PyPI - pulumi-vault - Versions diffs - 6.7.0a1743576047__py3-none-any.whl → 6.7.0a1744183682__py3-none-any.whl - Mend

pulumi-vault 6.7.0a1743576047py3-none-any.whl → 6.7.0a1744183682py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (264) hide show

pulumi_vault/__init__.py +1 -0
pulumi_vault/_inputs.py +554 -553
pulumi_vault/ad/__init__.py +1 -0
pulumi_vault/ad/get_access_credentials.py +20 -19
pulumi_vault/ad/secret_backend.py +477 -476
pulumi_vault/ad/secret_library.py +99 -98
pulumi_vault/ad/secret_role.py +85 -84
pulumi_vault/alicloud/__init__.py +1 -0
pulumi_vault/alicloud/auth_backend_role.py +183 -182
pulumi_vault/approle/__init__.py +1 -0
pulumi_vault/approle/auth_backend_login.py +106 -105
pulumi_vault/approle/auth_backend_role.py +239 -238
pulumi_vault/approle/auth_backend_role_secret_id.py +162 -161
pulumi_vault/approle/get_auth_backend_role_id.py +18 -17
pulumi_vault/audit.py +85 -84
pulumi_vault/audit_request_header.py +43 -42
pulumi_vault/auth_backend.py +106 -105
pulumi_vault/aws/__init__.py +1 -0
pulumi_vault/aws/auth_backend_cert.py +71 -70
pulumi_vault/aws/auth_backend_client.py +253 -252
pulumi_vault/aws/auth_backend_config_identity.py +85 -84
pulumi_vault/aws/auth_backend_identity_whitelist.py +57 -56
pulumi_vault/aws/auth_backend_login.py +209 -208
pulumi_vault/aws/auth_backend_role.py +400 -399
pulumi_vault/aws/auth_backend_role_tag.py +127 -126
pulumi_vault/aws/auth_backend_roletag_blacklist.py +57 -56
pulumi_vault/aws/auth_backend_sts_role.py +71 -70
pulumi_vault/aws/get_access_credentials.py +44 -43
pulumi_vault/aws/get_static_access_credentials.py +13 -12
pulumi_vault/aws/secret_backend.py +337 -336
pulumi_vault/aws/secret_backend_role.py +211 -210
pulumi_vault/aws/secret_backend_static_role.py +113 -112
pulumi_vault/azure/__init__.py +1 -0
pulumi_vault/azure/_inputs.py +21 -20
pulumi_vault/azure/auth_backend_config.py +183 -182
pulumi_vault/azure/auth_backend_role.py +253 -252
pulumi_vault/azure/backend.py +239 -238
pulumi_vault/azure/backend_role.py +141 -140
pulumi_vault/azure/get_access_credentials.py +58 -57
pulumi_vault/azure/outputs.py +11 -10
pulumi_vault/cert_auth_backend_role.py +365 -364
pulumi_vault/config/__init__.py +1 -0
pulumi_vault/config/__init__.pyi +1 -0
pulumi_vault/config/_inputs.py +11 -10
pulumi_vault/config/outputs.py +287 -286
pulumi_vault/config/ui_custom_message.py +113 -112
pulumi_vault/config/vars.py +1 -0
pulumi_vault/consul/__init__.py +1 -0
pulumi_vault/consul/secret_backend.py +197 -196
pulumi_vault/consul/secret_backend_role.py +183 -182
pulumi_vault/database/__init__.py +1 -0
pulumi_vault/database/_inputs.py +2525 -2524
pulumi_vault/database/outputs.py +1529 -1528
pulumi_vault/database/secret_backend_connection.py +169 -168
pulumi_vault/database/secret_backend_role.py +169 -168
pulumi_vault/database/secret_backend_static_role.py +179 -178
pulumi_vault/database/secrets_mount.py +267 -266
pulumi_vault/egp_policy.py +71 -70
pulumi_vault/gcp/__init__.py +1 -0
pulumi_vault/gcp/_inputs.py +82 -81
pulumi_vault/gcp/auth_backend.py +260 -259
pulumi_vault/gcp/auth_backend_role.py +281 -280
pulumi_vault/gcp/get_auth_backend_role.py +70 -69
pulumi_vault/gcp/outputs.py +50 -49
pulumi_vault/gcp/secret_backend.py +232 -231
pulumi_vault/gcp/secret_impersonated_account.py +92 -91
pulumi_vault/gcp/secret_roleset.py +92 -91
pulumi_vault/gcp/secret_static_account.py +92 -91
pulumi_vault/generic/__init__.py +1 -0
pulumi_vault/generic/endpoint.py +113 -112
pulumi_vault/generic/get_secret.py +28 -27
pulumi_vault/generic/secret.py +78 -77
pulumi_vault/get_auth_backend.py +19 -18
pulumi_vault/get_auth_backends.py +14 -13
pulumi_vault/get_namespace.py +15 -14
pulumi_vault/get_namespaces.py +8 -7
pulumi_vault/get_nomad_access_token.py +19 -18
pulumi_vault/get_policy_document.py +6 -5
pulumi_vault/get_raft_autopilot_state.py +18 -17
pulumi_vault/github/__init__.py +1 -0
pulumi_vault/github/_inputs.py +42 -41
pulumi_vault/github/auth_backend.py +232 -231
pulumi_vault/github/outputs.py +26 -25
pulumi_vault/github/team.py +57 -56
pulumi_vault/github/user.py +57 -56
pulumi_vault/identity/__init__.py +1 -0
pulumi_vault/identity/entity.py +85 -84
pulumi_vault/identity/entity_alias.py +71 -70
pulumi_vault/identity/entity_policies.py +64 -63
pulumi_vault/identity/get_entity.py +43 -42
pulumi_vault/identity/get_group.py +50 -49
pulumi_vault/identity/get_oidc_client_creds.py +14 -13
pulumi_vault/identity/get_oidc_openid_config.py +24 -23
pulumi_vault/identity/get_oidc_public_keys.py +13 -12
pulumi_vault/identity/group.py +141 -140
pulumi_vault/identity/group_alias.py +57 -56
pulumi_vault/identity/group_member_entity_ids.py +57 -56
pulumi_vault/identity/group_member_group_ids.py +57 -56
pulumi_vault/identity/group_policies.py +64 -63
pulumi_vault/identity/mfa_duo.py +148 -147
pulumi_vault/identity/mfa_login_enforcement.py +120 -119
pulumi_vault/identity/mfa_okta.py +134 -133
pulumi_vault/identity/mfa_pingid.py +127 -126
pulumi_vault/identity/mfa_totp.py +176 -175
pulumi_vault/identity/oidc.py +29 -28
pulumi_vault/identity/oidc_assignment.py +57 -56
pulumi_vault/identity/oidc_client.py +127 -126
pulumi_vault/identity/oidc_key.py +85 -84
pulumi_vault/identity/oidc_key_allowed_client_id.py +43 -42
pulumi_vault/identity/oidc_provider.py +92 -91
pulumi_vault/identity/oidc_role.py +85 -84
pulumi_vault/identity/oidc_scope.py +57 -56
pulumi_vault/identity/outputs.py +32 -31
pulumi_vault/jwt/__init__.py +1 -0
pulumi_vault/jwt/_inputs.py +42 -41
pulumi_vault/jwt/auth_backend.py +288 -287
pulumi_vault/jwt/auth_backend_role.py +407 -406
pulumi_vault/jwt/outputs.py +26 -25
pulumi_vault/kmip/__init__.py +1 -0
pulumi_vault/kmip/secret_backend.py +183 -182
pulumi_vault/kmip/secret_role.py +295 -294
pulumi_vault/kmip/secret_scope.py +57 -56
pulumi_vault/kubernetes/__init__.py +1 -0
pulumi_vault/kubernetes/auth_backend_config.py +141 -140
pulumi_vault/kubernetes/auth_backend_role.py +225 -224
pulumi_vault/kubernetes/get_auth_backend_config.py +47 -46
pulumi_vault/kubernetes/get_auth_backend_role.py +70 -69
pulumi_vault/kubernetes/get_service_account_token.py +38 -37
pulumi_vault/kubernetes/secret_backend.py +316 -315
pulumi_vault/kubernetes/secret_backend_role.py +197 -196
pulumi_vault/kv/__init__.py +1 -0
pulumi_vault/kv/_inputs.py +21 -20
pulumi_vault/kv/get_secret.py +17 -16
pulumi_vault/kv/get_secret_subkeys_v2.py +30 -29
pulumi_vault/kv/get_secret_v2.py +29 -28
pulumi_vault/kv/get_secrets_list.py +13 -12
pulumi_vault/kv/get_secrets_list_v2.py +19 -18
pulumi_vault/kv/outputs.py +13 -12
pulumi_vault/kv/secret.py +50 -49
pulumi_vault/kv/secret_backend_v2.py +71 -70
pulumi_vault/kv/secret_v2.py +134 -133
pulumi_vault/ldap/__init__.py +1 -0
pulumi_vault/ldap/auth_backend.py +588 -587
pulumi_vault/ldap/auth_backend_group.py +57 -56
pulumi_vault/ldap/auth_backend_user.py +71 -70
pulumi_vault/ldap/get_dynamic_credentials.py +17 -16
pulumi_vault/ldap/get_static_credentials.py +18 -17
pulumi_vault/ldap/secret_backend.py +554 -553
pulumi_vault/ldap/secret_backend_dynamic_role.py +127 -126
pulumi_vault/ldap/secret_backend_library_set.py +99 -98
pulumi_vault/ldap/secret_backend_static_role.py +99 -98
pulumi_vault/managed/__init__.py +1 -0
pulumi_vault/managed/_inputs.py +229 -228
pulumi_vault/managed/keys.py +15 -14
pulumi_vault/managed/outputs.py +139 -138
pulumi_vault/mfa_duo.py +113 -112
pulumi_vault/mfa_okta.py +113 -112
pulumi_vault/mfa_pingid.py +120 -119
pulumi_vault/mfa_totp.py +127 -126
pulumi_vault/mongodbatlas/__init__.py +1 -0
pulumi_vault/mongodbatlas/secret_backend.py +64 -63
pulumi_vault/mongodbatlas/secret_role.py +155 -154
pulumi_vault/mount.py +274 -273
pulumi_vault/namespace.py +64 -63
pulumi_vault/nomad_secret_backend.py +211 -210
pulumi_vault/nomad_secret_role.py +85 -84
pulumi_vault/okta/__init__.py +1 -0
pulumi_vault/okta/_inputs.py +26 -25
pulumi_vault/okta/auth_backend.py +274 -273
pulumi_vault/okta/auth_backend_group.py +57 -56
pulumi_vault/okta/auth_backend_user.py +71 -70
pulumi_vault/okta/outputs.py +16 -15
pulumi_vault/outputs.py +56 -55
pulumi_vault/password_policy.py +43 -42
pulumi_vault/pkisecret/__init__.py +1 -0
pulumi_vault/pkisecret/_inputs.py +31 -30
pulumi_vault/pkisecret/backend_acme_eab.py +92 -91
pulumi_vault/pkisecret/backend_config_acme.py +141 -140
pulumi_vault/pkisecret/backend_config_auto_tidy.py +323 -322
pulumi_vault/pkisecret/backend_config_cluster.py +57 -56
pulumi_vault/pkisecret/backend_config_cmpv2.py +106 -105
pulumi_vault/pkisecret/backend_config_est.py +120 -119
pulumi_vault/pkisecret/get_backend_cert_metadata.py +22 -21
pulumi_vault/pkisecret/get_backend_config_cmpv2.py +22 -21
pulumi_vault/pkisecret/get_backend_config_est.py +19 -18
pulumi_vault/pkisecret/get_backend_issuer.py +45 -44
pulumi_vault/pkisecret/get_backend_issuers.py +15 -14
pulumi_vault/pkisecret/get_backend_key.py +20 -19
pulumi_vault/pkisecret/get_backend_keys.py +15 -14
pulumi_vault/pkisecret/outputs.py +28 -27
pulumi_vault/pkisecret/secret_backend_cert.py +337 -336
pulumi_vault/pkisecret/secret_backend_config_ca.py +43 -42
pulumi_vault/pkisecret/secret_backend_config_issuers.py +57 -56
pulumi_vault/pkisecret/secret_backend_config_urls.py +85 -84
pulumi_vault/pkisecret/secret_backend_crl_config.py +197 -196
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +421 -420
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +57 -56
pulumi_vault/pkisecret/secret_backend_issuer.py +232 -231
pulumi_vault/pkisecret/secret_backend_key.py +120 -119
pulumi_vault/pkisecret/secret_backend_role.py +715 -714
pulumi_vault/pkisecret/secret_backend_root_cert.py +554 -553
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +526 -525
