Source file cli.ml

(* generated by: awso-codegen generate-all --botocore-data vendor/botocore/botocore/data -o aws --runtime-dir lib/runtime/awso --cli-dir awso-cli *)
open Core
open Async
let json_arg = Command.Arg_type.create Yojson.Safe.from_string
let call ?endpoint_url ?profile ?region f m result_to_json error_to_json =
  let region =
    match region with
    | Some region -> Some (Awso.Region.of_string region)
    | None -> None in
  (Awso_async.Cfg.get_exn ?profile ?region ()) >>=
    (fun cfg ->
       (f ?endpoint_url ?cfg:(Some cfg) m) >>=
         (fun result ->
            match result with
            | Error err ->
                (match error_to_json with
                 | None ->
                     failwithf
                       "endpoint error, but no error values defined in boto"
                       ()
                 | Some to_json ->
                     let s = (err |> to_json) |> Yojson.Safe.to_string in
                     failwithf "AWS error: %s" s ())
            | Ok result ->
                ((match result_to_json with
                  | None -> print_endline "ok response from endpoint"
                  | Some to_json ->
                      ((result |> to_json) |> Yojson.Safe.to_string) |>
                        print_endline);
                 return ())))
let batch_get_secret_value =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretIdList =
         flag "secret-id-list" (optional json_arg)
           ~doc:"JSON SecretIdListType"
       and filters =
         flag "filters" (optional json_arg) ~doc:"JSON FiltersListType"
       and maxResults =
         flag "max-results" (optional int) ~doc:"INT MaxResultsBatchType"
       and nextToken =
         flag "next-token" (optional string) ~doc:"STRING NextTokenType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.batch_get_secret_value
           (Values.BatchGetSecretValueRequest.make
              ?secretIdList:(Option.map ~f:Values.SecretIdListType.of_json
                               secretIdList)
              ?filters:(Option.map ~f:Values.FiltersListType.of_json filters)
              ?maxResults ?nextToken ())
           (Some Values.BatchGetSecretValueResponse.to_json)
           (Some Values.BatchGetSecretValueResponse.error_to_json)])
let cancel_rotate_secret =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.cancel_rotate_secret
           (Values.CancelRotateSecretRequest.make ~secretId ())
           (Some Values.CancelRotateSecretResponse.to_json)
           (Some Values.CancelRotateSecretResponse.error_to_json)])
let create_secret =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and clientRequestToken =
         flag "client-request-token" (optional string)
           ~doc:"STRING ClientRequestTokenType"
       and description =
         flag "description" (optional string) ~doc:"STRING DescriptionType"
       and kmsKeyId =
         flag "kms-key-id" (optional string) ~doc:"STRING KmsKeyIdType"
       and secretBinary =
         flag "secret-binary" (optional json_arg)
           ~doc:"JSON SecretBinaryType"
       and secretString =
         flag "secret-string" (optional string)
           ~doc:"STRING SecretStringType"
       and tags = flag "tags" (optional json_arg) ~doc:"JSON TagListType"
       and addReplicaRegions =
         flag "add-replica-regions" (optional json_arg)
           ~doc:"JSON AddReplicaRegionListType"
       and forceOverwriteReplicaSecret =
         flag "force-overwrite-replica-secret" (optional bool)
           ~doc:"BOOL BooleanType"
       and type_ = flag "type-" (optional string) ~doc:"STRING MedeaTypeType"
       and name = flag "name" (required string) ~doc:"STRING NameType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.create_secret
           (Values.CreateSecretRequest.make ?clientRequestToken ?description
              ?kmsKeyId
              ?secretBinary:(Option.map ~f:Values.SecretBinaryType.of_json
                               secretBinary) ?secretString
              ?tags:(Option.map ~f:Values.TagListType.of_json tags)
              ?addReplicaRegions:(Option.map
                                    ~f:Values.AddReplicaRegionListType.of_json
                                    addReplicaRegions)
              ?forceOverwriteReplicaSecret ?type_ ~name ())
           (Some Values.CreateSecretResponse.to_json)
           (Some Values.CreateSecretResponse.error_to_json)])
let delete_resource_policy =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.delete_resource_policy
           (Values.DeleteResourcePolicyRequest.make ~secretId ())
           (Some Values.DeleteResourcePolicyResponse.to_json)
           (Some Values.DeleteResourcePolicyResponse.error_to_json)])
let delete_secret =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and recoveryWindowInDays =
         flag "recovery-window-in-days" (optional json_arg)
           ~doc:"JSON RecoveryWindowInDaysType"
       and forceDeleteWithoutRecovery =
         flag "force-delete-without-recovery" (optional bool)
           ~doc:"BOOL BooleanType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.delete_secret
           (Values.DeleteSecretRequest.make
              ?recoveryWindowInDays:(Option.map
