pulumi-aws 7.9.1__py3-none-any.whl → 7.10.0__py3-none-any.whl

pulumi_aws/pulumi-plugin.json

@@ -1,5 +1,5 @@
 {
   "resource": true,
   "name": "aws",
-  "version": "7.9.1"
+  "version": "7.10.0"
 }

pulumi_aws/rds/cluster.py

@@ -61,6 +61,8 @@ class ClusterArgs:
                  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  manage_master_user_password: Optional[pulumi.Input[_builtins.bool]] = None,
                  master_password: Optional[pulumi.Input[_builtins.str]] = None,
+                 master_password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 master_password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  master_user_secret_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  master_username: Optional[pulumi.Input[_builtins.str]] = None,
                  monitoring_interval: Optional[pulumi.Input[_builtins.int]] = None,
@@ -132,6 +134,9 @@ class ClusterArgs:
         :param pulumi.Input[_builtins.str] kms_key_id: ARN for the KMS encryption key. When specifying `kms_key_id`, `storage_encrypted` needs to be set to true.
         :param pulumi.Input[_builtins.bool] manage_master_user_password: Set to true to allow RDS to manage the master user password in Secrets Manager. Cannot be set if `master_password` is provided.
         :param pulumi.Input[_builtins.str] master_password: Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.str] master_password_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Password for the master DB user. Note that this may show up in logs. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.int] master_password_wo_version: Used together with `master_password_wo` to trigger an update. Increment this value when an update to the `master_password_wo` is required.
         :param pulumi.Input[_builtins.str] master_user_secret_kms_key_id: Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN. If not specified, the default KMS key for your Amazon Web Services account is used.
         :param pulumi.Input[_builtins.str] master_username: Username for the master DB user. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). This argument does not support in-place updates and cannot be changed during a restore from snapshot.
         :param pulumi.Input[_builtins.int] monitoring_interval: Interval, in seconds, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify 0. The default is 0. Valid Values: 0, 1, 5, 10, 15, 30, 60.
@@ -239,6 +244,10 @@ class ClusterArgs:
             pulumi.set(__self__, "manage_master_user_password", manage_master_user_password)
         if master_password is not None:
             pulumi.set(__self__, "master_password", master_password)
+        if master_password_wo is not None:
+            pulumi.set(__self__, "master_password_wo", master_password_wo)
+        if master_password_wo_version is not None:
+            pulumi.set(__self__, "master_password_wo_version", master_password_wo_version)
         if master_user_secret_kms_key_id is not None:
             pulumi.set(__self__, "master_user_secret_kms_key_id", master_user_secret_kms_key_id)
         if master_username is not None:
@@ -762,6 +771,31 @@ class ClusterArgs:
     def master_password(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "master_password", value)
 