pulumi_vault/pkisecret/secret_backend_sign.py +281 -280
pulumi_vault/plugin.py +127 -126
pulumi_vault/plugin_pinned_version.py +43 -42
pulumi_vault/policy.py +43 -42
pulumi_vault/provider.py +120 -119
pulumi_vault/pulumi-plugin.json +1 -1
pulumi_vault/quota_lease_count.py +85 -84
pulumi_vault/quota_rate_limit.py +113 -112
pulumi_vault/rabbitmq/__init__.py +1 -0
pulumi_vault/rabbitmq/_inputs.py +41 -40
pulumi_vault/rabbitmq/outputs.py +25 -24
pulumi_vault/rabbitmq/secret_backend.py +169 -168
pulumi_vault/rabbitmq/secret_backend_role.py +57 -56
pulumi_vault/raft_autopilot.py +113 -112
pulumi_vault/raft_snapshot_agent_config.py +393 -392
pulumi_vault/rgp_policy.py +57 -56
pulumi_vault/saml/__init__.py +1 -0
pulumi_vault/saml/auth_backend.py +155 -154
pulumi_vault/saml/auth_backend_role.py +239 -238
pulumi_vault/secrets/__init__.py +1 -0
pulumi_vault/secrets/_inputs.py +16 -15
pulumi_vault/secrets/outputs.py +10 -9
pulumi_vault/secrets/sync_association.py +71 -70
pulumi_vault/secrets/sync_aws_destination.py +148 -147
pulumi_vault/secrets/sync_azure_destination.py +148 -147
pulumi_vault/secrets/sync_config.py +43 -42
pulumi_vault/secrets/sync_gcp_destination.py +106 -105
pulumi_vault/secrets/sync_gh_destination.py +134 -133
pulumi_vault/secrets/sync_github_apps.py +64 -63
pulumi_vault/secrets/sync_vercel_destination.py +120 -119
pulumi_vault/ssh/__init__.py +1 -0
pulumi_vault/ssh/_inputs.py +11 -10
pulumi_vault/ssh/get_secret_backend_sign.py +52 -51
pulumi_vault/ssh/outputs.py +7 -6
pulumi_vault/ssh/secret_backend_ca.py +99 -98
pulumi_vault/ssh/secret_backend_role.py +365 -364
pulumi_vault/terraformcloud/__init__.py +1 -0
pulumi_vault/terraformcloud/secret_backend.py +111 -110
pulumi_vault/terraformcloud/secret_creds.py +74 -73
pulumi_vault/terraformcloud/secret_role.py +93 -92
pulumi_vault/token.py +246 -245
pulumi_vault/tokenauth/__init__.py +1 -0
pulumi_vault/tokenauth/auth_backend_role.py +267 -266
pulumi_vault/transform/__init__.py +1 -0
pulumi_vault/transform/alphabet.py +57 -56
pulumi_vault/transform/get_decode.py +47 -46
pulumi_vault/transform/get_encode.py +47 -46
pulumi_vault/transform/role.py +57 -56
pulumi_vault/transform/template.py +113 -112
pulumi_vault/transform/transformation.py +141 -140
pulumi_vault/transit/__init__.py +1 -0
pulumi_vault/transit/get_decrypt.py +18 -17
pulumi_vault/transit/get_encrypt.py +21 -20
pulumi_vault/transit/get_sign.py +54 -53
pulumi_vault/transit/get_verify.py +60 -59
pulumi_vault/transit/secret_backend_key.py +274 -273
pulumi_vault/transit/secret_cache_config.py +43 -42
{pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744183682.dist-info}/METADATA +1 -1
pulumi_vault-6.7.0a1744183682.dist-info/RECORD +265 -0
pulumi_vault-6.7.0a1743576047.dist-info/RECORD +0 -265
{pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744183682.dist-info}/WHEEL +0 -0
{pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744183682.dist-info}/top_level.txt +0 -0

pulumi_vault/pkisecret/secret_backend_root_cert.py CHANGED Viewed

@@ -2,6 +2,7 @@
 # *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
+import builtins
 import copy
 import warnings
 import sys
@@ -19,91 +20,91 @@ __all__ = ['SecretBackendRootCertArgs', 'SecretBackendRootCert']
 @pulumi.input_type
 class SecretBackendRootCertArgs:
     def __init__(__self__, *,
-                 backend: pulumi.Input[str],
-                 common_name: pulumi.Input[str],
-                 type: pulumi.Input[str],
-                 alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 country: Optional[pulumi.Input[str]] = None,
-                 exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
-                 excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 format: Optional[pulumi.Input[str]] = None,
-                 ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 issuer_name: Optional[pulumi.Input[str]] = None,
-                 key_bits: Optional[pulumi.Input[int]] = None,
-                 key_name: Optional[pulumi.Input[str]] = None,
-                 key_ref: Optional[pulumi.Input[str]] = None,
-                 key_type: Optional[pulumi.Input[str]] = None,
-                 locality: Optional[pulumi.Input[str]] = None,
-                 managed_key_id: Optional[pulumi.Input[str]] = None,
-                 managed_key_name: Optional[pulumi.Input[str]] = None,
-                 max_path_length: Optional[pulumi.Input[int]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
-                 not_after: Optional[pulumi.Input[str]] = None,
-                 organization: Optional[pulumi.Input[str]] = None,
-                 other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 ou: Optional[pulumi.Input[str]] = None,
-                 permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 postal_code: Optional[pulumi.Input[str]] = None,
-                 private_key_format: Optional[pulumi.Input[str]] = None,
-                 province: Optional[pulumi.Input[str]] = None,
-                 signature_bits: Optional[pulumi.Input[int]] = None,
-                 street_address: Optional[pulumi.Input[str]] = None,
-                 ttl: Optional[pulumi.Input[str]] = None,
-                 uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+                 backend: pulumi.Input[builtins.str],
+                 common_name: pulumi.Input[builtins.str],
+                 type: pulumi.Input[builtins.str],
+                 alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 country: Optional[pulumi.Input[builtins.str]] = None,
+                 exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
+                 excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 format: Optional[pulumi.Input[builtins.str]] = None,
+                 ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 issuer_name: Optional[pulumi.Input[builtins.str]] = None,
+                 key_bits: Optional[pulumi.Input[builtins.int]] = None,
+                 key_name: Optional[pulumi.Input[builtins.str]] = None,
+                 key_ref: Optional[pulumi.Input[builtins.str]] = None,
+                 key_type: Optional[pulumi.Input[builtins.str]] = None,
+                 locality: Optional[pulumi.Input[builtins.str]] = None,
+                 managed_key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 managed_key_name: Optional[pulumi.Input[builtins.str]] = None,
+                 max_path_length: Optional[pulumi.Input[builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
+                 not_after: Optional[pulumi.Input[builtins.str]] = None,
+                 organization: Optional[pulumi.Input[builtins.str]] = None,
+                 other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 ou: Optional[pulumi.Input[builtins.str]] = None,
+                 permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 postal_code: Optional[pulumi.Input[builtins.str]] = None,
+                 private_key_format: Optional[pulumi.Input[builtins.str]] = None,
+                 province: Optional[pulumi.Input[builtins.str]] = None,
+                 signature_bits: Optional[pulumi.Input[builtins.int]] = None,
+                 street_address: Optional[pulumi.Input[builtins.str]] = None,
+                 ttl: Optional[pulumi.Input[builtins.str]] = None,
+                 uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None):
         """
         The set of arguments for constructing a SecretBackendRootCert resource.
-        :param pulumi.Input[str] backend: The PKI secret backend the resource belongs to.
-        :param pulumi.Input[str] common_name: CN of intermediate to create
-        :param pulumi.Input[str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
+        :param pulumi.Input[builtins.str] backend: The PKI secret backend the resource belongs to.
+        :param pulumi.Input[builtins.str] common_name: CN of intermediate to create
+        :param pulumi.Input[builtins.str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
                or \\"kms\\"
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] alt_names: List of alternative names
-        :param pulumi.Input[str] country: The country
-        :param pulumi.Input[bool] exclude_cn_from_sans: Flag to exclude CN from SANs
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[str] format: The format of data
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] ip_sans: List of alternative IPs
-        :param pulumi.Input[str] issuer_name: Provides a name to the specified issuer. The name must be unique
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] alt_names: List of alternative names
+        :param pulumi.Input[builtins.str] country: The country
+        :param pulumi.Input[builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[builtins.str] format: The format of data
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ip_sans: List of alternative IPs
+        :param pulumi.Input[builtins.str] issuer_name: Provides a name to the specified issuer. The name must be unique
                across all issuers and not be the reserved value `default`
-        :param pulumi.Input[int] key_bits: The number of bits to use
-        :param pulumi.Input[str] key_name: When a new key is created with this request, optionally specifies
+        :param pulumi.Input[builtins.int] key_bits: The number of bits to use
+        :param pulumi.Input[builtins.str] key_name: When a new key is created with this request, optionally specifies
                the name for this. The global ref `default` may not be used as a name.