                                       ~f:Values.RecoveryWindowInDaysType.of_json
                                       recoveryWindowInDays)
              ?forceDeleteWithoutRecovery ~secretId ())
           (Some Values.DeleteSecretResponse.to_json)
           (Some Values.DeleteSecretResponse.error_to_json)])
let describe_secret =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.describe_secret
           (Values.DescribeSecretRequest.make ~secretId ())
           (Some Values.DescribeSecretResponse.to_json)
           (Some Values.DescribeSecretResponse.error_to_json)])
let get_random_password =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and passwordLength =
         flag "password-length" (optional json_arg)
           ~doc:"JSON PasswordLengthType"
       and excludeCharacters =
         flag "exclude-characters" (optional string)
           ~doc:"STRING ExcludeCharactersType"
       and excludeNumbers =
         flag "exclude-numbers" (optional bool)
           ~doc:"BOOL ExcludeNumbersType"
       and excludePunctuation =
         flag "exclude-punctuation" (optional bool)
           ~doc:"BOOL ExcludePunctuationType"
       and excludeUppercase =
         flag "exclude-uppercase" (optional bool)
           ~doc:"BOOL ExcludeUppercaseType"
       and excludeLowercase =
         flag "exclude-lowercase" (optional bool)
           ~doc:"BOOL ExcludeLowercaseType"
       and includeSpace =
         flag "include-space" (optional bool) ~doc:"BOOL IncludeSpaceType"
       and requireEachIncludedType =
         flag "require-each-included-type" (optional bool)
           ~doc:"BOOL RequireEachIncludedTypeType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.get_random_password
           (Values.GetRandomPasswordRequest.make
              ?passwordLength:(Option.map
                                 ~f:Values.PasswordLengthType.of_json
                                 passwordLength) ?excludeCharacters
              ?excludeNumbers ?excludePunctuation ?excludeUppercase
              ?excludeLowercase ?includeSpace ?requireEachIncludedType ())
           (Some Values.GetRandomPasswordResponse.to_json)
           (Some Values.GetRandomPasswordResponse.error_to_json)])
let get_resource_policy =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.get_resource_policy
           (Values.GetResourcePolicyRequest.make ~secretId ())
           (Some Values.GetResourcePolicyResponse.to_json)
           (Some Values.GetResourcePolicyResponse.error_to_json)])
let get_secret_value =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and versionId =
         flag "version-id" (optional string)
           ~doc:"STRING SecretVersionIdType"
       and versionStage =
         flag "version-stage" (optional string)
           ~doc:"STRING SecretVersionStageType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.get_secret_value
           (Values.GetSecretValueRequest.make ?versionId ?versionStage
              ~secretId ()) (Some Values.GetSecretValueResponse.to_json)
           (Some Values.GetSecretValueResponse.error_to_json)])
let list_secret_version_ids =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and maxResults =
         flag "max-results" (optional int) ~doc:"INT MaxResultsType"
       and nextToken =
         flag "next-token" (optional string) ~doc:"STRING NextTokenType"
       and includeDeprecated =
         flag "include-deprecated" (optional bool) ~doc:"BOOL BooleanType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.list_secret_version_ids
           (Values.ListSecretVersionIdsRequest.make ?maxResults ?nextToken
              ?includeDeprecated ~secretId ())
           (Some Values.ListSecretVersionIdsResponse.to_json)
           (Some Values.ListSecretVersionIdsResponse.error_to_json)])
let list_secrets =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and includePlannedDeletion =
         flag "include-planned-deletion" (optional bool)
           ~doc:"BOOL BooleanType"
       and maxResults =
         flag "max-results" (optional int) ~doc:"INT MaxResultsType"
       and nextToken =
         flag "next-token" (optional string) ~doc:"STRING NextTokenType"
       and filters =
         flag "filters" (optional json_arg) ~doc:"JSON FiltersListType"
       and sortOrder =
         flag "sort-order" (optional json_arg) ~doc:"JSON SortOrderType"
       and sortBy = flag "sort-by" (optional json_arg) ~doc:"JSON SortByType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.list_secrets
           (Values.ListSecretsRequest.make ?includePlannedDeletion
              ?maxResults ?nextToken
              ?filters:(Option.map ~f:Values.FiltersListType.of_json filters)
              ?sortOrder:(Option.map ~f:Values.SortOrderType.of_json
                            sortOrder)
              ?sortBy:(Option.map ~f:Values.SortByType.of_json sortBy) ())
           (Some Values.ListSecretsResponse.to_json)
           (Some Values.ListSecretsResponse.error_to_json)])
let put_resource_policy =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and blockPublicPolicy =
         flag "block-public-policy" (optional bool) ~doc:"BOOL BooleanType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType"