+    @_builtins.property
+    @pulumi.getter(name="masterPasswordWo")
+    def master_password_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Password for the master DB user. Note that this may show up in logs. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        """
+        return pulumi.get(self, "master_password_wo")
+
+    @master_password_wo.setter
+    def master_password_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "master_password_wo", value)
+
+    @_builtins.property
+    @pulumi.getter(name="masterPasswordWoVersion")
+    def master_password_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        Used together with `master_password_wo` to trigger an update. Increment this value when an update to the `master_password_wo` is required.
+        """
+        return pulumi.get(self, "master_password_wo_version")
+
+    @master_password_wo_version.setter
+    def master_password_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "master_password_wo_version", value)
+
     @_builtins.property
     @pulumi.getter(name="masterUserSecretKmsKeyId")
     def master_user_secret_kms_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -1102,6 +1136,8 @@ class _ClusterState:
                  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  manage_master_user_password: Optional[pulumi.Input[_builtins.bool]] = None,
                  master_password: Optional[pulumi.Input[_builtins.str]] = None,
+                 master_password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 master_password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  master_user_secret_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  master_user_secrets: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterMasterUserSecretArgs']]]] = None,
                  master_username: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1182,6 +1218,9 @@ class _ClusterState:
         :param pulumi.Input[_builtins.str] kms_key_id: ARN for the KMS encryption key. When specifying `kms_key_id`, `storage_encrypted` needs to be set to true.
         :param pulumi.Input[_builtins.bool] manage_master_user_password: Set to true to allow RDS to manage the master user password in Secrets Manager. Cannot be set if `master_password` is provided.
         :param pulumi.Input[_builtins.str] master_password: Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.str] master_password_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Password for the master DB user. Note that this may show up in logs. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.int] master_password_wo_version: Used together with `master_password_wo` to trigger an update. Increment this value when an update to the `master_password_wo` is required.
         :param pulumi.Input[_builtins.str] master_user_secret_kms_key_id: Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN. If not specified, the default KMS key for your Amazon Web Services account is used.
         :param pulumi.Input[Sequence[pulumi.Input['ClusterMasterUserSecretArgs']]] master_user_secrets: Block that specifies the master user secret. Only available when `manage_master_user_password` is set to true. Documented below.
         :param pulumi.Input[_builtins.str] master_username: Username for the master DB user. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). This argument does not support in-place updates and cannot be changed during a restore from snapshot.
@@ -1306,6 +1345,10 @@ class _ClusterState:
             pulumi.set(__self__, "manage_master_user_password", manage_master_user_password)
         if master_password is not None:
             pulumi.set(__self__, "master_password", master_password)
+        if master_password_wo is not None:
+            pulumi.set(__self__, "master_password_wo", master_password_wo)
+        if master_password_wo_version is not None:
+            pulumi.set(__self__, "master_password_wo_version", master_password_wo_version)
         if master_user_secret_kms_key_id is not None:
             pulumi.set(__self__, "master_user_secret_kms_key_id", master_user_secret_kms_key_id)
         if master_user_secrets is not None:
@@ -1907,6 +1950,31 @@ class _ClusterState:
     def master_password(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "master_password", value)
 