-        :param pulumi.Input[str] key_ref: Specifies the key (either default, by name, or by identifier) to use
+        :param pulumi.Input[builtins.str] key_ref: Specifies the key (either default, by name, or by identifier) to use
                for generating this request. Only suitable for `type=existing` requests.
-        :param pulumi.Input[str] key_type: The desired key type
-        :param pulumi.Input[str] locality: The locality
-        :param pulumi.Input[str] managed_key_id: The ID of the previously configured managed key. This field is
+        :param pulumi.Input[builtins.str] key_type: The desired key type
+        :param pulumi.Input[builtins.str] locality: The locality
+        :param pulumi.Input[builtins.str] managed_key_id: The ID of the previously configured managed key. This field is
                required if `type` is `kms` and it conflicts with `managed_key_name`
-        :param pulumi.Input[str] managed_key_name: The name of the previously configured managed key. This field is
+        :param pulumi.Input[builtins.str] managed_key_name: The name of the previously configured managed key. This field is
                required if `type` is `kms`  and it conflicts with `managed_key_id`
-        :param pulumi.Input[int] max_path_length: The maximum path length to encode in the generated certificate
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] max_path_length: The maximum path length to encode in the generated certificate
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
-        :param pulumi.Input[str] organization: The organization
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] other_sans: List of other SANs
-        :param pulumi.Input[str] ou: The organization unit
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[str] postal_code: The postal code
-        :param pulumi.Input[str] private_key_format: The private key format
-        :param pulumi.Input[str] province: The province
-        :param pulumi.Input[int] signature_bits: The number of bits to use in the signature algorithm
-        :param pulumi.Input[str] street_address: The street address
-        :param pulumi.Input[str] ttl: Time to live
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] uri_sans: List of alternative URIs
+        :param pulumi.Input[builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
+        :param pulumi.Input[builtins.str] organization: The organization
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] other_sans: List of other SANs
+        :param pulumi.Input[builtins.str] ou: The organization unit
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[builtins.str] postal_code: The postal code
+        :param pulumi.Input[builtins.str] private_key_format: The private key format
+        :param pulumi.Input[builtins.str] province: The province
+        :param pulumi.Input[builtins.int] signature_bits: The number of bits to use in the signature algorithm
+        :param pulumi.Input[builtins.str] street_address: The street address
+        :param pulumi.Input[builtins.str] ttl: Time to live
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] uri_sans: List of alternative URIs
         """
         pulumi.set(__self__, "backend", backend)
         pulumi.set(__self__, "common_name", common_name)
@@ -179,31 +180,31 @@ class SecretBackendRootCertArgs:
     @property
     @pulumi.getter
-    def backend(self) -> pulumi.Input[str]:
+    def backend(self) -> pulumi.Input[builtins.str]:
         """
         The PKI secret backend the resource belongs to.
         """
         return pulumi.get(self, "backend")
     @backend.setter
-    def backend(self, value: pulumi.Input[str]):
+    def backend(self, value: pulumi.Input[builtins.str]):
         pulumi.set(self, "backend", value)
     @property
     @pulumi.getter(name="commonName")
-    def common_name(self) -> pulumi.Input[str]:
+    def common_name(self) -> pulumi.Input[builtins.str]:
         """
         CN of intermediate to create
         """
         return pulumi.get(self, "common_name")
     @common_name.setter
-    def common_name(self, value: pulumi.Input[str]):
+    def common_name(self, value: pulumi.Input[builtins.str]):
         pulumi.set(self, "common_name", value)
     @property
     @pulumi.getter
-    def type(self) -> pulumi.Input[str]:
+    def type(self) -> pulumi.Input[builtins.str]:
         """
         Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
         or \\"kms\\"
@@ -211,120 +212,120 @@ class SecretBackendRootCertArgs:
         return pulumi.get(self, "type")
     @type.setter
-    def type(self, value: pulumi.Input[str]):
+    def type(self, value: pulumi.Input[builtins.str]):
         pulumi.set(self, "type", value)
     @property
     @pulumi.getter(name="altNames")
-    def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of alternative names
         """
         return pulumi.get(self, "alt_names")
     @alt_names.setter
-    def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "alt_names", value)
     @property
     @pulumi.getter
-    def country(self) -> Optional[pulumi.Input[str]]:
+    def country(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The country
         """
         return pulumi.get(self, "country")
     @country.setter
-    def country(self, value: Optional[pulumi.Input[str]]):
+    def country(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "country", value)
     @property
     @pulumi.getter(name="excludeCnFromSans")
-    def exclude_cn_from_sans(self) -> Optional[pulumi.Input[bool]]:
+    def exclude_cn_from_sans(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Flag to exclude CN from SANs
         """
         return pulumi.get(self, "exclude_cn_from_sans")
     @exclude_cn_from_sans.setter
-    def exclude_cn_from_sans(self, value: Optional[pulumi.Input[bool]]):
+    def exclude_cn_from_sans(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "exclude_cn_from_sans", value)
     @property
     @pulumi.getter(name="excludedDnsDomains")
-    def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "excluded_dns_domains")
     @excluded_dns_domains.setter
-    def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "excluded_dns_domains", value)
     @property
     @pulumi.getter(name="excludedEmailAddresses")
-    def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "excluded_email_addresses")
     @excluded_email_addresses.setter
-    def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "excluded_email_addresses", value)
     @property
     @pulumi.getter(name="excludedIpRanges")
-    def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "excluded_ip_ranges")
     @excluded_ip_ranges.setter
-    def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "excluded_ip_ranges", value)
     @property
     @pulumi.getter(name="excludedUriDomains")
-    def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "excluded_uri_domains")
     @excluded_uri_domains.setter
-    def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "excluded_uri_domains", value)
     @property
     @pulumi.getter
-    def format(self) -> Optional[pulumi.Input[str]]:
+    def format(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The format of data
         """
         return pulumi.get(self, "format")
     @format.setter
-    def format(self, value: Optional[pulumi.Input[str]]):
+    def format(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "format", value)
     @property
     @pulumi.getter(name="ipSans")
-    def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of alternative IPs
         """
         return pulumi.get(self, "ip_sans")
     @ip_sans.setter
-    def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "ip_sans", value)
     @property
     @pulumi.getter(name="issuerName")
-    def issuer_name(self) -> Optional[pulumi.Input[str]]:
+    def issuer_name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Provides a name to the specified issuer. The name must be unique
         across all issuers and not be the reserved value `default`
@@ -332,24 +333,24 @@ class SecretBackendRootCertArgs:
         return pulumi.get(self, "issuer_name")
     @issuer_name.setter
-    def issuer_name(self, value: Optional[pulumi.Input[str]]):
+    def issuer_name(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "issuer_name", value)
     @property
     @pulumi.getter(name="keyBits")
-    def key_bits(self) -> Optional[pulumi.Input[int]]:
+    def key_bits(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The number of bits to use
         """
         return pulumi.get(self, "key_bits")
     @key_bits.setter
-    def key_bits(self, value: Optional[pulumi.Input[int]]):
+    def key_bits(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "key_bits", value)
     @property
     @pulumi.getter(name="keyName")
-    def key_name(self) -> Optional[pulumi.Input[str]]:
+    def key_name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         When a new key is created with this request, optionally specifies
         the name for this. The global ref `default` may not be used as a name.
@@ -357,12 +358,12 @@ class SecretBackendRootCertArgs:
         return pulumi.get(self, "key_name")
     @key_name.setter
-    def key_name(self, value: Optional[pulumi.Input[str]]):
+    def key_name(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "key_name", value)
     @property
     @pulumi.getter(name="keyRef")
-    def key_ref(self) -> Optional[pulumi.Input[str]]:
+    def key_ref(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Specifies the key (either default, by name, or by identifier) to use
         for generating this request. Only suitable for `type=existing` requests.