       and resourcePolicy =
         flag "resource-policy" (required string)
           ~doc:"STRING NonEmptyResourcePolicyType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.put_resource_policy
           (Values.PutResourcePolicyRequest.make ?blockPublicPolicy ~secretId
              ~resourcePolicy ())
           (Some Values.PutResourcePolicyResponse.to_json)
           (Some Values.PutResourcePolicyResponse.error_to_json)])
let put_secret_value =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and clientRequestToken =
         flag "client-request-token" (optional string)
           ~doc:"STRING ClientRequestTokenType"
       and secretBinary =
         flag "secret-binary" (optional json_arg)
           ~doc:"JSON SecretBinaryType"
       and secretString =
         flag "secret-string" (optional string)
           ~doc:"STRING SecretStringType"
       and versionStages =
         flag "version-stages" (optional json_arg)
           ~doc:"JSON SecretVersionStagesType"
       and rotationToken =
         flag "rotation-token" (optional string)
           ~doc:"STRING RotationTokenType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.put_secret_value
           (Values.PutSecretValueRequest.make ?clientRequestToken
              ?secretBinary:(Option.map ~f:Values.SecretBinaryType.of_json
                               secretBinary) ?secretString
              ?versionStages:(Option.map
                                ~f:Values.SecretVersionStagesType.of_json
                                versionStages) ?rotationToken ~secretId ())
           (Some Values.PutSecretValueResponse.to_json)
           (Some Values.PutSecretValueResponse.error_to_json)])
let remove_regions_from_replication =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType"
       and removeReplicaRegions =
         flag "remove-replica-regions" (required json_arg)
           ~doc:"JSON RemoveReplicaRegionListType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.remove_regions_from_replication
           (Values.RemoveRegionsFromReplicationRequest.make ~secretId
              ~removeReplicaRegions:(Values.RemoveReplicaRegionListType.of_json
                                       removeReplicaRegions) ())
           (Some Values.RemoveRegionsFromReplicationResponse.to_json)
           (Some Values.RemoveRegionsFromReplicationResponse.error_to_json)])
let replicate_secret_to_regions =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and forceOverwriteReplicaSecret =
         flag "force-overwrite-replica-secret" (optional bool)
           ~doc:"BOOL BooleanType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType"
       and addReplicaRegions =
         flag "add-replica-regions" (required json_arg)
           ~doc:"JSON AddReplicaRegionListType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.replicate_secret_to_regions
           (Values.ReplicateSecretToRegionsRequest.make
              ?forceOverwriteReplicaSecret ~secretId
              ~addReplicaRegions:(Values.AddReplicaRegionListType.of_json
                                    addReplicaRegions) ())
           (Some Values.ReplicateSecretToRegionsResponse.to_json)
           (Some Values.ReplicateSecretToRegionsResponse.error_to_json)])
let restore_secret =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.restore_secret (Values.RestoreSecretRequest.make ~secretId ())
           (Some Values.RestoreSecretResponse.to_json)
           (Some Values.RestoreSecretResponse.error_to_json)])
let rotate_secret =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and clientRequestToken =
         flag "client-request-token" (optional string)
           ~doc:"STRING ClientRequestTokenType"
       and rotationLambdaARN =
         flag "rotation-lambda-a-r-n" (optional string)
           ~doc:"STRING RotationLambdaARNType"
       and rotationRules =
         flag "rotation-rules" (optional json_arg)
           ~doc:"JSON RotationRulesType"
       and externalSecretRotationMetadata =
         flag "external-secret-rotation-metadata" (optional json_arg)
           ~doc:"JSON ExternalSecretRotationMetadataType"
       and externalSecretRotationRoleArn =
         flag "external-secret-rotation-role-arn" (optional string)
           ~doc:"STRING RoleARNType"
       and rotateImmediately =
         flag "rotate-immediately" (optional bool) ~doc:"BOOL BooleanType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.rotate_secret
           (Values.RotateSecretRequest.make ?clientRequestToken
              ?rotationLambdaARN
              ?rotationRules:(Option.map ~f:Values.RotationRulesType.of_json
                                rotationRules)
              ?externalSecretRotationMetadata:(Option.map
                                                 ~f:Values.ExternalSecretRotationMetadataType.of_json
                                                 externalSecretRotationMetadata)
              ?externalSecretRotationRoleArn ?rotateImmediately ~secretId ())
           (Some Values.RotateSecretResponse.to_json)
           (Some Values.RotateSecretResponse.error_to_json)])
let stop_replication_to_replica =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.stop_replication_to_replica
