diff will be ignored when `secret_type` is not Generic.
890
975
  """
891
976
  return pulumi.get(self, "secret_data")
892
977
 
@@ -894,7 +979,7 @@ class Secret(pulumi.CustomResource):
894
979
  @pulumi.getter(name="secretDataType")
895
980
  def secret_data_type(self) -> pulumi.Output[Optional[str]]:
896
981
  """
897
- The type of the secret value. Valid values: text, binary. Default to "text".
982
+ The type of the secret value. Default value: `text`. Valid values: `text`, `binary`.
898
983
  """
899
984
  return pulumi.get(self, "secret_data_type")
900
985
 
@@ -911,10 +996,10 @@ class Secret(pulumi.CustomResource):
911
996
  def secret_type(self) -> pulumi.Output[str]:
912
997
  """
913
998
  The type of the secret. Valid values:
914
- - `Generic`: specifies a generic secret.
915
- - `Rds`: specifies a managed ApsaraDB RDS secret.
916
- - `RAMCredentials`: indicates a managed RAM secret.
917
- - `ECS`: specifies a managed ECS secret.
999
+ - `Generic`: Generic secret.
1000
+ - `Rds`: ApsaraDB RDS secret.
1001
+ - `RAMCredentials`: RAM secret.
1002
+ - `ECS`: ECS secret.
918
1003
  """
919
1004
  return pulumi.get(self, "secret_type")
920
1005
 
@@ -930,7 +1015,7 @@ class Secret(pulumi.CustomResource):
930
1015
  @pulumi.getter(name="versionId")
931
1016
  def version_id(self) -> pulumi.Output[str]:
932
1017
  """
933
- The version number of the initial version. Version numbers are unique in each secret object.
1018
+ The version number of the initial version.
934
1019
  """
935
1020
  return pulumi.get(self, "version_id")
936
1021
 
@@ -938,7 +1023,7 @@ class Secret(pulumi.CustomResource):
938
1023
  @pulumi.getter(name="versionStages")
939
1024
  def version_stages(self) -> pulumi.Output[Sequence[str]]:
940
1025
  """
941
- ) The stage labels that mark the new secret version. If you do not specify this parameter, Secrets Manager marks it with "ACSCurrent".
1026
+ The stage label that is used to mark the new version.
942
1027
  """
943
1028
  return pulumi.get(self, "version_stages")
944
1029