@@ -370,36 +371,36 @@ class SecretBackendRootCertArgs:
         return pulumi.get(self, "key_ref")
     @key_ref.setter
-    def key_ref(self, value: Optional[pulumi.Input[str]]):
+    def key_ref(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "key_ref", value)
     @property
     @pulumi.getter(name="keyType")
-    def key_type(self) -> Optional[pulumi.Input[str]]:
+    def key_type(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The desired key type
         """
         return pulumi.get(self, "key_type")
     @key_type.setter
-    def key_type(self, value: Optional[pulumi.Input[str]]):
+    def key_type(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "key_type", value)
     @property
     @pulumi.getter
-    def locality(self) -> Optional[pulumi.Input[str]]:
+    def locality(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The locality
         """
         return pulumi.get(self, "locality")
     @locality.setter
-    def locality(self, value: Optional[pulumi.Input[str]]):
+    def locality(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "locality", value)
     @property
     @pulumi.getter(name="managedKeyId")
-    def managed_key_id(self) -> Optional[pulumi.Input[str]]:
+    def managed_key_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The ID of the previously configured managed key. This field is
         required if `type` is `kms` and it conflicts with `managed_key_name`
@@ -407,12 +408,12 @@ class SecretBackendRootCertArgs:
         return pulumi.get(self, "managed_key_id")
     @managed_key_id.setter
-    def managed_key_id(self, value: Optional[pulumi.Input[str]]):
+    def managed_key_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "managed_key_id", value)
     @property
     @pulumi.getter(name="managedKeyName")
-    def managed_key_name(self) -> Optional[pulumi.Input[str]]:
+    def managed_key_name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The name of the previously configured managed key. This field is
         required if `type` is `kms`  and it conflicts with `managed_key_id`
@@ -420,24 +421,24 @@ class SecretBackendRootCertArgs:
         return pulumi.get(self, "managed_key_name")
     @managed_key_name.setter
-    def managed_key_name(self, value: Optional[pulumi.Input[str]]):
+    def managed_key_name(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "managed_key_name", value)
     @property
     @pulumi.getter(name="maxPathLength")
-    def max_path_length(self) -> Optional[pulumi.Input[int]]:
+    def max_path_length(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The maximum path length to encode in the generated certificate
         """
         return pulumi.get(self, "max_path_length")
     @max_path_length.setter
-    def max_path_length(self, value: Optional[pulumi.Input[int]]):
+    def max_path_length(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "max_path_length", value)
     @property
     @pulumi.getter
-    def namespace(self) -> Optional[pulumi.Input[str]]:
+    def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -447,288 +448,288 @@ class SecretBackendRootCertArgs:
         return pulumi.get(self, "namespace")
     @namespace.setter
-    def namespace(self, value: Optional[pulumi.Input[str]]):
+    def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "namespace", value)
     @property
     @pulumi.getter(name="notAfter")
-    def not_after(self) -> Optional[pulumi.Input[str]]:
+    def not_after(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
         """
         return pulumi.get(self, "not_after")
     @not_after.setter
-    def not_after(self, value: Optional[pulumi.Input[str]]):
+    def not_after(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "not_after", value)
     @property
     @pulumi.getter
-    def organization(self) -> Optional[pulumi.Input[str]]:
+    def organization(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The organization
         """
         return pulumi.get(self, "organization")
     @organization.setter
-    def organization(self, value: Optional[pulumi.Input[str]]):
+    def organization(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "organization", value)
     @property
     @pulumi.getter(name="otherSans")
-    def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of other SANs
         """
         return pulumi.get(self, "other_sans")
     @other_sans.setter
-    def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "other_sans", value)
     @property
     @pulumi.getter
-    def ou(self) -> Optional[pulumi.Input[str]]:
+    def ou(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The organization unit
         """
         return pulumi.get(self, "ou")
     @ou.setter
-    def ou(self, value: Optional[pulumi.Input[str]]):
+    def ou(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "ou", value)
     @property
     @pulumi.getter(name="permittedDnsDomains")
-    def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of domains for which certificates are allowed to be issued
         """
         return pulumi.get(self, "permitted_dns_domains")
     @permitted_dns_domains.setter
-    def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "permitted_dns_domains", value)
     @property
     @pulumi.getter(name="permittedEmailAddresses")
-    def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "permitted_email_addresses")
     @permitted_email_addresses.setter
-    def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "permitted_email_addresses", value)
     @property
     @pulumi.getter(name="permittedIpRanges")
-    def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "permitted_ip_ranges")
     @permitted_ip_ranges.setter
-    def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "permitted_ip_ranges", value)
     @property
     @pulumi.getter(name="permittedUriDomains")
-    def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "permitted_uri_domains")
     @permitted_uri_domains.setter
-    def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "permitted_uri_domains", value)
     @property
     @pulumi.getter(name="postalCode")
-    def postal_code(self) -> Optional[pulumi.Input[str]]:
+    def postal_code(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The postal code
         """
         return pulumi.get(self, "postal_code")
     @postal_code.setter
-    def postal_code(self, value: Optional[pulumi.Input[str]]):
+    def postal_code(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "postal_code", value)
     @property
     @pulumi.getter(name="privateKeyFormat")
-    def private_key_format(self) -> Optional[pulumi.Input[str]]:
+    def private_key_format(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The private key format
         """
         return pulumi.get(self, "private_key_format")
     @private_key_format.setter
-    def private_key_format(self, value: Optional[pulumi.Input[str]]):
+    def private_key_format(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "private_key_format", value)
     @property
     @pulumi.getter
-    def province(self) -> Optional[pulumi.Input[str]]:
+    def province(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The province
         """
         return pulumi.get(self, "province")
     @province.setter
-    def province(self, value: Optional[pulumi.Input[str]]):
+    def province(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "province", value)
     @property
     @pulumi.getter(name="signatureBits")
-    def signature_bits(self) -> Optional[pulumi.Input[int]]:
+    def signature_bits(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The number of bits to use in the signature algorithm
         """
         return pulumi.get(self, "signature_bits")
     @signature_bits.setter
-    def signature_bits(self, value: Optional[pulumi.Input[int]]):
+    def signature_bits(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "signature_bits", value)
     @property
     @pulumi.getter(name="streetAddress")
-    def street_address(self) -> Optional[pulumi.Input[str]]:
+    def street_address(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The street address
         """
         return pulumi.get(self, "street_address")
     @street_address.setter
-    def street_address(self, value: Optional[pulumi.Input[str]]):
+    def street_address(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "street_address", value)
     @property
     @pulumi.getter
-    def ttl(self) -> Optional[pulumi.Input[str]]:
+    def ttl(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Time to live
         """
         return pulumi.get(self, "ttl")
     @ttl.setter
-    def ttl(self, value: Optional[pulumi.Input[str]]):
+    def ttl(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "ttl", value)
     @property
     @pulumi.getter(name="uriSans")
-    def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of alternative URIs
         """
         return pulumi.get(self, "uri_sans")
     @uri_sans.setter
-    def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "uri_sans", value)
 @pulumi.input_type
 class _SecretBackendRootCertState:
     def __init__(__self__, *,
-                 alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 backend: Optional[pulumi.Input[str]] = None,
-                 certificate: Optional[pulumi.Input[str]] = None,
-                 common_name: Optional[pulumi.Input[str]] = None,
-                 country: Optional[pulumi.Input[str]] = None,
-                 exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
-                 excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 format: Optional[pulumi.Input[str]] = None,
-                 ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 issuer_id: Optional[pulumi.Input[str]] = None,
-                 issuer_name: Optional[pulumi.Input[str]] = None,
-                 issuing_ca: Optional[pulumi.Input[str]] = None,
-                 key_bits: Optional[pulumi.Input[int]] = None,
-                 key_id: Optional[pulumi.Input[str]] = None,
-                 key_name: Optional[pulumi.Input[str]] = None,
-                 key_ref: Optional[pulumi.Input[str]] = None,
-                 key_type: Optional[pulumi.Input[str]] = None,
-                 locality: Optional[pulumi.Input[str]] = None,
-                 managed_key_id: Optional[pulumi.Input[str]] = None,
-                 managed_key_name: Optional[pulumi.Input[str]] = None,
-                 max_path_length: Optional[pulumi.Input[int]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
-                 not_after: Optional[pulumi.Input[str]] = None,
-                 organization: Optional[pulumi.Input[str]] = None,
-                 other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 ou: Optional[pulumi.Input[str]] = None,
-                 permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 postal_code: Optional[pulumi.Input[str]] = None,
-                 private_key_format: Optional[pulumi.Input[str]] = None,
-                 province: Optional[pulumi.Input[str]] = None,
-                 serial_number: Optional[pulumi.Input[str]] = None,
-                 signature_bits: Optional[pulumi.Input[int]] = None,
-                 street_address: Optional[pulumi.Input[str]] = None,
-                 ttl: Optional[pulumi.Input[str]] = None,
-                 type: Optional[pulumi.Input[str]] = None,
-                 uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+                 alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[builtins.str]] = None,
+                 certificate: Optional[pulumi.Input[builtins.str]] = None,
+                 common_name: Optional[pulumi.Input[builtins.str]] = None,
+                 country: Optional[pulumi.Input[builtins.str]] = None,
+                 exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
+                 excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 format: Optional[pulumi.Input[builtins.str]] = None,
+                 ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 issuer_id: Optional[pulumi.Input[builtins.str]] = None,
+                 issuer_name: Optional[pulumi.Input[builtins.str]] = None,
+                 issuing_ca: Optional[pulumi.Input[builtins.str]] = None,
+                 key_bits: Optional[pulumi.Input[builtins.int]] = None,
+                 key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 key_name: Optional[pulumi.Input[builtins.str]] = None,
+                 key_ref: Optional[pulumi.Input[builtins.str]] = None,
+                 key_type: Optional[pulumi.Input[builtins.str]] = None,
+                 locality: Optional[pulumi.Input[builtins.str]] = None,
+                 managed_key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 managed_key_name: Optional[pulumi.Input[builtins.str]] = None,
+                 max_path_length: Optional[pulumi.Input[builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
+                 not_after: Optional[pulumi.Input[builtins.str]] = None,
+                 organization: Optional[pulumi.Input[builtins.str]] = None,
+                 other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 ou: Optional[pulumi.Input[builtins.str]] = None,
+                 permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 postal_code: Optional[pulumi.Input[builtins.str]] = None,
+                 private_key_format: Optional[pulumi.Input[builtins.str]] = None,
+                 province: Optional[pulumi.Input[builtins.str]] = None,
+                 serial_number: Optional[pulumi.Input[builtins.str]] = None,
+                 signature_bits: Optional[pulumi.Input[builtins.int]] = None,
+                 street_address: Optional[pulumi.Input[builtins.str]] = None,
+                 ttl: Optional[pulumi.Input[builtins.str]] = None,
+                 type: Optional[pulumi.Input[builtins.str]] = None,
+                 uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None):
         """
         Input properties used for looking up and filtering SecretBackendRootCert resources.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] alt_names: List of alternative names
-        :param pulumi.Input[str] backend: The PKI secret backend the resource belongs to.
-        :param pulumi.Input[str] certificate: The certificate.
-        :param pulumi.Input[str] common_name: CN of intermediate to create
-        :param pulumi.Input[str] country: The country
-        :param pulumi.Input[bool] exclude_cn_from_sans: Flag to exclude CN from SANs
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[str] format: The format of data
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] ip_sans: List of alternative IPs
-        :param pulumi.Input[str] issuer_id: The ID of the generated issuer.
-        :param pulumi.Input[str] issuer_name: Provides a name to the specified issuer. The name must be unique
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] alt_names: List of alternative names
+        :param pulumi.Input[builtins.str] backend: The PKI secret backend the resource belongs to.
+        :param pulumi.Input[builtins.str] certificate: The certificate.
+        :param pulumi.Input[builtins.str] common_name: CN of intermediate to create
+        :param pulumi.Input[builtins.str] country: The country
+        :param pulumi.Input[builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[builtins.str] format: The format of data
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ip_sans: List of alternative IPs
+        :param pulumi.Input[builtins.str] issuer_id: The ID of the generated issuer.
+        :param pulumi.Input[builtins.str] issuer_name: Provides a name to the specified issuer. The name must be unique
                across all issuers and not be the reserved value `default`
-        :param pulumi.Input[str] issuing_ca: The issuing CA certificate.
-        :param pulumi.Input[int] key_bits: The number of bits to use
-        :param pulumi.Input[str] key_id: The ID of the generated key.
-        :param pulumi.Input[str] key_name: When a new key is created with this request, optionally specifies
+        :param pulumi.Input[builtins.str] issuing_ca: The issuing CA certificate.
+        :param pulumi.Input[builtins.int] key_bits: The number of bits to use
+        :param pulumi.Input[builtins.str] key_id: The ID of the generated key.
+        :param pulumi.Input[builtins.str] key_name: When a new key is created with this request, optionally specifies
                the name for this. The global ref `default` may not be used as a name.
-        :param pulumi.Input[str] key_ref: Specifies the key (either default, by name, or by identifier) to use
+        :param pulumi.Input[builtins.str] key_ref: Specifies the key (either default, by name, or by identifier) to use
                for generating this request. Only suitable for `type=existing` requests.