           (Values.StopReplicationToReplicaRequest.make ~secretId ())
           (Some Values.StopReplicationToReplicaResponse.to_json)
           (Some Values.StopReplicationToReplicaResponse.error_to_json)])
let tag_resource =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType"
       and tags = flag "tags" (required json_arg) ~doc:"JSON TagListType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.tag_resource
           (Values.TagResourceRequest.make ~secretId
              ~tags:(Values.TagListType.of_json tags) ()) None None])
let untag_resource =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType"
       and tagKeys =
         flag "tag-keys" (required json_arg) ~doc:"JSON TagKeyListType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.untag_resource
           (Values.UntagResourceRequest.make ~secretId
              ~tagKeys:(Values.TagKeyListType.of_json tagKeys) ()) None None])
let update_secret =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and clientRequestToken =
         flag "client-request-token" (optional string)
           ~doc:"STRING ClientRequestTokenType"
       and description =
         flag "description" (optional string) ~doc:"STRING DescriptionType"
       and kmsKeyId =
         flag "kms-key-id" (optional string) ~doc:"STRING KmsKeyIdType"
       and secretBinary =
         flag "secret-binary" (optional json_arg)
           ~doc:"JSON SecretBinaryType"
       and secretString =
         flag "secret-string" (optional string)
           ~doc:"STRING SecretStringType"
       and type_ = flag "type-" (optional string) ~doc:"STRING MedeaTypeType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.update_secret
           (Values.UpdateSecretRequest.make ?clientRequestToken ?description
              ?kmsKeyId
              ?secretBinary:(Option.map ~f:Values.SecretBinaryType.of_json
                               secretBinary) ?secretString ?type_ ~secretId
              ()) (Some Values.UpdateSecretResponse.to_json)
           (Some Values.UpdateSecretResponse.error_to_json)])
let update_secret_version_stage =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and removeFromVersionId =
         flag "remove-from-version-id" (optional string)
           ~doc:"STRING SecretVersionIdType"
       and moveToVersionId =
         flag "move-to-version-id" (optional string)
           ~doc:"STRING SecretVersionIdType"
       and secretId =
         flag "secret-id" (required string) ~doc:"STRING SecretIdType"
       and versionStage =
         flag "version-stage" (required string)
           ~doc:"STRING SecretVersionStageType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.update_secret_version_stage
           (Values.UpdateSecretVersionStageRequest.make ?removeFromVersionId
              ?moveToVersionId ~secretId ~versionStage ())
           (Some Values.UpdateSecretVersionStageResponse.to_json)
           (Some Values.UpdateSecretVersionStageResponse.error_to_json)])
let validate_resource_policy =
  Command.async ~summary:""
    ([%map_open.Command
       let cli_profile =
         flag "-cli-profile" (optional string) ~doc:"NAME aws profile to use"
       and cli_region =
         flag "-cli-region" (optional string) ~doc:"REGION override region"
       and endpoint_url =
         flag "-endpoint-url" (optional string)
           ~doc:"URL override endpoint url"
       and secretId =
         flag "secret-id" (optional string) ~doc:"STRING SecretIdType"
       and resourcePolicy =
         flag "resource-policy" (required string)
           ~doc:"STRING NonEmptyResourcePolicyType" in
       fun () ->
         call ?endpoint_url ?profile:cli_profile ?region:cli_region
           Io.validate_resource_policy
           (Values.ValidateResourcePolicyRequest.make ?secretId
              ~resourcePolicy ())
           (Some Values.ValidateResourcePolicyResponse.to_json)
           (Some Values.ValidateResourcePolicyResponse.error_to_json)])
let main =
  Command.group
    ~summary:((Awso.Service.to_string Values.service) ^ " commands")
    [("batch-get-secret-value", batch_get_secret_value);
    ("cancel-rotate-secret", cancel_rotate_secret);
    ("create-secret", create_secret);
    ("delete-resource-policy", delete_resource_policy);
    ("delete-secret", delete_secret);
    ("describe-secret", describe_secret);
    ("get-random-password", get_random_password);
    ("get-resource-policy", get_resource_policy);
    ("get-secret-value", get_secret_value);
    ("list-secret-version-ids", list_secret_version_ids);
    ("list-secrets", list_secrets);
    ("put-resource-policy", put_resource_policy);
    ("put-secret-value", put_secret_value);
    ("remove-regions-from-replication", remove_regions_from_replication);
    ("replicate-secret-to-regions", replicate_secret_to_regions);
    ("restore-secret", restore_secret);
    ("rotate-secret", rotate_secret);
    ("stop-replication-to-replica", stop_replication_to_replica);
    ("tag-resource", tag_resource);
    ("untag-resource", untag_resource);
    ("update-secret", update_secret);
    ("update-secret-version-stage", update_secret_version_stage);
    ("validate-resource-policy", validate_resource_policy)]