-
Notifications
You must be signed in to change notification settings - Fork 17
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Automated SDK generation @ aws-cloudformation-user-guide 19dc52cd3f20…
…07d6d268b65b739ffb5ebf8c1e76 (#1788) *Automated PR*
- Loading branch information
1 parent
268bf64
commit cb38aa7
Showing
58 changed files
with
1,869 additions
and
118 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1 +1 @@ | ||
| e407891fcd23524f54f73d89fc230fd574cd5560 | ||
| 5443f8af63af83b98a4c035d7f5d15ba0ea8bf07 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
96 changes: 69 additions & 27 deletions
96
aws-cloudformation-schema/aws-secretsmanager-rotationschedule.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,86 +1,128 @@ | ||
| { | ||
| "tagging" : { | ||
| "taggable" : false | ||
| }, | ||
| "typeName" : "AWS::SecretsManager::RotationSchedule", | ||
| "readOnlyProperties" : [ "/properties/Id" ], | ||
| "description" : "Resource Type definition for AWS::SecretsManager::RotationSchedule", | ||
| "additionalProperties" : false, | ||
| "properties" : { | ||
| "Id" : { | ||
| "type" : "string" | ||
| "createOnlyProperties" : [ "/properties/SecretId" ], | ||
| "primaryIdentifier" : [ "/properties/Id" ], | ||
| "required" : [ "SecretId" ], | ||
| "sourceUrl" : "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-secretsmanager", | ||
| "handlers" : { | ||
| "read" : { | ||
| "permissions" : [ "secretsmanager:DescribeSecret" ] | ||
| }, | ||
| "RotationLambdaARN" : { | ||
| "type" : "string" | ||
| "create" : { | ||
| "permissions" : [ "secretsmanager:RotateSecret", "secretsmanager:DescribeSecret", "lambda:InvokeFunction" ] | ||
| }, | ||
| "RotationRules" : { | ||
| "$ref" : "#/definitions/RotationRules" | ||
| "update" : { | ||
| "permissions" : [ "secretsmanager:RotateSecret", "secretsmanager:DescribeSecret", "lambda:InvokeFunction" ] | ||
| }, | ||
| "RotateImmediatelyOnUpdate" : { | ||
| "type" : "boolean" | ||
| "list" : { | ||
| "permissions" : [ "secretsmanager:DescribeSecret", "secretsmanager:ListSecrets" ] | ||
| }, | ||
| "SecretId" : { | ||
| "type" : "string" | ||
| }, | ||
| "HostedRotationLambda" : { | ||
| "$ref" : "#/definitions/HostedRotationLambda" | ||
| "delete" : { | ||
| "permissions" : [ "secretsmanager:CancelRotateSecret", "secretsmanager:DescribeSecret" ] | ||
| } | ||
| }, | ||
| "writeOnlyProperties" : [ "/properties/RotateImmediatelyOnUpdate", "/properties/HostedRotationLambda", "/properties/HostedRotationLambda/ExcludeCharacters", "/properties/HostedRotationLambda/KmsKeyArn", "/properties/HostedRotationLambda/MasterSecretArn", "/properties/HostedRotationLambda/MasterSecretKmsKeyArn", "/properties/HostedRotationLambda/RotationLambdaName", "/properties/HostedRotationLambda/RotationType", "/properties/HostedRotationLambda/Runtime", "/properties/HostedRotationLambda/SuperuserSecretArn", "/properties/HostedRotationLambda/SuperuserSecretKmsKeyArn", "/properties/HostedRotationLambda/VpcSecurityGroupIds", "/properties/HostedRotationLambda/VpcSubnetIds" ], | ||
| "additionalProperties" : false, | ||
| "definitions" : { | ||
| "HostedRotationLambda" : { | ||
| "type" : "object", | ||
| "additionalProperties" : false, | ||
| "type" : "object", | ||
| "properties" : { | ||
| "Runtime" : { | ||
| "description" : "The python runtime associated with the Lambda function", | ||
| "type" : "string" | ||
| }, | ||
| "RotationType" : { | ||
| "KmsKeyArn" : { | ||
| "description" : "The ARN of the KMS key that Secrets Manager uses to encrypt the secret. If you don't specify this value, then Secrets Manager uses the key aws/secretsmanager. If aws/secretsmanager doesn't yet exist, then Secrets Manager creates it for you automatically the first time it encrypts the secret value.", | ||
| "type" : "string" | ||
| }, | ||
| "RotationLambdaName" : { | ||
| "MasterSecretArn" : { | ||
| "description" : "The ARN of the secret that contains superuser credentials, if you use the alternating users rotation strategy. CloudFormation grants the execution role for the Lambda rotation function GetSecretValue permission to the secret in this property.", | ||
| "type" : "string" | ||
| }, | ||
| "KmsKeyArn" : { | ||
| "RotationLambdaName" : { | ||
| "description" : "The name of the Lambda rotation function.", | ||
| "type" : "string" | ||
| }, | ||
| "MasterSecretArn" : { | ||
| "RotationType" : { | ||
| "description" : "The type of rotation template to use", | ||
| "type" : "string" | ||
| }, | ||
| "VpcSecurityGroupIds" : { | ||
| "ExcludeCharacters" : { | ||
| "description" : "A string of the characters that you don't want in the password.", | ||
| "type" : "string" | ||
| }, | ||