-        :param pulumi.Input[str] key_type: The desired key type
-        :param pulumi.Input[str] locality: The locality
-        :param pulumi.Input[str] managed_key_id: The ID of the previously configured managed key. This field is
+        :param pulumi.Input[builtins.str] key_type: The desired key type
+        :param pulumi.Input[builtins.str] locality: The locality
+        :param pulumi.Input[builtins.str] managed_key_id: The ID of the previously configured managed key. This field is
                required if `type` is `kms` and it conflicts with `managed_key_name`
-        :param pulumi.Input[str] managed_key_name: The name of the previously configured managed key. This field is
+        :param pulumi.Input[builtins.str] managed_key_name: The name of the previously configured managed key. This field is
                required if `type` is `kms`  and it conflicts with `managed_key_id`
-        :param pulumi.Input[int] max_path_length: The maximum path length to encode in the generated certificate
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] max_path_length: The maximum path length to encode in the generated certificate
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
-        :param pulumi.Input[str] organization: The organization
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] other_sans: List of other SANs
-        :param pulumi.Input[str] ou: The organization unit
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[str] postal_code: The postal code
-        :param pulumi.Input[str] private_key_format: The private key format
-        :param pulumi.Input[str] province: The province
-        :param pulumi.Input[str] serial_number: The certificate's serial number, hex formatted.
-        :param pulumi.Input[int] signature_bits: The number of bits to use in the signature algorithm
-        :param pulumi.Input[str] street_address: The street address
-        :param pulumi.Input[str] ttl: Time to live
-        :param pulumi.Input[str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
+        :param pulumi.Input[builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
+        :param pulumi.Input[builtins.str] organization: The organization
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] other_sans: List of other SANs
+        :param pulumi.Input[builtins.str] ou: The organization unit
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[builtins.str] postal_code: The postal code
+        :param pulumi.Input[builtins.str] private_key_format: The private key format
+        :param pulumi.Input[builtins.str] province: The province
+        :param pulumi.Input[builtins.str] serial_number: The certificate's serial number, hex formatted.
+        :param pulumi.Input[builtins.int] signature_bits: The number of bits to use in the signature algorithm
+        :param pulumi.Input[builtins.str] street_address: The street address
+        :param pulumi.Input[builtins.str] ttl: Time to live
+        :param pulumi.Input[builtins.str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
                or \\"kms\\"
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] uri_sans: List of alternative URIs
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] uri_sans: List of alternative URIs
         """
         if alt_names is not None:
             pulumi.set(__self__, "alt_names", alt_names)
@@ -817,163 +818,163 @@ class _SecretBackendRootCertState:
     @property
     @pulumi.getter(name="altNames")
-    def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of alternative names
         """
         return pulumi.get(self, "alt_names")
     @alt_names.setter
-    def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "alt_names", value)
     @property
     @pulumi.getter
-    def backend(self) -> Optional[pulumi.Input[str]]:
+    def backend(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The PKI secret backend the resource belongs to.
         """
         return pulumi.get(self, "backend")
     @backend.setter
-    def backend(self, value: Optional[pulumi.Input[str]]):
+    def backend(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "backend", value)
     @property
     @pulumi.getter
-    def certificate(self) -> Optional[pulumi.Input[str]]:
+    def certificate(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The certificate.
         """
         return pulumi.get(self, "certificate")
     @certificate.setter
-    def certificate(self, value: Optional[pulumi.Input[str]]):
+    def certificate(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "certificate", value)
     @property
     @pulumi.getter(name="commonName")
-    def common_name(self) -> Optional[pulumi.Input[str]]:
+    def common_name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         CN of intermediate to create
         """
         return pulumi.get(self, "common_name")
     @common_name.setter
-    def common_name(self, value: Optional[pulumi.Input[str]]):
+    def common_name(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "common_name", value)
     @property
     @pulumi.getter
-    def country(self) -> Optional[pulumi.Input[str]]:
+    def country(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The country
         """
         return pulumi.get(self, "country")
     @country.setter
-    def country(self, value: Optional[pulumi.Input[str]]):
+    def country(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "country", value)
     @property
     @pulumi.getter(name="excludeCnFromSans")
-    def exclude_cn_from_sans(self) -> Optional[pulumi.Input[bool]]:
+    def exclude_cn_from_sans(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Flag to exclude CN from SANs
         """
         return pulumi.get(self, "exclude_cn_from_sans")
     @exclude_cn_from_sans.setter
-    def exclude_cn_from_sans(self, value: Optional[pulumi.Input[bool]]):
+    def exclude_cn_from_sans(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "exclude_cn_from_sans", value)
     @property
     @pulumi.getter(name="excludedDnsDomains")
-    def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "excluded_dns_domains")
     @excluded_dns_domains.setter
-    def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "excluded_dns_domains", value)
     @property
     @pulumi.getter(name="excludedEmailAddresses")
-    def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "excluded_email_addresses")
     @excluded_email_addresses.setter
-    def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "excluded_email_addresses", value)
     @property
     @pulumi.getter(name="excludedIpRanges")
-    def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "excluded_ip_ranges")
     @excluded_ip_ranges.setter
-    def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "excluded_ip_ranges", value)
     @property
     @pulumi.getter(name="excludedUriDomains")
-    def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "excluded_uri_domains")
     @excluded_uri_domains.setter
-    def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "excluded_uri_domains", value)
     @property
     @pulumi.getter
-    def format(self) -> Optional[pulumi.Input[str]]:
+    def format(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The format of data
         """
         return pulumi.get(self, "format")
     @format.setter
-    def format(self, value: Optional[pulumi.Input[str]]):
+    def format(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "format", value)
     @property
     @pulumi.getter(name="ipSans")
-    def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of alternative IPs
         """
         return pulumi.get(self, "ip_sans")
     @ip_sans.setter
-    def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "ip_sans", value)
     @property
     @pulumi.getter(name="issuerId")
-    def issuer_id(self) -> Optional[pulumi.Input[str]]:
+    def issuer_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The ID of the generated issuer.
         """
         return pulumi.get(self, "issuer_id")
     @issuer_id.setter
-    def issuer_id(self, value: Optional[pulumi.Input[str]]):
+    def issuer_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "issuer_id", value)
     @property
     @pulumi.getter(name="issuerName")
-    def issuer_name(self) -> Optional[pulumi.Input[str]]:
+    def issuer_name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Provides a name to the specified issuer. The name must be unique
         across all issuers and not be the reserved value `default`
@@ -981,48 +982,48 @@ class _SecretBackendRootCertState:
         return pulumi.get(self, "issuer_name")
     @issuer_name.setter
-    def issuer_name(self, value: Optional[pulumi.Input[str]]):
+    def issuer_name(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "issuer_name", value)
     @property
     @pulumi.getter(name="issuingCa")
-    def issuing_ca(self) -> Optional[pulumi.Input[str]]:
+    def issuing_ca(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The issuing CA certificate.
         """
         return pulumi.get(self, "issuing_ca")
     @issuing_ca.setter
-    def issuing_ca(self, value: Optional[pulumi.Input[str]]):
+    def issuing_ca(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "issuing_ca", value)
     @property
     @pulumi.getter(name="keyBits")
-    def key_bits(self) -> Optional[pulumi.Input[int]]:
+    def key_bits(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The number of bits to use
         """
         return pulumi.get(self, "key_bits")
     @key_bits.setter
-    def key_bits(self, value: Optional[pulumi.Input[int]]):
+    def key_bits(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "key_bits", value)
     @property
     @pulumi.getter(name="keyId")
-    def key_id(self) -> Optional[pulumi.Input[str]]:
+    def key_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The ID of the generated key.
         """
         return pulumi.get(self, "key_id")
     @key_id.setter
-    def key_id(self, value: Optional[pulumi.Input[str]]):
+    def key_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "key_id", value)
     @property
     @pulumi.getter(name="keyName")
-    def key_name(self) -> Optional[pulumi.Input[str]]:
+    def key_name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         When a new key is created with this request, optionally specifies
         the name for this. The global ref `default` may not be used as a name.
@@ -1030,12 +1031,12 @@ class _SecretBackendRootCertState:
         return pulumi.get(self, "key_name")
     @key_name.setter
-    def key_name(self, value: Optional[pulumi.Input[str]]):
+    def key_name(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "key_name", value)
     @property
     @pulumi.getter(name="keyRef")
-    def key_ref(self) -> Optional[pulumi.Input[str]]:
+    def key_ref(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Specifies the key (either default, by name, or by identifier) to use
         for generating this request. Only suitable for `type=existing` requests.