+    @_builtins.property
+    @pulumi.getter(name="masterPasswordWo")
+    def master_password_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Password for the master DB user. Note that this may show up in logs. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        """
+        return pulumi.get(self, "master_password_wo")
+
+    @master_password_wo.setter
+    def master_password_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "master_password_wo", value)
+
+    @_builtins.property
+    @pulumi.getter(name="masterPasswordWoVersion")
+    def master_password_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        Used together with `master_password_wo` to trigger an update. Increment this value when an update to the `master_password_wo` is required.
+        """
+        return pulumi.get(self, "master_password_wo_version")
+
+    @master_password_wo_version.setter
+    def master_password_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "master_password_wo_version", value)
+
     @_builtins.property
     @pulumi.getter(name="masterUserSecretKmsKeyId")
     def master_user_secret_kms_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -2281,6 +2349,8 @@ class Cluster(pulumi.CustomResource):
                  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  manage_master_user_password: Optional[pulumi.Input[_builtins.bool]] = None,
                  master_password: Optional[pulumi.Input[_builtins.str]] = None,
+                 master_password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 master_password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  master_user_secret_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  master_username: Optional[pulumi.Input[_builtins.str]] = None,
                  monitoring_interval: Optional[pulumi.Input[_builtins.int]] = None,
@@ -2557,6 +2627,9 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] kms_key_id: ARN for the KMS encryption key. When specifying `kms_key_id`, `storage_encrypted` needs to be set to true.
         :param pulumi.Input[_builtins.bool] manage_master_user_password: Set to true to allow RDS to manage the master user password in Secrets Manager. Cannot be set if `master_password` is provided.
         :param pulumi.Input[_builtins.str] master_password: Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.str] master_password_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Password for the master DB user. Note that this may show up in logs. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.int] master_password_wo_version: Used together with `master_password_wo` to trigger an update. Increment this value when an update to the `master_password_wo` is required.
         :param pulumi.Input[_builtins.str] master_user_secret_kms_key_id: Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN. If not specified, the default KMS key for your Amazon Web Services account is used.
         :param pulumi.Input[_builtins.str] master_username: Username for the master DB user. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). This argument does not support in-place updates and cannot be changed during a restore from snapshot.
         :param pulumi.Input[_builtins.int] monitoring_interval: Interval, in seconds, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify 0. The default is 0. Valid Values: 0, 1, 5, 10, 15, 30, 60.
@@ -2851,6 +2924,8 @@ class Cluster(pulumi.CustomResource):
                  kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  manage_master_user_password: Optional[pulumi.Input[_builtins.bool]] = None,
                  master_password: Optional[pulumi.Input[_builtins.str]] = None,
+                 master_password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 master_password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  master_user_secret_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  master_username: Optional[pulumi.Input[_builtins.str]] = None,
                  monitoring_interval: Optional[pulumi.Input[_builtins.int]] = None,
@@ -2925,6 +3000,8 @@ class Cluster(pulumi.CustomResource):
             __props__.__dict__["kms_key_id"] = kms_key_id
             __props__.__dict__["manage_master_user_password"] = manage_master_user_password
             __props__.__dict__["master_password"] = None if master_password is None else pulumi.Output.secret(master_password)
+            __props__.__dict__["master_password_wo"] = None if master_password_wo is None else pulumi.Output.secret(master_password_wo)
+            __props__.__dict__["master_password_wo_version"] = master_password_wo_version
             __props__.__dict__["master_user_secret_kms_key_id"] = master_user_secret_kms_key_id
             __props__.__dict__["master_username"] = master_username
             __props__.__dict__["monitoring_interval"] = monitoring_interval
@@ -2958,7 +3035,7 @@ class Cluster(pulumi.CustomResource):
             __props__.__dict__["master_user_secrets"] = None
             __props__.__dict__["reader_endpoint"] = None
             __props__.__dict__["tags_all"] = None
-        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["masterPassword"])
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["masterPassword", "masterPasswordWo"])
         opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(Cluster, __self__).__init__(
             'aws:rds/cluster:Cluster',
@@ -3015,6 +3092,8 @@ class Cluster(pulumi.CustomResource):
             kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
             manage_master_user_password: Optional[pulumi.Input[_builtins.bool]] = None,
             master_password: Optional[pulumi.Input[_builtins.str]] = None,
+            master_password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+            master_password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
             master_user_secret_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
             master_user_secrets: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ClusterMasterUserSecretArgs', 'ClusterMasterUserSecretArgsDict']]]]] = None,
             master_username: Optional[pulumi.Input[_builtins.str]] = None,
@@ -3100,6 +3179,9 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] kms_key_id: ARN for the KMS encryption key. When specifying `kms_key_id`, `storage_encrypted` needs to be set to true.
         :param pulumi.Input[_builtins.bool] manage_master_user_password: Set to true to allow RDS to manage the master user password in Secrets Manager. Cannot be set if `master_password` is provided.
         :param pulumi.Input[_builtins.str] master_password: Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.str] master_password_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Password for the master DB user. Note that this may show up in logs. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.int] master_password_wo_version: Used together with `master_password_wo` to trigger an update. Increment this value when an update to the `master_password_wo` is required.
         :param pulumi.Input[_builtins.str] master_user_secret_kms_key_id: Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN. If not specified, the default KMS key for your Amazon Web Services account is used.
         :param pulumi.Input[Sequence[pulumi.Input[Union['ClusterMasterUserSecretArgs', 'ClusterMasterUserSecretArgsDict']]]] master_user_secrets: Block that specifies the master user secret. Only available when `manage_master_user_password` is set to true. Documented below.
         :param pulumi.Input[_builtins.str] master_username: Username for the master DB user. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). This argument does not support in-place updates and cannot be changed during a restore from snapshot.
@@ -3183,6 +3265,8 @@ class Cluster(pulumi.CustomResource):
         __props__.__dict__["kms_key_id"] = kms_key_id
         __props__.__dict__["manage_master_user_password"] = manage_master_user_password
         __props__.__dict__["master_password"] = master_password
+        __props__.__dict__["master_password_wo"] = master_password_wo
+        __props__.__dict__["master_password_wo_version"] = master_password_wo_version
         __props__.__dict__["master_user_secret_kms_key_id"] = master_user_secret_kms_key_id
         __props__.__dict__["master_user_secrets"] = master_user_secrets
         __props__.__dict__["master_username"] = master_username
@@ -3578,6 +3662,23 @@ class Cluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "master_password")
 