| "ExcludeCharacters" : { | ||
| "VpcSecurityGroupIds" : { | ||
| "description" : "A comma-separated list of security group IDs applied to the target database.", | ||
| "type" : "string" | ||
| }, | ||
| "MasterSecretKmsKeyArn" : { | ||
| "description" : "The ARN of the KMS key that Secrets Manager used to encrypt the superuser secret, if you use the alternating users strategy and the superuser secret is encrypted with a customer managed key. You don't need to specify this property if the superuser secret is encrypted using the key aws/secretsmanager. CloudFormation grants the execution role for the Lambda rotation function Decrypt, DescribeKey, and GenerateDataKey permission to the key in this property.", | ||
| "type" : "string" | ||
| }, | ||
| "SuperuserSecretArn" : { | ||
| "description" : "The ARN of the secret that contains superuser credentials, if you use the alternating users rotation strategy. CloudFormation grants the execution role for the Lambda rotation function GetSecretValue permission to the secret in this property.", | ||
| "type" : "string" | ||
| }, | ||
| "SuperuserSecretKmsKeyArn" : { | ||
| "description" : "The ARN of the KMS key that Secrets Manager used to encrypt the superuser secret, if you use the alternating users strategy and the superuser secret is encrypted with a customer managed key. You don't need to specify this property if the superuser secret is encrypted using the key aws/secretsmanager. CloudFormation grants the execution role for the Lambda rotation function Decrypt, DescribeKey, and GenerateDataKey permission to the key in this property.", | ||
| "type" : "string" | ||
| }, | ||
| "VpcSubnetIds" : { | ||
| "description" : "A comma separated list of VPC subnet IDs of the target database network. The Lambda rotation function is in the same subnet group.", | ||
| "type" : "string" | ||
| } | ||
| }, | ||
| "required" : [ "RotationType" ] | ||
| }, | ||
| "RotationRules" : { | ||
| "type" : "object", | ||
| "additionalProperties" : false, | ||
| "type" : "object", | ||
| "properties" : { | ||
| "ScheduleExpression" : { | ||
| "description" : "A cron() or rate() expression that defines the schedule for rotating your secret. Secrets Manager rotation schedules use UTC time zone.", | ||
| "type" : "string" | ||
| }, | ||
| "Duration" : { | ||
| "description" : "The length of the rotation window in hours, for example 3h for a three hour window. Secrets Manager rotates your secret at any time during this window. The window must not extend into the next rotation window or the next UTC day. The window starts according to the ScheduleExpression. If you don't specify a Duration, for a ScheduleExpression in hours, the window automatically closes after one hour. For a ScheduleExpression in days, the window automatically closes at the end of the UTC day.", | ||
| "type" : "string" | ||
| }, | ||
| "AutomaticallyAfterDays" : { | ||
| "description" : "The number of days between automatic scheduled rotations of the secret. You can use this value to check that your secret meets your compliance guidelines for how often secrets must be rotated.", | ||
| "type" : "integer" | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "required" : [ "SecretId" ], | ||
| "createOnlyProperties" : [ "/properties/SecretId" ], | ||
| "primaryIdentifier" : [ "/properties/Id" ], | ||
| "readOnlyProperties" : [ "/properties/Id" ] | ||
| "properties" : { | ||
| "HostedRotationLambda" : { | ||
| "description" : "Creates a new Lambda rotation function based on one of the Secrets Manager rotation function templates. To use a rotation function that already exists, specify RotationLambdaARN instead.", | ||
| "$ref" : "#/definitions/HostedRotationLambda" | ||
| }, | ||
| "SecretId" : { | ||
| "description" : "The ARN or name of the secret to rotate.", | ||
| "type" : "string" | ||
| }, | ||
| "Id" : { | ||
| "description" : "The ARN of the secret.", | ||
| "type" : "string" | ||
| }, | ||
| "RotateImmediatelyOnUpdate" : { | ||
| "description" : "Specifies whether to rotate the secret immediately or wait until the next scheduled rotation window.", | ||
| "type" : "boolean" | ||
| }, | ||
| "RotationLambdaARN" : { | ||
| "description" : "The ARN of an existing Lambda rotation function. To specify a rotation function that is also defined in this template, use the Ref function.", | ||
| "type" : "string" | ||
| }, | ||
| "RotationRules" : { | ||
| "description" : "A structure that defines the rotation configuration for this secret.", | ||
| "$ref" : "#/definitions/RotationRules" | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1 +1 @@ | ||
| 1.35.49 | ||
| 1.35.50 |
Oops, something went wrong.