Skip to content

Commit b658082

Browse files
author
awstools
committed
docs(client-secrets-manager): Documentation updates for Secrets Manager.
1 parent 583db52 commit b658082

File tree

4 files changed

+312
-305
lines changed

4 files changed

+312
-305
lines changed

clients/client-secrets-manager/src/SecretsManager.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -859,6 +859,7 @@ export class SecretsManager extends SecretsManagerClient {
859859
* version. If the <code>AWSPENDING</code> staging label is present but not attached to the same
860860
* version as <code>AWSCURRENT</code>, then any later invocation of <code>RotateSecret</code>
861861
* assumes that a previous rotation request is still in progress and returns an error.</p>
862+
* <p>When rotation is unsuccessful, the <code>AWSPENDING</code> staging label might be attached to an empty secret version. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot_rotation.html">Troubleshoot rotation</a> in the <i>Secrets Manager User Guide</i>.</p>
862863
* <p>Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters because it might be logged. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html">Logging Secrets Manager events with CloudTrail</a>.</p>
863864
* <p>
864865
* <b>Required permissions: </b>

clients/client-secrets-manager/src/commands/RotateSecretCommand.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,7 @@ export interface RotateSecretCommandOutput extends RotateSecretResponse, __Metad
5454
* version. If the <code>AWSPENDING</code> staging label is present but not attached to the same
5555
* version as <code>AWSCURRENT</code>, then any later invocation of <code>RotateSecret</code>
5656
* assumes that a previous rotation request is still in progress and returns an error.</p>
57+
* <p>When rotation is unsuccessful, the <code>AWSPENDING</code> staging label might be attached to an empty secret version. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/troubleshoot_rotation.html">Troubleshoot rotation</a> in the <i>Secrets Manager User Guide</i>.</p>
5758
* <p>Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters because it might be logged. For more information, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieve-ct-entries.html">Logging Secrets Manager events with CloudTrail</a>.</p>
5859
* <p>
5960
* <b>Required permissions: </b>

clients/client-secrets-manager/src/models/models_0.ts

Lines changed: 28 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -561,7 +561,7 @@ export interface DeleteSecretRequest {
561561
* <p>Use this parameter with caution. This parameter causes the operation to skip the normal
562562
* recovery window before the permanent deletion that Secrets Manager would normally impose with the
563563
* <code>RecoveryWindowInDays</code> parameter. If you delete a secret with the
564-
* <code>ForceDeleteWithouRecovery</code> parameter, then you have no opportunity to recover
564+
* <code>ForceDeleteWithoutRecovery</code> parameter, then you have no opportunity to recover
565565
* the secret. You lose the secret permanently.</p>
566566
* </important>
567567
*/
@@ -607,37 +607,42 @@ export interface RotationRulesType {
607607
* <p>In <code>DescribeSecret</code> and <code>ListSecrets</code>, this value is calculated from
608608
* the rotation schedule after every successful rotation. In <code>RotateSecret</code>, you can
609609
* set the rotation schedule in <code>RotationRules</code> with <code>AutomaticallyAfterDays</code>
610-
* or <code>ScheduleExpression</code>, but not both.</p>
610+
* or <code>ScheduleExpression</code>, but not both. To set a rotation schedule in hours, use
611+
* <code>ScheduleExpression</code>.</p>
611612
*/
612613
AutomaticallyAfterDays?: number;
613614

614615
/**
615-
* <p>The length of the rotation window in hours, for example <code>3h</code> for a three hour window. Secrets Manager
616-
* rotates your secret at any time during this window. The window must not go into the next UTC
617-
* day. If you don't specify this value, the window automatically ends at the end of
618-
* the UTC day. The window begins according to the <code>ScheduleExpression</code>. For more
619-
* information, including examples, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_schedule.html">Schedule expressions
620-
* in Secrets Manager rotation</a>.</p>
616+
* <p>The length of the rotation window in hours, for example <code>3h</code> for a three
617+
* hour window. Secrets Manager rotates your secret at any time during this window. The window must not
618+
* extend into the next rotation window or the next UTC day. The window starts according to the <code>ScheduleExpression</code>. If you don't specify a <code>Duration</code>,
619+
* for a <code>ScheduleExpression</code> in hours, the window automatically closes after one
620+
* hour. For a <code>ScheduleExpression</code> in days, the window automatically closes at the
621+
* end of the UTC day. For
622+
* more information, including examples, see <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_schedule.html">Schedule expressions
623+
* in Secrets Manager rotation</a> in the <i>Secrets Manager Users Guide</i>.</p>
621624
*/
622625
Duration?: string;
623626

624627
/**
625628
* <p>A <code>cron()</code> or <code>rate()</code> expression that defines the schedule for
626-
* rotating your secret. Secrets Manager rotation schedules use UTC time zone. </p>
627-
* <p>Secrets Manager <code>rate()</code> expressions
628-
* represent the interval in days that you want to rotate your secret, for example
629-
* <code>rate(10 days)</code>. If you use a <code>rate()</code> expression, the rotation
630-
* window opens at midnight, and Secrets Manager rotates your secret any time that day after midnight.
631-
* You can set a <code>Duration</code> to shorten the rotation window.</p>
632-
* <p>You can use a <code>cron()</code> expression to create rotation schedules that are
629+
* rotating your secret. Secrets Manager rotation schedules use UTC time zone. Secrets Manager rotates your secret any time during a rotation window.</p>
630+
* <p>Secrets Manager <code>rate()</code> expressions represent the interval in hours or days that you
631+
* want to rotate your secret, for example <code>rate(12 hours)</code> or
632+
* <code>rate(10 days)</code>. You can rotate a secret as often as every four hours. If you
633+
* use a <code>rate()</code> expression, the rotation
634+
* window starts at midnight. For a rate in hours, the default rotation window closes after one
635+
* hour. For a rate in days, the default rotation window closes at the end of the day. You can
636+
* set the <code>Duration</code> to change the rotation window. The rotation window must not
637+
* extend into the next UTC day or into the next rotation window.</p>
638+
* <p>You can use a <code>cron()</code> expression to create a rotation schedule that is
633639
* more detailed than a rotation interval. For more information, including examples, see
634-
* <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_schedule.html">Schedule expressions
635-
* in Secrets Manager rotation</a>. If you use a <code>cron()</code> expression, Secrets Manager rotates
636-
* your secret any time during that day after the window opens. For example,
637-
* <code>cron(0 8 1 * ? *)</code> represents a rotation window that occurs on the first
638-
* day of every month beginning at 8:00 AM UTC. Secrets Manager rotates the secret any time that day
639-
* after 8:00 AM. You can set a <code>Duration</code> to shorten
640-
* the rotation window.</p>
640+
* <a href="https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_schedule.html">Schedule expressions in
641+
* Secrets Manager rotation</a> in the <i>Secrets Manager Users Guide</i>. For a cron expression
642+
* that represents a schedule in hours, the default rotation window closes after one hour. For
643+
* a cron expression that represents a schedule in days, the default rotation window closes at
644+
* the end of the day. You can set the <code>Duration</code> to change the rotation window. The
645+
* rotation window must not extend into the next UTC day or into the next rotation window.</p>
641646
*/
642647
ScheduleExpression?: string;
643648
}
@@ -1042,7 +1047,7 @@ export interface ListSecretsRequest {
10421047
Filters?: Filter[];
10431048

10441049
/**
1045-
* <p>Lists secrets in the requested order. </p>
1050+
* <p>Secrets are listed by <code>CreatedDate</code>. </p>
10461051
*/
10471052
SortOrder?: SortOrderType | string;
10481053
}

0 commit comments

Comments
 (0)