@@ -1043,36 +1044,36 @@ class _SecretBackendRootCertState:
         return pulumi.get(self, "key_ref")
     @key_ref.setter
-    def key_ref(self, value: Optional[pulumi.Input[str]]):
+    def key_ref(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "key_ref", value)
     @property
     @pulumi.getter(name="keyType")
-    def key_type(self) -> Optional[pulumi.Input[str]]:
+    def key_type(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The desired key type
         """
         return pulumi.get(self, "key_type")
     @key_type.setter
-    def key_type(self, value: Optional[pulumi.Input[str]]):
+    def key_type(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "key_type", value)
     @property
     @pulumi.getter
-    def locality(self) -> Optional[pulumi.Input[str]]:
+    def locality(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The locality
         """
         return pulumi.get(self, "locality")
     @locality.setter
-    def locality(self, value: Optional[pulumi.Input[str]]):
+    def locality(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "locality", value)
     @property
     @pulumi.getter(name="managedKeyId")
-    def managed_key_id(self) -> Optional[pulumi.Input[str]]:
+    def managed_key_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The ID of the previously configured managed key. This field is
         required if `type` is `kms` and it conflicts with `managed_key_name`
@@ -1080,12 +1081,12 @@ class _SecretBackendRootCertState:
         return pulumi.get(self, "managed_key_id")
     @managed_key_id.setter
-    def managed_key_id(self, value: Optional[pulumi.Input[str]]):
+    def managed_key_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "managed_key_id", value)
     @property
     @pulumi.getter(name="managedKeyName")
-    def managed_key_name(self) -> Optional[pulumi.Input[str]]:
+    def managed_key_name(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The name of the previously configured managed key. This field is
         required if `type` is `kms`  and it conflicts with `managed_key_id`
@@ -1093,24 +1094,24 @@ class _SecretBackendRootCertState:
         return pulumi.get(self, "managed_key_name")
     @managed_key_name.setter
-    def managed_key_name(self, value: Optional[pulumi.Input[str]]):
+    def managed_key_name(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "managed_key_name", value)
     @property
     @pulumi.getter(name="maxPathLength")
-    def max_path_length(self) -> Optional[pulumi.Input[int]]:
+    def max_path_length(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The maximum path length to encode in the generated certificate
         """
         return pulumi.get(self, "max_path_length")
     @max_path_length.setter
-    def max_path_length(self, value: Optional[pulumi.Input[int]]):
+    def max_path_length(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "max_path_length", value)
     @property
     @pulumi.getter
-    def namespace(self) -> Optional[pulumi.Input[str]]:
+    def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -1120,192 +1121,192 @@ class _SecretBackendRootCertState:
         return pulumi.get(self, "namespace")
     @namespace.setter
-    def namespace(self, value: Optional[pulumi.Input[str]]):
+    def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "namespace", value)
     @property
     @pulumi.getter(name="notAfter")
-    def not_after(self) -> Optional[pulumi.Input[str]]:
+    def not_after(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
         """
         return pulumi.get(self, "not_after")
     @not_after.setter
-    def not_after(self, value: Optional[pulumi.Input[str]]):
+    def not_after(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "not_after", value)
     @property
     @pulumi.getter
-    def organization(self) -> Optional[pulumi.Input[str]]:
+    def organization(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The organization
         """
         return pulumi.get(self, "organization")
     @organization.setter
-    def organization(self, value: Optional[pulumi.Input[str]]):
+    def organization(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "organization", value)
     @property
     @pulumi.getter(name="otherSans")
-    def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of other SANs
         """
         return pulumi.get(self, "other_sans")
     @other_sans.setter
-    def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "other_sans", value)
     @property
     @pulumi.getter
-    def ou(self) -> Optional[pulumi.Input[str]]:
+    def ou(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The organization unit
         """
         return pulumi.get(self, "ou")
     @ou.setter
-    def ou(self, value: Optional[pulumi.Input[str]]):
+    def ou(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "ou", value)
     @property
     @pulumi.getter(name="permittedDnsDomains")
-    def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of domains for which certificates are allowed to be issued
         """
         return pulumi.get(self, "permitted_dns_domains")
     @permitted_dns_domains.setter
-    def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "permitted_dns_domains", value)
     @property
     @pulumi.getter(name="permittedEmailAddresses")
-    def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "permitted_email_addresses")
     @permitted_email_addresses.setter
-    def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "permitted_email_addresses", value)
     @property
     @pulumi.getter(name="permittedIpRanges")
-    def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "permitted_ip_ranges")
     @permitted_ip_ranges.setter
-    def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "permitted_ip_ranges", value)
     @property
     @pulumi.getter(name="permittedUriDomains")
-    def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
         return pulumi.get(self, "permitted_uri_domains")
     @permitted_uri_domains.setter
-    def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "permitted_uri_domains", value)
     @property
     @pulumi.getter(name="postalCode")
-    def postal_code(self) -> Optional[pulumi.Input[str]]:
+    def postal_code(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The postal code
         """
         return pulumi.get(self, "postal_code")
     @postal_code.setter
-    def postal_code(self, value: Optional[pulumi.Input[str]]):
+    def postal_code(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "postal_code", value)
     @property
     @pulumi.getter(name="privateKeyFormat")
-    def private_key_format(self) -> Optional[pulumi.Input[str]]:
+    def private_key_format(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The private key format
         """
         return pulumi.get(self, "private_key_format")
     @private_key_format.setter
-    def private_key_format(self, value: Optional[pulumi.Input[str]]):
+    def private_key_format(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "private_key_format", value)
     @property
     @pulumi.getter
-    def province(self) -> Optional[pulumi.Input[str]]:
+    def province(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The province
         """
         return pulumi.get(self, "province")
     @province.setter
-    def province(self, value: Optional[pulumi.Input[str]]):
+    def province(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "province", value)
     @property
     @pulumi.getter(name="serialNumber")
-    def serial_number(self) -> Optional[pulumi.Input[str]]:
+    def serial_number(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The certificate's serial number, hex formatted.
         """
         return pulumi.get(self, "serial_number")
     @serial_number.setter
-    def serial_number(self, value: Optional[pulumi.Input[str]]):
+    def serial_number(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "serial_number", value)
     @property
     @pulumi.getter(name="signatureBits")
-    def signature_bits(self) -> Optional[pulumi.Input[int]]:
+    def signature_bits(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The number of bits to use in the signature algorithm
         """
         return pulumi.get(self, "signature_bits")
     @signature_bits.setter
-    def signature_bits(self, value: Optional[pulumi.Input[int]]):
+    def signature_bits(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "signature_bits", value)
     @property
     @pulumi.getter(name="streetAddress")
-    def street_address(self) -> Optional[pulumi.Input[str]]:
+    def street_address(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The street address
         """
         return pulumi.get(self, "street_address")
     @street_address.setter
-    def street_address(self, value: Optional[pulumi.Input[str]]):
+    def street_address(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "street_address", value)
     @property
     @pulumi.getter
-    def ttl(self) -> Optional[pulumi.Input[str]]:
+    def ttl(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Time to live
         """
         return pulumi.get(self, "ttl")
     @ttl.setter
-    def ttl(self, value: Optional[pulumi.Input[str]]):
+    def ttl(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "ttl", value)
     @property
     @pulumi.getter
-    def type(self) -> Optional[pulumi.Input[str]]:
+    def type(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
         or \\"kms\\"
@@ -1313,19 +1314,19 @@ class _SecretBackendRootCertState:
         return pulumi.get(self, "type")
     @type.setter
-    def type(self, value: Optional[pulumi.Input[str]]):
+    def type(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "type", value)
     @property
     @pulumi.getter(name="uriSans")
-    def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         List of alternative URIs
         """
         return pulumi.get(self, "uri_sans")
     @uri_sans.setter
-    def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "uri_sans", value)
@@ -1334,43 +1335,43 @@ class SecretBackendRootCert(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 backend: Optional[pulumi.Input[str]] = None,
-                 common_name: Optional[pulumi.Input[str]] = None,
-                 country: Optional[pulumi.Input[str]] = None,
-                 exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
-                 excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 format: Optional[pulumi.Input[str]] = None,
-                 ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 issuer_name: Optional[pulumi.Input[str]] = None,
-                 key_bits: Optional[pulumi.Input[int]] = None,
-                 key_name: Optional[pulumi.Input[str]] = None,
-                 key_ref: Optional[pulumi.Input[str]] = None,
-                 key_type: Optional[pulumi.Input[str]] = None,
-                 locality: Optional[pulumi.Input[str]] = None,
-                 managed_key_id: Optional[pulumi.Input[str]] = None,
-                 managed_key_name: Optional[pulumi.Input[str]] = None,
-                 max_path_length: Optional[pulumi.Input[int]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
-                 not_after: Optional[pulumi.Input[str]] = None,
-                 organization: Optional[pulumi.Input[str]] = None,
-                 other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 ou: Optional[pulumi.Input[str]] = None,
-                 permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 postal_code: Optional[pulumi.Input[str]] = None,
-                 private_key_format: Optional[pulumi.Input[str]] = None,
-                 province: Optional[pulumi.Input[str]] = None,
-                 signature_bits: Optional[pulumi.Input[int]] = None,
-                 street_address: Optional[pulumi.Input[str]] = None,
-                 ttl: Optional[pulumi.Input[str]] = None,
-                 type: Optional[pulumi.Input[str]] = None,
-                 uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[builtins.str]] = None,
+                 common_name: Optional[pulumi.Input[builtins.str]] = None,
+                 country: Optional[pulumi.Input[builtins.str]] = None,
+                 exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
+                 excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 format: Optional[pulumi.Input[builtins.str]] = None,
+                 ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 issuer_name: Optional[pulumi.Input[builtins.str]] = None,
+                 key_bits: Optional[pulumi.Input[builtins.int]] = None,
+                 key_name: Optional[pulumi.Input[builtins.str]] = None,
+                 key_ref: Optional[pulumi.Input[builtins.str]] = None,
+                 key_type: Optional[pulumi.Input[builtins.str]] = None,
+                 locality: Optional[pulumi.Input[builtins.str]] = None,
+                 managed_key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 managed_key_name: Optional[pulumi.Input[builtins.str]] = None,
+                 max_path_length: Optional[pulumi.Input[builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
+                 not_after: Optional[pulumi.Input[builtins.str]] = None,
+                 organization: Optional[pulumi.Input[builtins.str]] = None,
+                 other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 ou: Optional[pulumi.Input[builtins.str]] = None,
+                 permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 postal_code: Optional[pulumi.Input[builtins.str]] = None,
+                 private_key_format: Optional[pulumi.Input[builtins.str]] = None,
+                 province: Optional[pulumi.Input[builtins.str]] = None,
+                 signature_bits: Optional[pulumi.Input[builtins.int]] = None,
+                 street_address: Optional[pulumi.Input[builtins.str]] = None,
+                 ttl: Optional[pulumi.Input[builtins.str]] = None,
+                 type: Optional[pulumi.Input[builtins.str]] = None,
+                 uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
                  __props__=None):
         """
         ## Example Usage
@@ -1396,52 +1397,52 @@ class SecretBackendRootCert(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] alt_names: List of alternative names
-        :param pulumi.Input[str] backend: The PKI secret backend the resource belongs to.
-        :param pulumi.Input[str] common_name: CN of intermediate to create
-        :param pulumi.Input[str] country: The country
-        :param pulumi.Input[bool] exclude_cn_from_sans: Flag to exclude CN from SANs
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[str] format: The format of data
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] ip_sans: List of alternative IPs
-        :param pulumi.Input[str] issuer_name: Provides a name to the specified issuer. The name must be unique
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] alt_names: List of alternative names
+        :param pulumi.Input[builtins.str] backend: The PKI secret backend the resource belongs to.
+        :param pulumi.Input[builtins.str] common_name: CN of intermediate to create
+        :param pulumi.Input[builtins.str] country: The country
+        :param pulumi.Input[builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[builtins.str] format: The format of data
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ip_sans: List of alternative IPs
+        :param pulumi.Input[builtins.str] issuer_name: Provides a name to the specified issuer. The name must be unique
                across all issuers and not be the reserved value `default`
-        :param pulumi.Input[int] key_bits: The number of bits to use
-        :param pulumi.Input[str] key_name: When a new key is created with this request, optionally specifies
+        :param pulumi.Input[builtins.int] key_bits: The number of bits to use
+        :param pulumi.Input[builtins.str] key_name: When a new key is created with this request, optionally specifies
                the name for this. The global ref `default` may not be used as a name.
-        :param pulumi.Input[str] key_ref: Specifies the key (either default, by name, or by identifier) to use
+        :param pulumi.Input[builtins.str] key_ref: Specifies the key (either default, by name, or by identifier) to use
                for generating this request. Only suitable for `type=existing` requests.