+    @_builtins.property
+    @pulumi.getter(name="masterPasswordWo")
+    def master_password_wo(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Password for the master DB user. Note that this may show up in logs. Please refer to the [RDS Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints). Cannot be set if `manage_master_user_password` is set to `true`.
+        """
+        return pulumi.get(self, "master_password_wo")
+
+    @_builtins.property
+    @pulumi.getter(name="masterPasswordWoVersion")
+    def master_password_wo_version(self) -> pulumi.Output[Optional[_builtins.int]]:
+        """
+        Used together with `master_password_wo` to trigger an update. Increment this value when an update to the `master_password_wo` is required.
+        """
+        return pulumi.get(self, "master_password_wo_version")
+
     @_builtins.property
     @pulumi.getter(name="masterUserSecretKmsKeyId")
     def master_user_secret_kms_key_id(self) -> pulumi.Output[_builtins.str]:

pulumi_aws/rds/instance.py

@@ -72,6 +72,8 @@ class InstanceArgs:
                  option_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  parameter_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  password: Optional[pulumi.Input[_builtins.str]] = None,
+                 password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  performance_insights_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  performance_insights_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  performance_insights_retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -198,6 +200,9 @@ class InstanceArgs:
         :param pulumi.Input[_builtins.str] option_group_name: Name of the DB option group to associate.
         :param pulumi.Input[_builtins.str] parameter_group_name: Name of the DB parameter group to associate.
         :param pulumi.Input[_builtins.str] password: Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.str] password_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.int] password_wo_version: Used together with `password_wo` to trigger an update. Increment this value when an update to `password_wo` is required.
         :param pulumi.Input[_builtins.bool] performance_insights_enabled: Specifies whether Performance Insights are enabled. Defaults to false.
         :param pulumi.Input[_builtins.str] performance_insights_kms_key_id: The ARN for the KMS key to encrypt Performance Insights data. When specifying `performance_insights_kms_key_id`, `performance_insights_enabled` needs to be set to true. Once KMS key is set, it can never be changed.
         :param pulumi.Input[_builtins.int] performance_insights_retention_period: Amount of time in days to retain Performance Insights data. Valid values are `7`, `731` (2 years) or a multiple of `31`. When specifying `performance_insights_retention_period`, `performance_insights_enabled` needs to be set to true. Defaults to '7'.
@@ -345,6 +350,10 @@ class InstanceArgs:
             pulumi.set(__self__, "parameter_group_name", parameter_group_name)
         if password is not None:
             pulumi.set(__self__, "password", password)
+        if password_wo is not None:
+            pulumi.set(__self__, "password_wo", password_wo)
+        if password_wo_version is not None:
+            pulumi.set(__self__, "password_wo_version", password_wo_version)
         if performance_insights_enabled is not None:
             pulumi.set(__self__, "performance_insights_enabled", performance_insights_enabled)
         if performance_insights_kms_key_id is not None:
@@ -1040,6 +1049,31 @@ class InstanceArgs:
     def password(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "password", value)
 