-        :param pulumi.Input[str] key_type: The desired key type
-        :param pulumi.Input[str] locality: The locality
-        :param pulumi.Input[str] managed_key_id: The ID of the previously configured managed key. This field is
+        :param pulumi.Input[builtins.str] key_type: The desired key type
+        :param pulumi.Input[builtins.str] locality: The locality
+        :param pulumi.Input[builtins.str] managed_key_id: The ID of the previously configured managed key. This field is
                required if `type` is `kms` and it conflicts with `managed_key_name`
-        :param pulumi.Input[str] managed_key_name: The name of the previously configured managed key. This field is
+        :param pulumi.Input[builtins.str] managed_key_name: The name of the previously configured managed key. This field is
                required if `type` is `kms`  and it conflicts with `managed_key_id`
-        :param pulumi.Input[int] max_path_length: The maximum path length to encode in the generated certificate
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] max_path_length: The maximum path length to encode in the generated certificate
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
-        :param pulumi.Input[str] organization: The organization
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] other_sans: List of other SANs
-        :param pulumi.Input[str] ou: The organization unit
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[str] postal_code: The postal code
-        :param pulumi.Input[str] private_key_format: The private key format
-        :param pulumi.Input[str] province: The province
-        :param pulumi.Input[int] signature_bits: The number of bits to use in the signature algorithm
-        :param pulumi.Input[str] street_address: The street address
-        :param pulumi.Input[str] ttl: Time to live
-        :param pulumi.Input[str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
+        :param pulumi.Input[builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
+        :param pulumi.Input[builtins.str] organization: The organization
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] other_sans: List of other SANs
+        :param pulumi.Input[builtins.str] ou: The organization unit
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[builtins.str] postal_code: The postal code
+        :param pulumi.Input[builtins.str] private_key_format: The private key format
+        :param pulumi.Input[builtins.str] province: The province
+        :param pulumi.Input[builtins.int] signature_bits: The number of bits to use in the signature algorithm
+        :param pulumi.Input[builtins.str] street_address: The street address
+        :param pulumi.Input[builtins.str] ttl: Time to live
+        :param pulumi.Input[builtins.str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
                or \\"kms\\"
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] uri_sans: List of alternative URIs
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] uri_sans: List of alternative URIs
         """
         ...
     @overload
@@ -1486,43 +1487,43 @@ class SecretBackendRootCert(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 backend: Optional[pulumi.Input[str]] = None,
-                 common_name: Optional[pulumi.Input[str]] = None,
-                 country: Optional[pulumi.Input[str]] = None,
-                 exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
-                 excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 format: Optional[pulumi.Input[str]] = None,
-                 ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 issuer_name: Optional[pulumi.Input[str]] = None,
-                 key_bits: Optional[pulumi.Input[int]] = None,
-                 key_name: Optional[pulumi.Input[str]] = None,
-                 key_ref: Optional[pulumi.Input[str]] = None,
-                 key_type: Optional[pulumi.Input[str]] = None,
-                 locality: Optional[pulumi.Input[str]] = None,
-                 managed_key_id: Optional[pulumi.Input[str]] = None,
-                 managed_key_name: Optional[pulumi.Input[str]] = None,
-                 max_path_length: Optional[pulumi.Input[int]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
-                 not_after: Optional[pulumi.Input[str]] = None,
-                 organization: Optional[pulumi.Input[str]] = None,
-                 other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 ou: Optional[pulumi.Input[str]] = None,
-                 permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 postal_code: Optional[pulumi.Input[str]] = None,
-                 private_key_format: Optional[pulumi.Input[str]] = None,
-                 province: Optional[pulumi.Input[str]] = None,
-                 signature_bits: Optional[pulumi.Input[int]] = None,
-                 street_address: Optional[pulumi.Input[str]] = None,
-                 ttl: Optional[pulumi.Input[str]] = None,
-                 type: Optional[pulumi.Input[str]] = None,
-                 uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[builtins.str]] = None,
+                 common_name: Optional[pulumi.Input[builtins.str]] = None,
+                 country: Optional[pulumi.Input[builtins.str]] = None,
+                 exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
+                 excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 format: Optional[pulumi.Input[builtins.str]] = None,
+                 ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 issuer_name: Optional[pulumi.Input[builtins.str]] = None,
+                 key_bits: Optional[pulumi.Input[builtins.int]] = None,
+                 key_name: Optional[pulumi.Input[builtins.str]] = None,
+                 key_ref: Optional[pulumi.Input[builtins.str]] = None,
+                 key_type: Optional[pulumi.Input[builtins.str]] = None,
+                 locality: Optional[pulumi.Input[builtins.str]] = None,
+                 managed_key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 managed_key_name: Optional[pulumi.Input[builtins.str]] = None,
+                 max_path_length: Optional[pulumi.Input[builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
+                 not_after: Optional[pulumi.Input[builtins.str]] = None,
+                 organization: Optional[pulumi.Input[builtins.str]] = None,
+                 other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 ou: Optional[pulumi.Input[builtins.str]] = None,
+                 permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 postal_code: Optional[pulumi.Input[builtins.str]] = None,
+                 private_key_format: Optional[pulumi.Input[builtins.str]] = None,
+                 province: Optional[pulumi.Input[builtins.str]] = None,
+                 signature_bits: Optional[pulumi.Input[builtins.int]] = None,
+                 street_address: Optional[pulumi.Input[builtins.str]] = None,
+                 ttl: Optional[pulumi.Input[builtins.str]] = None,
+                 type: Optional[pulumi.Input[builtins.str]] = None,
+                 uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -1590,48 +1591,48 @@ class SecretBackendRootCert(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            backend: Optional[pulumi.Input[str]] = None,
-            certificate: Optional[pulumi.Input[str]] = None,
-            common_name: Optional[pulumi.Input[str]] = None,
-            country: Optional[pulumi.Input[str]] = None,
-            exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
-            excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            format: Optional[pulumi.Input[str]] = None,
-            ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            issuer_id: Optional[pulumi.Input[str]] = None,
-            issuer_name: Optional[pulumi.Input[str]] = None,
-            issuing_ca: Optional[pulumi.Input[str]] = None,
-            key_bits: Optional[pulumi.Input[int]] = None,
-            key_id: Optional[pulumi.Input[str]] = None,
-            key_name: Optional[pulumi.Input[str]] = None,
-            key_ref: Optional[pulumi.Input[str]] = None,
-            key_type: Optional[pulumi.Input[str]] = None,
-            locality: Optional[pulumi.Input[str]] = None,
-            managed_key_id: Optional[pulumi.Input[str]] = None,
-            managed_key_name: Optional[pulumi.Input[str]] = None,
-            max_path_length: Optional[pulumi.Input[int]] = None,
-            namespace: Optional[pulumi.Input[str]] = None,
-            not_after: Optional[pulumi.Input[str]] = None,
-            organization: Optional[pulumi.Input[str]] = None,
-            other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            ou: Optional[pulumi.Input[str]] = None,
-            permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            postal_code: Optional[pulumi.Input[str]] = None,
-            private_key_format: Optional[pulumi.Input[str]] = None,
-            province: Optional[pulumi.Input[str]] = None,
-            serial_number: Optional[pulumi.Input[str]] = None,
-            signature_bits: Optional[pulumi.Input[int]] = None,
-            street_address: Optional[pulumi.Input[str]] = None,
-            ttl: Optional[pulumi.Input[str]] = None,
-            type: Optional[pulumi.Input[str]] = None,
-            uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'SecretBackendRootCert':
+            alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            backend: Optional[pulumi.Input[builtins.str]] = None,
+            certificate: Optional[pulumi.Input[builtins.str]] = None,
+            common_name: Optional[pulumi.Input[builtins.str]] = None,
+            country: Optional[pulumi.Input[builtins.str]] = None,
+            exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
+            excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            format: Optional[pulumi.Input[builtins.str]] = None,
+            ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            issuer_id: Optional[pulumi.Input[builtins.str]] = None,
+            issuer_name: Optional[pulumi.Input[builtins.str]] = None,
+            issuing_ca: Optional[pulumi.Input[builtins.str]] = None,
+            key_bits: Optional[pulumi.Input[builtins.int]] = None,
+            key_id: Optional[pulumi.Input[builtins.str]] = None,
+            key_name: Optional[pulumi.Input[builtins.str]] = None,
+            key_ref: Optional[pulumi.Input[builtins.str]] = None,
+            key_type: Optional[pulumi.Input[builtins.str]] = None,
+            locality: Optional[pulumi.Input[builtins.str]] = None,
+            managed_key_id: Optional[pulumi.Input[builtins.str]] = None,
+            managed_key_name: Optional[pulumi.Input[builtins.str]] = None,
+            max_path_length: Optional[pulumi.Input[builtins.int]] = None,
+            namespace: Optional[pulumi.Input[builtins.str]] = None,
+            not_after: Optional[pulumi.Input[builtins.str]] = None,
+            organization: Optional[pulumi.Input[builtins.str]] = None,
+            other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            ou: Optional[pulumi.Input[builtins.str]] = None,
+            permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            postal_code: Optional[pulumi.Input[builtins.str]] = None,
+            private_key_format: Optional[pulumi.Input[builtins.str]] = None,
+            province: Optional[pulumi.Input[builtins.str]] = None,
+            serial_number: Optional[pulumi.Input[builtins.str]] = None,
+            signature_bits: Optional[pulumi.Input[builtins.int]] = None,
+            street_address: Optional[pulumi.Input[builtins.str]] = None,
+            ttl: Optional[pulumi.Input[builtins.str]] = None,
+            type: Optional[pulumi.Input[builtins.str]] = None,
+            uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None) -> 'SecretBackendRootCert':
         """
         Get an existing SecretBackendRootCert resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -1639,57 +1640,57 @@ class SecretBackendRootCert(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] alt_names: List of alternative names
-        :param pulumi.Input[str] backend: The PKI secret backend the resource belongs to.
-        :param pulumi.Input[str] certificate: The certificate.
-        :param pulumi.Input[str] common_name: CN of intermediate to create
-        :param pulumi.Input[str] country: The country
-        :param pulumi.Input[bool] exclude_cn_from_sans: Flag to exclude CN from SANs
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[str] format: The format of data
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] ip_sans: List of alternative IPs
-        :param pulumi.Input[str] issuer_id: The ID of the generated issuer.
-        :param pulumi.Input[str] issuer_name: Provides a name to the specified issuer. The name must be unique
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] alt_names: List of alternative names
+        :param pulumi.Input[builtins.str] backend: The PKI secret backend the resource belongs to.
+        :param pulumi.Input[builtins.str] certificate: The certificate.
+        :param pulumi.Input[builtins.str] common_name: CN of intermediate to create
+        :param pulumi.Input[builtins.str] country: The country
+        :param pulumi.Input[builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[builtins.str] format: The format of data
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ip_sans: List of alternative IPs
+        :param pulumi.Input[builtins.str] issuer_id: The ID of the generated issuer.
+        :param pulumi.Input[builtins.str] issuer_name: Provides a name to the specified issuer. The name must be unique
                across all issuers and not be the reserved value `default`
-        :param pulumi.Input[str] issuing_ca: The issuing CA certificate.
-        :param pulumi.Input[int] key_bits: The number of bits to use
-        :param pulumi.Input[str] key_id: The ID of the generated key.
-        :param pulumi.Input[str] key_name: When a new key is created with this request, optionally specifies
+        :param pulumi.Input[builtins.str] issuing_ca: The issuing CA certificate.
+        :param pulumi.Input[builtins.int] key_bits: The number of bits to use
+        :param pulumi.Input[builtins.str] key_id: The ID of the generated key.
+        :param pulumi.Input[builtins.str] key_name: When a new key is created with this request, optionally specifies
                the name for this. The global ref `default` may not be used as a name.
-        :param pulumi.Input[str] key_ref: Specifies the key (either default, by name, or by identifier) to use
+        :param pulumi.Input[builtins.str] key_ref: Specifies the key (either default, by name, or by identifier) to use
                for generating this request. Only suitable for `type=existing` requests.
-        :param pulumi.Input[str] key_type: The desired key type
-        :param pulumi.Input[str] locality: The locality
-        :param pulumi.Input[str] managed_key_id: The ID of the previously configured managed key. This field is
+        :param pulumi.Input[builtins.str] key_type: The desired key type
+        :param pulumi.Input[builtins.str] locality: The locality
+        :param pulumi.Input[builtins.str] managed_key_id: The ID of the previously configured managed key. This field is
                required if `type` is `kms` and it conflicts with `managed_key_name`
-        :param pulumi.Input[str] managed_key_name: The name of the previously configured managed key. This field is
+        :param pulumi.Input[builtins.str] managed_key_name: The name of the previously configured managed key. This field is
                required if `type` is `kms`  and it conflicts with `managed_key_id`
-        :param pulumi.Input[int] max_path_length: The maximum path length to encode in the generated certificate
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] max_path_length: The maximum path length to encode in the generated certificate
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
-        :param pulumi.Input[str] organization: The organization
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] other_sans: List of other SANs
-        :param pulumi.Input[str] ou: The organization unit
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
-        :param pulumi.Input[str] postal_code: The postal code
-        :param pulumi.Input[str] private_key_format: The private key format
-        :param pulumi.Input[str] province: The province
-        :param pulumi.Input[str] serial_number: The certificate's serial number, hex formatted.
-        :param pulumi.Input[int] signature_bits: The number of bits to use in the signature algorithm
-        :param pulumi.Input[str] street_address: The street address
-        :param pulumi.Input[str] ttl: Time to live
-        :param pulumi.Input[str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
+        :param pulumi.Input[builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
+        :param pulumi.Input[builtins.str] organization: The organization
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] other_sans: List of other SANs
+        :param pulumi.Input[builtins.str] ou: The organization unit
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
+        :param pulumi.Input[builtins.str] postal_code: The postal code
+        :param pulumi.Input[builtins.str] private_key_format: The private key format
+        :param pulumi.Input[builtins.str] province: The province
+        :param pulumi.Input[builtins.str] serial_number: The certificate's serial number, hex formatted.
+        :param pulumi.Input[builtins.int] signature_bits: The number of bits to use in the signature algorithm
+        :param pulumi.Input[builtins.str] street_address: The street address
+        :param pulumi.Input[builtins.str] ttl: Time to live
+        :param pulumi.Input[builtins.str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
                or \\"kms\\"
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] uri_sans: List of alternative URIs
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] uri_sans: List of alternative URIs
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -1741,7 +1742,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="altNames")
-    def alt_names(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def alt_names(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of alternative names
         """
@@ -1749,7 +1750,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def backend(self) -> pulumi.Output[str]:
+    def backend(self) -> pulumi.Output[builtins.str]:
         """
         The PKI secret backend the resource belongs to.
         """
@@ -1757,7 +1758,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def certificate(self) -> pulumi.Output[str]:
+    def certificate(self) -> pulumi.Output[builtins.str]:
         """
         The certificate.
         """
@@ -1765,7 +1766,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="commonName")
-    def common_name(self) -> pulumi.Output[str]:
+    def common_name(self) -> pulumi.Output[builtins.str]:
         """
         CN of intermediate to create
         """
@@ -1773,7 +1774,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def country(self) -> pulumi.Output[Optional[str]]:
+    def country(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The country
         """
@@ -1781,7 +1782,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="excludeCnFromSans")
-    def exclude_cn_from_sans(self) -> pulumi.Output[Optional[bool]]:
+    def exclude_cn_from_sans(self) -> pulumi.Output[Optional[builtins.bool]]:
         """
         Flag to exclude CN from SANs
         """
@@ -1789,7 +1790,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="excludedDnsDomains")
-    def excluded_dns_domains(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def excluded_dns_domains(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
@@ -1797,7 +1798,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="excludedEmailAddresses")
-    def excluded_email_addresses(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def excluded_email_addresses(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
@@ -1805,7 +1806,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="excludedIpRanges")
-    def excluded_ip_ranges(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def excluded_ip_ranges(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
@@ -1813,7 +1814,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="excludedUriDomains")
-    def excluded_uri_domains(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def excluded_uri_domains(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
         """
@@ -1821,7 +1822,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def format(self) -> pulumi.Output[Optional[str]]:
+    def format(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The format of data
         """
@@ -1829,7 +1830,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="ipSans")
-    def ip_sans(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def ip_sans(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of alternative IPs
         """
@@ -1837,7 +1838,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="issuerId")
-    def issuer_id(self) -> pulumi.Output[str]:
+    def issuer_id(self) -> pulumi.Output[builtins.str]:
         """
         The ID of the generated issuer.
         """
@@ -1845,7 +1846,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="issuerName")
-    def issuer_name(self) -> pulumi.Output[str]:
+    def issuer_name(self) -> pulumi.Output[builtins.str]:
         """
         Provides a name to the specified issuer. The name must be unique
         across all issuers and not be the reserved value `default`
@@ -1854,7 +1855,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="issuingCa")
-    def issuing_ca(self) -> pulumi.Output[str]:
+    def issuing_ca(self) -> pulumi.Output[builtins.str]:
         """
         The issuing CA certificate.
         """
@@ -1862,7 +1863,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="keyBits")
-    def key_bits(self) -> pulumi.Output[Optional[int]]:
+    def key_bits(self) -> pulumi.Output[Optional[builtins.int]]:
         """
         The number of bits to use
         """
@@ -1870,7 +1871,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="keyId")
-    def key_id(self) -> pulumi.Output[str]:
+    def key_id(self) -> pulumi.Output[builtins.str]:
         """
         The ID of the generated key.
         """
@@ -1878,7 +1879,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="keyName")
-    def key_name(self) -> pulumi.Output[str]:
+    def key_name(self) -> pulumi.Output[builtins.str]:
         """
         When a new key is created with this request, optionally specifies
         the name for this. The global ref `default` may not be used as a name.
@@ -1887,7 +1888,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="keyRef")
-    def key_ref(self) -> pulumi.Output[str]:
+    def key_ref(self) -> pulumi.Output[builtins.str]:
         """
         Specifies the key (either default, by name, or by identifier) to use
         for generating this request. Only suitable for `type=existing` requests.
@@ -1896,7 +1897,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="keyType")
-    def key_type(self) -> pulumi.Output[Optional[str]]:
+    def key_type(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The desired key type
         """
@@ -1904,7 +1905,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def locality(self) -> pulumi.Output[Optional[str]]:
+    def locality(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The locality
         """
@@ -1912,7 +1913,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="managedKeyId")
-    def managed_key_id(self) -> pulumi.Output[str]:
+    def managed_key_id(self) -> pulumi.Output[builtins.str]:
         """
         The ID of the previously configured managed key. This field is
         required if `type` is `kms` and it conflicts with `managed_key_name`
@@ -1921,7 +1922,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="managedKeyName")
-    def managed_key_name(self) -> pulumi.Output[str]:
+    def managed_key_name(self) -> pulumi.Output[builtins.str]:
         """
         The name of the previously configured managed key. This field is
         required if `type` is `kms`  and it conflicts with `managed_key_id`
@@ -1930,7 +1931,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="maxPathLength")
-    def max_path_length(self) -> pulumi.Output[Optional[int]]:
+    def max_path_length(self) -> pulumi.Output[Optional[builtins.int]]:
         """
         The maximum path length to encode in the generated certificate
         """
@@ -1938,7 +1939,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def namespace(self) -> pulumi.Output[Optional[str]]:
+    def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -1949,7 +1950,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="notAfter")
-    def not_after(self) -> pulumi.Output[Optional[str]]:
+    def not_after(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
         """
@@ -1957,7 +1958,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def organization(self) -> pulumi.Output[Optional[str]]:
+    def organization(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The organization
         """
@@ -1965,7 +1966,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="otherSans")
-    def other_sans(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def other_sans(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of other SANs
         """
@@ -1973,7 +1974,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def ou(self) -> pulumi.Output[Optional[str]]:
+    def ou(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The organization unit
         """
@@ -1981,7 +1982,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="permittedDnsDomains")
-    def permitted_dns_domains(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def permitted_dns_domains(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of domains for which certificates are allowed to be issued
         """
@@ -1989,7 +1990,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="permittedEmailAddresses")
-    def permitted_email_addresses(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def permitted_email_addresses(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
@@ -1997,7 +1998,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="permittedIpRanges")
-    def permitted_ip_ranges(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def permitted_ip_ranges(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
@@ -2005,7 +2006,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="permittedUriDomains")
-    def permitted_uri_domains(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def permitted_uri_domains(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
         """
@@ -2013,7 +2014,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="postalCode")
-    def postal_code(self) -> pulumi.Output[Optional[str]]:
+    def postal_code(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The postal code
         """
@@ -2021,7 +2022,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="privateKeyFormat")
-    def private_key_format(self) -> pulumi.Output[Optional[str]]:
+    def private_key_format(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The private key format
         """
@@ -2029,7 +2030,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def province(self) -> pulumi.Output[Optional[str]]:
+    def province(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The province
         """
@@ -2037,7 +2038,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="serialNumber")
-    def serial_number(self) -> pulumi.Output[str]:
+    def serial_number(self) -> pulumi.Output[builtins.str]:
         """
         The certificate's serial number, hex formatted.
         """
@@ -2045,7 +2046,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="signatureBits")
-    def signature_bits(self) -> pulumi.Output[int]:
+    def signature_bits(self) -> pulumi.Output[builtins.int]:
         """
         The number of bits to use in the signature algorithm
         """
@@ -2053,7 +2054,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="streetAddress")
-    def street_address(self) -> pulumi.Output[Optional[str]]:
+    def street_address(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The street address
         """
@@ -2061,7 +2062,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def ttl(self) -> pulumi.Output[Optional[str]]:
+    def ttl(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         Time to live
         """
@@ -2069,7 +2070,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def type(self) -> pulumi.Output[str]:
+    def type(self) -> pulumi.Output[builtins.str]:
         """
         Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
         or \\"kms\\"
@@ -2078,7 +2079,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
     @property
     @pulumi.getter(name="uriSans")
-    def uri_sans(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def uri_sans(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
         """
         List of alternative URIs
         """

pulumi-vault 6.7.0a1743576047__py3-none-any.whl → 6.7.0a1744183682__py3-none-any.whl

pulumi-vault 6.7.0a1743576047py3-none-any.whl → 6.7.0a1744183682py3-none-any.whl