+    @_builtins.property
+    @pulumi.getter(name="passwordWo")
+    def password_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        """
+        return pulumi.get(self, "password_wo")
+
+    @password_wo.setter
+    def password_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "password_wo", value)
+
+    @_builtins.property
+    @pulumi.getter(name="passwordWoVersion")
+    def password_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        Used together with `password_wo` to trigger an update. Increment this value when an update to `password_wo` is required.
+        """
+        return pulumi.get(self, "password_wo_version")
+
+    @password_wo_version.setter
+    def password_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "password_wo_version", value)
+
     @_builtins.property
     @pulumi.getter(name="performanceInsightsEnabled")
     def performance_insights_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
@@ -1369,6 +1403,8 @@ class _InstanceState:
                  option_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  parameter_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  password: Optional[pulumi.Input[_builtins.str]] = None,
+                 password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  performance_insights_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  performance_insights_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  performance_insights_retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -1507,6 +1543,9 @@ class _InstanceState:
         :param pulumi.Input[_builtins.str] option_group_name: Name of the DB option group to associate.
         :param pulumi.Input[_builtins.str] parameter_group_name: Name of the DB parameter group to associate.
         :param pulumi.Input[_builtins.str] password: Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.str] password_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.int] password_wo_version: Used together with `password_wo` to trigger an update. Increment this value when an update to `password_wo` is required.
         :param pulumi.Input[_builtins.bool] performance_insights_enabled: Specifies whether Performance Insights are enabled. Defaults to false.
         :param pulumi.Input[_builtins.str] performance_insights_kms_key_id: The ARN for the KMS key to encrypt Performance Insights data. When specifying `performance_insights_kms_key_id`, `performance_insights_enabled` needs to be set to true. Once KMS key is set, it can never be changed.
         :param pulumi.Input[_builtins.int] performance_insights_retention_period: Amount of time in days to retain Performance Insights data. Valid values are `7`, `731` (2 years) or a multiple of `31`. When specifying `performance_insights_retention_period`, `performance_insights_enabled` needs to be set to true. Defaults to '7'.
@@ -1674,6 +1713,10 @@ class _InstanceState:
             pulumi.set(__self__, "parameter_group_name", parameter_group_name)
         if password is not None:
             pulumi.set(__self__, "password", password)
+        if password_wo is not None:
+            pulumi.set(__self__, "password_wo", password_wo)
+        if password_wo_version is not None:
+            pulumi.set(__self__, "password_wo_version", password_wo_version)
         if performance_insights_enabled is not None:
             pulumi.set(__self__, "performance_insights_enabled", performance_insights_enabled)
         if performance_insights_kms_key_id is not None:
@@ -2473,6 +2516,31 @@ class _InstanceState:
     def password(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "password", value)
 
+    @_builtins.property
+    @pulumi.getter(name="passwordWo")
+    def password_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        """
+        return pulumi.get(self, "password_wo")
+
+    @password_wo.setter
+    def password_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "password_wo", value)
+
+    @_builtins.property
+    @pulumi.getter(name="passwordWoVersion")
+    def password_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        Used together with `password_wo` to trigger an update. Increment this value when an update to `password_wo` is required.
+        """
+        return pulumi.get(self, "password_wo_version")
+
+    @password_wo_version.setter
+    def password_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "password_wo_version", value)
+
     @_builtins.property
     @pulumi.getter(name="performanceInsightsEnabled")
     def performance_insights_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
@@ -2842,6 +2910,8 @@ class Instance(pulumi.CustomResource):
                  option_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  parameter_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  password: Optional[pulumi.Input[_builtins.str]] = None,
+                 password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  performance_insights_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  performance_insights_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  performance_insights_retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -3222,6 +3292,9 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] option_group_name: Name of the DB option group to associate.
         :param pulumi.Input[_builtins.str] parameter_group_name: Name of the DB parameter group to associate.
         :param pulumi.Input[_builtins.str] password: Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.str] password_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.int] password_wo_version: Used together with `password_wo` to trigger an update. Increment this value when an update to `password_wo` is required.
         :param pulumi.Input[_builtins.bool] performance_insights_enabled: Specifies whether Performance Insights are enabled. Defaults to false.
         :param pulumi.Input[_builtins.str] performance_insights_kms_key_id: The ARN for the KMS key to encrypt Performance Insights data. When specifying `performance_insights_kms_key_id`, `performance_insights_enabled` needs to be set to true. Once KMS key is set, it can never be changed.
         :param pulumi.Input[_builtins.int] performance_insights_retention_period: Amount of time in days to retain Performance Insights data. Valid values are `7`, `731` (2 years) or a multiple of `31`. When specifying `performance_insights_retention_period`, `performance_insights_enabled` needs to be set to true. Defaults to '7'.
@@ -3594,6 +3667,8 @@ class Instance(pulumi.CustomResource):
                  option_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  parameter_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  password: Optional[pulumi.Input[_builtins.str]] = None,
+                 password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  performance_insights_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  performance_insights_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  performance_insights_retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -3675,6 +3750,8 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["option_group_name"] = option_group_name
             __props__.__dict__["parameter_group_name"] = parameter_group_name
             __props__.__dict__["password"] = None if password is None else pulumi.Output.secret(password)
+            __props__.__dict__["password_wo"] = None if password_wo is None else pulumi.Output.secret(password_wo)
+            __props__.__dict__["password_wo_version"] = password_wo_version
             __props__.__dict__["performance_insights_enabled"] = performance_insights_enabled
             __props__.__dict__["performance_insights_kms_key_id"] = performance_insights_kms_key_id
             __props__.__dict__["performance_insights_retention_period"] = performance_insights_retention_period
@@ -3707,7 +3784,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["resource_id"] = None
             __props__.__dict__["status"] = None
             __props__.__dict__["tags_all"] = None
-        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["password"])
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["password", "passwordWo"])
         opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(Instance, __self__).__init__(
             'aws:rds/instance:Instance',
@@ -3777,6 +3854,8 @@ class Instance(pulumi.CustomResource):
             option_group_name: Optional[pulumi.Input[_builtins.str]] = None,
             parameter_group_name: Optional[pulumi.Input[_builtins.str]] = None,
             password: Optional[pulumi.Input[_builtins.str]] = None,
+            password_wo: Optional[pulumi.Input[_builtins.str]] = None,
+            password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
             performance_insights_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
             performance_insights_kms_key_id: Optional[pulumi.Input[_builtins.str]] = None,
             performance_insights_retention_period: Optional[pulumi.Input[_builtins.int]] = None,
@@ -3920,6 +3999,9 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] option_group_name: Name of the DB option group to associate.
         :param pulumi.Input[_builtins.str] parameter_group_name: Name of the DB parameter group to associate.
         :param pulumi.Input[_builtins.str] password: Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.str] password_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        :param pulumi.Input[_builtins.int] password_wo_version: Used together with `password_wo` to trigger an update. Increment this value when an update to `password_wo` is required.
         :param pulumi.Input[_builtins.bool] performance_insights_enabled: Specifies whether Performance Insights are enabled. Defaults to false.
         :param pulumi.Input[_builtins.str] performance_insights_kms_key_id: The ARN for the KMS key to encrypt Performance Insights data. When specifying `performance_insights_kms_key_id`, `performance_insights_enabled` needs to be set to true. Once KMS key is set, it can never be changed.
         :param pulumi.Input[_builtins.int] performance_insights_retention_period: Amount of time in days to retain Performance Insights data. Valid values are `7`, `731` (2 years) or a multiple of `31`. When specifying `performance_insights_retention_period`, `performance_insights_enabled` needs to be set to true. Defaults to '7'.
@@ -4033,6 +4115,8 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["option_group_name"] = option_group_name
         __props__.__dict__["parameter_group_name"] = parameter_group_name
         __props__.__dict__["password"] = password
+        __props__.__dict__["password_wo"] = password_wo
+        __props__.__dict__["password_wo_version"] = password_wo_version
         __props__.__dict__["performance_insights_enabled"] = performance_insights_enabled
         __props__.__dict__["performance_insights_kms_key_id"] = performance_insights_kms_key_id
         __props__.__dict__["performance_insights_retention_period"] = performance_insights_retention_period
@@ -4577,6 +4661,23 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "password")
 
+    @_builtins.property
+    @pulumi.getter(name="passwordWo")
+    def password_wo(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Password for the master DB user. Note that this may show up in logs, and it will be stored in the state file. Cannot be set if `manage_master_user_password` is set to `true`.
+        """
+        return pulumi.get(self, "password_wo")
+
+    @_builtins.property
+    @pulumi.getter(name="passwordWoVersion")
+    def password_wo_version(self) -> pulumi.Output[Optional[_builtins.int]]:
+        """
+        Used together with `password_wo` to trigger an update. Increment this value when an update to `password_wo` is required.
+        """
+        return pulumi.get(self, "password_wo_version")
+
     @_builtins.property
     @pulumi.getter(name="performanceInsightsEnabled")
     def performance_insights_enabled(self) -> pulumi.Output[Optional[_builtins.bool]]: