1. Packages
  2. Packages
  3. Akeyless Provider
  4. API Docs
  5. DynamicSecretVenafi
Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community
Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community

    Venafi dynamic secret resource

    Create DynamicSecretVenafi Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DynamicSecretVenafi(name: string, args?: DynamicSecretVenafiArgs, opts?: CustomResourceOptions);
    @overload
    def DynamicSecretVenafi(resource_name: str,
                            args: Optional[DynamicSecretVenafiArgs] = None,
                            opts: Optional[ResourceOptions] = None)
    
    @overload
    def DynamicSecretVenafi(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            admin_rotation_interval_days: Optional[float] = None,
                            allow_subdomains: Optional[bool] = None,
                            allowed_domains: Optional[Sequence[str]] = None,
                            auto_generated_folder: Optional[str] = None,
                            delete_protection: Optional[str] = None,
                            dynamic_secret_venafi_id: Optional[str] = None,
                            enable_admin_rotation: Optional[bool] = None,
                            item_custom_fields: Optional[Mapping[str, str]] = None,
                            name: Optional[str] = None,
                            producer_encryption_key_name: Optional[str] = None,
                            root_first_in_chain: Optional[bool] = None,
                            sign_using_akeyless_pki: Optional[bool] = None,
                            signer_key_name: Optional[str] = None,
                            store_private_key: Optional[bool] = None,
                            tags: Optional[Sequence[str]] = None,
                            target_name: Optional[str] = None,
                            user_ttl: Optional[str] = None,
                            venafi_access_token: Optional[str] = None,
                            venafi_api_key: Optional[str] = None,
                            venafi_baseurl: Optional[str] = None,
                            venafi_client_id: Optional[str] = None,
                            venafi_refresh_token: Optional[str] = None,
                            venafi_use_tpp: Optional[bool] = None,
                            venafi_zone: Optional[str] = None)
    func NewDynamicSecretVenafi(ctx *Context, name string, args *DynamicSecretVenafiArgs, opts ...ResourceOption) (*DynamicSecretVenafi, error)
    public DynamicSecretVenafi(string name, DynamicSecretVenafiArgs? args = null, CustomResourceOptions? opts = null)
    public DynamicSecretVenafi(String name, DynamicSecretVenafiArgs args)
    public DynamicSecretVenafi(String name, DynamicSecretVenafiArgs args, CustomResourceOptions options)
    
    type: akeyless:DynamicSecretVenafi
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "akeyless_dynamicsecretvenafi" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args DynamicSecretVenafiArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DynamicSecretVenafiArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DynamicSecretVenafiArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DynamicSecretVenafiArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DynamicSecretVenafiArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var dynamicSecretVenafiResource = new Akeyless.DynamicSecretVenafi("dynamicSecretVenafiResource", new()
    {
        AdminRotationIntervalDays = 0,
        AllowSubdomains = false,
        AllowedDomains = new[]
        {
            "string",
        },
        AutoGeneratedFolder = "string",
        DeleteProtection = "string",
        DynamicSecretVenafiId = "string",
        EnableAdminRotation = false,
        ItemCustomFields = 
        {
            { "string", "string" },
        },
        Name = "string",
        ProducerEncryptionKeyName = "string",
        RootFirstInChain = false,
        SignUsingAkeylessPki = false,
        SignerKeyName = "string",
        StorePrivateKey = false,
        Tags = new[]
        {
            "string",
        },
        TargetName = "string",
        UserTtl = "string",
        VenafiAccessToken = "string",
        VenafiApiKey = "string",
        VenafiBaseurl = "string",
        VenafiClientId = "string",
        VenafiRefreshToken = "string",
        VenafiUseTpp = false,
        VenafiZone = "string",
    });
    
    example, err := akeyless.NewDynamicSecretVenafi(ctx, "dynamicSecretVenafiResource", &akeyless.DynamicSecretVenafiArgs{
    	AdminRotationIntervalDays: pulumi.Float64(0),
    	AllowSubdomains:           pulumi.Bool(false),
    	AllowedDomains: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	AutoGeneratedFolder:   pulumi.String("string"),
    	DeleteProtection:      pulumi.String("string"),
    	DynamicSecretVenafiId: pulumi.String("string"),
    	EnableAdminRotation:   pulumi.Bool(false),
    	ItemCustomFields: pulumi.StringMap{
    		"string": pulumi.String("string"),
    	},
    	Name:                      pulumi.String("string"),
    	ProducerEncryptionKeyName: pulumi.String("string"),
    	RootFirstInChain:          pulumi.Bool(false),
    	SignUsingAkeylessPki:      pulumi.Bool(false),
    	SignerKeyName:             pulumi.String("string"),
    	StorePrivateKey:           pulumi.Bool(false),
    	Tags: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	TargetName:         pulumi.String("string"),
    	UserTtl:            pulumi.String("string"),
    	VenafiAccessToken:  pulumi.String("string"),
    	VenafiApiKey:       pulumi.String("string"),
    	VenafiBaseurl:      pulumi.String("string"),
    	VenafiClientId:     pulumi.String("string"),
    	VenafiRefreshToken: pulumi.String("string"),
    	VenafiUseTpp:       pulumi.Bool(false),
    	VenafiZone:         pulumi.String("string"),
    })
    
    resource "akeyless_dynamicsecretvenafi" "dynamicSecretVenafiResource" {
      admin_rotation_interval_days = 0
      allow_subdomains             = false
      allowed_domains              = ["string"]
      auto_generated_folder        = "string"
      delete_protection            = "string"
      dynamic_secret_venafi_id     = "string"
      enable_admin_rotation        = false
      item_custom_fields = {
        "string" = "string"
      }
      name                         = "string"
      producer_encryption_key_name = "string"
      root_first_in_chain          = false
      sign_using_akeyless_pki      = false
      signer_key_name              = "string"
      store_private_key            = false
      tags                         = ["string"]
      target_name                  = "string"
      user_ttl                     = "string"
      venafi_access_token          = "string"
      venafi_api_key               = "string"
      venafi_baseurl               = "string"
      venafi_client_id             = "string"
      venafi_refresh_token         = "string"
      venafi_use_tpp               = false
      venafi_zone                  = "string"
    }
    
    var dynamicSecretVenafiResource = new DynamicSecretVenafi("dynamicSecretVenafiResource", DynamicSecretVenafiArgs.builder()
        .adminRotationIntervalDays(0.0)
        .allowSubdomains(false)
        .allowedDomains("string")
        .autoGeneratedFolder("string")
        .deleteProtection("string")
        .dynamicSecretVenafiId("string")
        .enableAdminRotation(false)
        .itemCustomFields(Map.of("string", "string"))
        .name("string")
        .producerEncryptionKeyName("string")
        .rootFirstInChain(false)
        .signUsingAkeylessPki(false)
        .signerKeyName("string")
        .storePrivateKey(false)
        .tags("string")
        .targetName("string")
        .userTtl("string")
        .venafiAccessToken("string")
        .venafiApiKey("string")
        .venafiBaseurl("string")
        .venafiClientId("string")
        .venafiRefreshToken("string")
        .venafiUseTpp(false)
        .venafiZone("string")
        .build());
    
    dynamic_secret_venafi_resource = akeyless.DynamicSecretVenafi("dynamicSecretVenafiResource",
        admin_rotation_interval_days=float(0),
        allow_subdomains=False,
        allowed_domains=["string"],
        auto_generated_folder="string",
        delete_protection="string",
        dynamic_secret_venafi_id="string",
        enable_admin_rotation=False,
        item_custom_fields={
            "string": "string",
        },
        name="string",
        producer_encryption_key_name="string",
        root_first_in_chain=False,
        sign_using_akeyless_pki=False,
        signer_key_name="string",
        store_private_key=False,
        tags=["string"],
        target_name="string",
        user_ttl="string",
        venafi_access_token="string",
        venafi_api_key="string",
        venafi_baseurl="string",
        venafi_client_id="string",
        venafi_refresh_token="string",
        venafi_use_tpp=False,
        venafi_zone="string")
    
    const dynamicSecretVenafiResource = new akeyless.DynamicSecretVenafi("dynamicSecretVenafiResource", {
        adminRotationIntervalDays: 0,
        allowSubdomains: false,
        allowedDomains: ["string"],
        autoGeneratedFolder: "string",
        deleteProtection: "string",
        dynamicSecretVenafiId: "string",
        enableAdminRotation: false,
        itemCustomFields: {
            string: "string",
        },
        name: "string",
        producerEncryptionKeyName: "string",
        rootFirstInChain: false,
        signUsingAkeylessPki: false,
        signerKeyName: "string",
        storePrivateKey: false,
        tags: ["string"],
        targetName: "string",
        userTtl: "string",
        venafiAccessToken: "string",
        venafiApiKey: "string",
        venafiBaseurl: "string",
        venafiClientId: "string",
        venafiRefreshToken: "string",
        venafiUseTpp: false,
        venafiZone: "string",
    });
    
    type: akeyless:DynamicSecretVenafi
    properties:
        adminRotationIntervalDays: 0
        allowSubdomains: false
        allowedDomains:
            - string
        autoGeneratedFolder: string
        deleteProtection: string
        dynamicSecretVenafiId: string
        enableAdminRotation: false
        itemCustomFields:
            string: string
        name: string
        producerEncryptionKeyName: string
        rootFirstInChain: false
        signUsingAkeylessPki: false
        signerKeyName: string
        storePrivateKey: false
        tags:
            - string
        targetName: string
        userTtl: string
        venafiAccessToken: string
        venafiApiKey: string
        venafiBaseurl: string
        venafiClientId: string
        venafiRefreshToken: string
        venafiUseTpp: false
        venafiZone: string
    

    DynamicSecretVenafi Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DynamicSecretVenafi resource accepts the following input properties:

    AdminRotationIntervalDays double
    Admin credentials rotation interval (days)
    AllowSubdomains bool
    Allow subdomains
    AllowedDomains List<string>
    Allowed domains
    AutoGeneratedFolder string
    Auto generated folder
    DeleteProtection string
    Protection from accidental deletion of this object [true/false]
    DynamicSecretVenafiId string
    The ID of this resource.
    EnableAdminRotation bool
    Automatic admin credentials rotation
    ItemCustomFields Dictionary<string, string>
    Additional custom fields to associate with the item
    Name string
    Dynamic secret name
    ProducerEncryptionKeyName string
    Dynamic producer encryption key
    RootFirstInChain bool
    Root first in chain
    SignUsingAkeylessPki bool
    Use Akeyless PKI issuer or Venafi issuer
    SignerKeyName string
    Signer key name
    StorePrivateKey bool
    Store private key
    Tags List<string>
    Add tags attached to this object
    TargetName string
    Target name
    UserTtl string
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    VenafiAccessToken string
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    VenafiApiKey string
    Venafi API key
    VenafiBaseurl string
    Venafi Baseurl
    VenafiClientId string
    Venafi Client ID that was used when the access token was generated
    VenafiRefreshToken string
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    VenafiUseTpp bool
    Venafi using TPP
    VenafiZone string
    Venafi Zone
    AdminRotationIntervalDays float64
    Admin credentials rotation interval (days)
    AllowSubdomains bool
    Allow subdomains
    AllowedDomains []string
    Allowed domains
    AutoGeneratedFolder string
    Auto generated folder
    DeleteProtection string
    Protection from accidental deletion of this object [true/false]
    DynamicSecretVenafiId string
    The ID of this resource.
    EnableAdminRotation bool
    Automatic admin credentials rotation
    ItemCustomFields map[string]string
    Additional custom fields to associate with the item
    Name string
    Dynamic secret name
    ProducerEncryptionKeyName string
    Dynamic producer encryption key
    RootFirstInChain bool
    Root first in chain
    SignUsingAkeylessPki bool
    Use Akeyless PKI issuer or Venafi issuer
    SignerKeyName string
    Signer key name
    StorePrivateKey bool
    Store private key
    Tags []string
    Add tags attached to this object
    TargetName string
    Target name
    UserTtl string
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    VenafiAccessToken string
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    VenafiApiKey string
    Venafi API key
    VenafiBaseurl string
    Venafi Baseurl
    VenafiClientId string
    Venafi Client ID that was used when the access token was generated
    VenafiRefreshToken string
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    VenafiUseTpp bool
    Venafi using TPP
    VenafiZone string
    Venafi Zone
    admin_rotation_interval_days number
    Admin credentials rotation interval (days)
    allow_subdomains bool
    Allow subdomains
    allowed_domains list(string)
    Allowed domains
    auto_generated_folder string
    Auto generated folder
    delete_protection string
    Protection from accidental deletion of this object [true/false]
    dynamic_secret_venafi_id string
    The ID of this resource.
    enable_admin_rotation bool
    Automatic admin credentials rotation
    item_custom_fields map(string)
    Additional custom fields to associate with the item
    name string
    Dynamic secret name
    producer_encryption_key_name string
    Dynamic producer encryption key
    root_first_in_chain bool
    Root first in chain
    sign_using_akeyless_pki bool
    Use Akeyless PKI issuer or Venafi issuer
    signer_key_name string
    Signer key name
    store_private_key bool
    Store private key
    tags list(string)
    Add tags attached to this object
    target_name string
    Target name
    user_ttl string
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafi_access_token string
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafi_api_key string
    Venafi API key
    venafi_baseurl string
    Venafi Baseurl
    venafi_client_id string
    Venafi Client ID that was used when the access token was generated
    venafi_refresh_token string
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafi_use_tpp bool
    Venafi using TPP
    venafi_zone string
    Venafi Zone
    adminRotationIntervalDays Double
    Admin credentials rotation interval (days)
    allowSubdomains Boolean
    Allow subdomains
    allowedDomains List<String>
    Allowed domains
    autoGeneratedFolder String
    Auto generated folder
    deleteProtection String
    Protection from accidental deletion of this object [true/false]
    dynamicSecretVenafiId String
    The ID of this resource.
    enableAdminRotation Boolean
    Automatic admin credentials rotation
    itemCustomFields Map<String,String>
    Additional custom fields to associate with the item
    name String
    Dynamic secret name
    producerEncryptionKeyName String
    Dynamic producer encryption key
    rootFirstInChain Boolean
    Root first in chain
    signUsingAkeylessPki Boolean
    Use Akeyless PKI issuer or Venafi issuer
    signerKeyName String
    Signer key name
    storePrivateKey Boolean
    Store private key
    tags List<String>
    Add tags attached to this object
    targetName String
    Target name
    userTtl String
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafiAccessToken String
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafiApiKey String
    Venafi API key
    venafiBaseurl String
    Venafi Baseurl
    venafiClientId String
    Venafi Client ID that was used when the access token was generated
    venafiRefreshToken String
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafiUseTpp Boolean
    Venafi using TPP
    venafiZone String
    Venafi Zone
    adminRotationIntervalDays number
    Admin credentials rotation interval (days)
    allowSubdomains boolean
    Allow subdomains
    allowedDomains string[]
    Allowed domains
    autoGeneratedFolder string
    Auto generated folder
    deleteProtection string
    Protection from accidental deletion of this object [true/false]
    dynamicSecretVenafiId string
    The ID of this resource.
    enableAdminRotation boolean
    Automatic admin credentials rotation
    itemCustomFields {[key: string]: string}
    Additional custom fields to associate with the item
    name string
    Dynamic secret name
    producerEncryptionKeyName string
    Dynamic producer encryption key
    rootFirstInChain boolean
    Root first in chain
    signUsingAkeylessPki boolean
    Use Akeyless PKI issuer or Venafi issuer
    signerKeyName string
    Signer key name
    storePrivateKey boolean
    Store private key
    tags string[]
    Add tags attached to this object
    targetName string
    Target name
    userTtl string
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafiAccessToken string
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafiApiKey string
    Venafi API key
    venafiBaseurl string
    Venafi Baseurl
    venafiClientId string
    Venafi Client ID that was used when the access token was generated
    venafiRefreshToken string
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafiUseTpp boolean
    Venafi using TPP
    venafiZone string
    Venafi Zone
    admin_rotation_interval_days float
    Admin credentials rotation interval (days)
    allow_subdomains bool
    Allow subdomains
    allowed_domains Sequence[str]
    Allowed domains
    auto_generated_folder str
    Auto generated folder
    delete_protection str
    Protection from accidental deletion of this object [true/false]
    dynamic_secret_venafi_id str
    The ID of this resource.
    enable_admin_rotation bool
    Automatic admin credentials rotation
    item_custom_fields Mapping[str, str]
    Additional custom fields to associate with the item
    name str
    Dynamic secret name
    producer_encryption_key_name str
    Dynamic producer encryption key
    root_first_in_chain bool
    Root first in chain
    sign_using_akeyless_pki bool
    Use Akeyless PKI issuer or Venafi issuer
    signer_key_name str
    Signer key name
    store_private_key bool
    Store private key
    tags Sequence[str]
    Add tags attached to this object
    target_name str
    Target name
    user_ttl str
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafi_access_token str
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafi_api_key str
    Venafi API key
    venafi_baseurl str
    Venafi Baseurl
    venafi_client_id str
    Venafi Client ID that was used when the access token was generated
    venafi_refresh_token str
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafi_use_tpp bool
    Venafi using TPP
    venafi_zone str
    Venafi Zone
    adminRotationIntervalDays Number
    Admin credentials rotation interval (days)
    allowSubdomains Boolean
    Allow subdomains
    allowedDomains List<String>
    Allowed domains
    autoGeneratedFolder String
    Auto generated folder
    deleteProtection String
    Protection from accidental deletion of this object [true/false]
    dynamicSecretVenafiId String
    The ID of this resource.
    enableAdminRotation Boolean
    Automatic admin credentials rotation
    itemCustomFields Map<String>
    Additional custom fields to associate with the item
    name String
    Dynamic secret name
    producerEncryptionKeyName String
    Dynamic producer encryption key
    rootFirstInChain Boolean
    Root first in chain
    signUsingAkeylessPki Boolean
    Use Akeyless PKI issuer or Venafi issuer
    signerKeyName String
    Signer key name
    storePrivateKey Boolean
    Store private key
    tags List<String>
    Add tags attached to this object
    targetName String
    Target name
    userTtl String
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafiAccessToken String
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafiApiKey String
    Venafi API key
    venafiBaseurl String
    Venafi Baseurl
    venafiClientId String
    Venafi Client ID that was used when the access token was generated
    venafiRefreshToken String
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafiUseTpp Boolean
    Venafi using TPP
    venafiZone String
    Venafi Zone

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DynamicSecretVenafi resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing DynamicSecretVenafi Resource

    Get an existing DynamicSecretVenafi resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DynamicSecretVenafiState, opts?: CustomResourceOptions): DynamicSecretVenafi
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            admin_rotation_interval_days: Optional[float] = None,
            allow_subdomains: Optional[bool] = None,
            allowed_domains: Optional[Sequence[str]] = None,
            auto_generated_folder: Optional[str] = None,
            delete_protection: Optional[str] = None,
            dynamic_secret_venafi_id: Optional[str] = None,
            enable_admin_rotation: Optional[bool] = None,
            item_custom_fields: Optional[Mapping[str, str]] = None,
            name: Optional[str] = None,
            producer_encryption_key_name: Optional[str] = None,
            root_first_in_chain: Optional[bool] = None,
            sign_using_akeyless_pki: Optional[bool] = None,
            signer_key_name: Optional[str] = None,
            store_private_key: Optional[bool] = None,
            tags: Optional[Sequence[str]] = None,
            target_name: Optional[str] = None,
            user_ttl: Optional[str] = None,
            venafi_access_token: Optional[str] = None,
            venafi_api_key: Optional[str] = None,
            venafi_baseurl: Optional[str] = None,
            venafi_client_id: Optional[str] = None,
            venafi_refresh_token: Optional[str] = None,
            venafi_use_tpp: Optional[bool] = None,
            venafi_zone: Optional[str] = None) -> DynamicSecretVenafi
    func GetDynamicSecretVenafi(ctx *Context, name string, id IDInput, state *DynamicSecretVenafiState, opts ...ResourceOption) (*DynamicSecretVenafi, error)
    public static DynamicSecretVenafi Get(string name, Input<string> id, DynamicSecretVenafiState? state, CustomResourceOptions? opts = null)
    public static DynamicSecretVenafi get(String name, Output<String> id, DynamicSecretVenafiState state, CustomResourceOptions options)
    resources:  _:    type: akeyless:DynamicSecretVenafi    get:      id: ${id}
    import {
      to = akeyless_dynamicsecretvenafi.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AdminRotationIntervalDays double
    Admin credentials rotation interval (days)
    AllowSubdomains bool
    Allow subdomains
    AllowedDomains List<string>
    Allowed domains
    AutoGeneratedFolder string
    Auto generated folder
    DeleteProtection string
    Protection from accidental deletion of this object [true/false]
    DynamicSecretVenafiId string
    The ID of this resource.
    EnableAdminRotation bool
    Automatic admin credentials rotation
    ItemCustomFields Dictionary<string, string>
    Additional custom fields to associate with the item
    Name string
    Dynamic secret name
    ProducerEncryptionKeyName string
    Dynamic producer encryption key
    RootFirstInChain bool
    Root first in chain
    SignUsingAkeylessPki bool
    Use Akeyless PKI issuer or Venafi issuer
    SignerKeyName string
    Signer key name
    StorePrivateKey bool
    Store private key
    Tags List<string>
    Add tags attached to this object
    TargetName string
    Target name
    UserTtl string
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    VenafiAccessToken string
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    VenafiApiKey string
    Venafi API key
    VenafiBaseurl string
    Venafi Baseurl
    VenafiClientId string
    Venafi Client ID that was used when the access token was generated
    VenafiRefreshToken string
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    VenafiUseTpp bool
    Venafi using TPP
    VenafiZone string
    Venafi Zone
    AdminRotationIntervalDays float64
    Admin credentials rotation interval (days)
    AllowSubdomains bool
    Allow subdomains
    AllowedDomains []string
    Allowed domains
    AutoGeneratedFolder string
    Auto generated folder
    DeleteProtection string
    Protection from accidental deletion of this object [true/false]
    DynamicSecretVenafiId string
    The ID of this resource.
    EnableAdminRotation bool
    Automatic admin credentials rotation
    ItemCustomFields map[string]string
    Additional custom fields to associate with the item
    Name string
    Dynamic secret name
    ProducerEncryptionKeyName string
    Dynamic producer encryption key
    RootFirstInChain bool
    Root first in chain
    SignUsingAkeylessPki bool
    Use Akeyless PKI issuer or Venafi issuer
    SignerKeyName string
    Signer key name
    StorePrivateKey bool
    Store private key
    Tags []string
    Add tags attached to this object
    TargetName string
    Target name
    UserTtl string
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    VenafiAccessToken string
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    VenafiApiKey string
    Venafi API key
    VenafiBaseurl string
    Venafi Baseurl
    VenafiClientId string
    Venafi Client ID that was used when the access token was generated
    VenafiRefreshToken string
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    VenafiUseTpp bool
    Venafi using TPP
    VenafiZone string
    Venafi Zone
    admin_rotation_interval_days number
    Admin credentials rotation interval (days)
    allow_subdomains bool
    Allow subdomains
    allowed_domains list(string)
    Allowed domains
    auto_generated_folder string
    Auto generated folder
    delete_protection string
    Protection from accidental deletion of this object [true/false]
    dynamic_secret_venafi_id string
    The ID of this resource.
    enable_admin_rotation bool
    Automatic admin credentials rotation
    item_custom_fields map(string)
    Additional custom fields to associate with the item
    name string
    Dynamic secret name
    producer_encryption_key_name string
    Dynamic producer encryption key
    root_first_in_chain bool
    Root first in chain
    sign_using_akeyless_pki bool
    Use Akeyless PKI issuer or Venafi issuer
    signer_key_name string
    Signer key name
    store_private_key bool
    Store private key
    tags list(string)
    Add tags attached to this object
    target_name string
    Target name
    user_ttl string
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafi_access_token string
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafi_api_key string
    Venafi API key
    venafi_baseurl string
    Venafi Baseurl
    venafi_client_id string
    Venafi Client ID that was used when the access token was generated
    venafi_refresh_token string
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafi_use_tpp bool
    Venafi using TPP
    venafi_zone string
    Venafi Zone
    adminRotationIntervalDays Double
    Admin credentials rotation interval (days)
    allowSubdomains Boolean
    Allow subdomains
    allowedDomains List<String>
    Allowed domains
    autoGeneratedFolder String
    Auto generated folder
    deleteProtection String
    Protection from accidental deletion of this object [true/false]
    dynamicSecretVenafiId String
    The ID of this resource.
    enableAdminRotation Boolean
    Automatic admin credentials rotation
    itemCustomFields Map<String,String>
    Additional custom fields to associate with the item
    name String
    Dynamic secret name
    producerEncryptionKeyName String
    Dynamic producer encryption key
    rootFirstInChain Boolean
    Root first in chain
    signUsingAkeylessPki Boolean
    Use Akeyless PKI issuer or Venafi issuer
    signerKeyName String
    Signer key name
    storePrivateKey Boolean
    Store private key
    tags List<String>
    Add tags attached to this object
    targetName String
    Target name
    userTtl String
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafiAccessToken String
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafiApiKey String
    Venafi API key
    venafiBaseurl String
    Venafi Baseurl
    venafiClientId String
    Venafi Client ID that was used when the access token was generated
    venafiRefreshToken String
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafiUseTpp Boolean
    Venafi using TPP
    venafiZone String
    Venafi Zone
    adminRotationIntervalDays number
    Admin credentials rotation interval (days)
    allowSubdomains boolean
    Allow subdomains
    allowedDomains string[]
    Allowed domains
    autoGeneratedFolder string
    Auto generated folder
    deleteProtection string
    Protection from accidental deletion of this object [true/false]
    dynamicSecretVenafiId string
    The ID of this resource.
    enableAdminRotation boolean
    Automatic admin credentials rotation
    itemCustomFields {[key: string]: string}
    Additional custom fields to associate with the item
    name string
    Dynamic secret name
    producerEncryptionKeyName string
    Dynamic producer encryption key
    rootFirstInChain boolean
    Root first in chain
    signUsingAkeylessPki boolean
    Use Akeyless PKI issuer or Venafi issuer
    signerKeyName string
    Signer key name
    storePrivateKey boolean
    Store private key
    tags string[]
    Add tags attached to this object
    targetName string
    Target name
    userTtl string
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafiAccessToken string
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafiApiKey string
    Venafi API key
    venafiBaseurl string
    Venafi Baseurl
    venafiClientId string
    Venafi Client ID that was used when the access token was generated
    venafiRefreshToken string
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafiUseTpp boolean
    Venafi using TPP
    venafiZone string
    Venafi Zone
    admin_rotation_interval_days float
    Admin credentials rotation interval (days)
    allow_subdomains bool
    Allow subdomains
    allowed_domains Sequence[str]
    Allowed domains
    auto_generated_folder str
    Auto generated folder
    delete_protection str
    Protection from accidental deletion of this object [true/false]
    dynamic_secret_venafi_id str
    The ID of this resource.
    enable_admin_rotation bool
    Automatic admin credentials rotation
    item_custom_fields Mapping[str, str]
    Additional custom fields to associate with the item
    name str
    Dynamic secret name
    producer_encryption_key_name str
    Dynamic producer encryption key
    root_first_in_chain bool
    Root first in chain
    sign_using_akeyless_pki bool
    Use Akeyless PKI issuer or Venafi issuer
    signer_key_name str
    Signer key name
    store_private_key bool
    Store private key
    tags Sequence[str]
    Add tags attached to this object
    target_name str
    Target name
    user_ttl str
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafi_access_token str
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafi_api_key str
    Venafi API key
    venafi_baseurl str
    Venafi Baseurl
    venafi_client_id str
    Venafi Client ID that was used when the access token was generated
    venafi_refresh_token str
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafi_use_tpp bool
    Venafi using TPP
    venafi_zone str
    Venafi Zone
    adminRotationIntervalDays Number
    Admin credentials rotation interval (days)
    allowSubdomains Boolean
    Allow subdomains
    allowedDomains List<String>
    Allowed domains
    autoGeneratedFolder String
    Auto generated folder
    deleteProtection String
    Protection from accidental deletion of this object [true/false]
    dynamicSecretVenafiId String
    The ID of this resource.
    enableAdminRotation Boolean
    Automatic admin credentials rotation
    itemCustomFields Map<String>
    Additional custom fields to associate with the item
    name String
    Dynamic secret name
    producerEncryptionKeyName String
    Dynamic producer encryption key
    rootFirstInChain Boolean
    Root first in chain
    signUsingAkeylessPki Boolean
    Use Akeyless PKI issuer or Venafi issuer
    signerKeyName String
    Signer key name
    storePrivateKey Boolean
    Store private key
    tags List<String>
    Add tags attached to this object
    targetName String
    Target name
    userTtl String
    User TTL in time.Duration format (2160h / 129600m / etc...). When using sign-using-akeyless-pki certificates created will have this validity period, otherwise the user-ttl is taken from the Validity Period field of the Zone's' Issuing Template. When using cert-manager it is advised to have a TTL of above 60 days (1440h). For more information - https://cert-manager.io/docs/usage/certificate/
    venafiAccessToken String
    Venafi Access Token to use to access the TPP environment (Relevant when using TPP)
    venafiApiKey String
    Venafi API key
    venafiBaseurl String
    Venafi Baseurl
    venafiClientId String
    Venafi Client ID that was used when the access token was generated
    venafiRefreshToken String
    Venafi Refresh Token to use when the Access Token is expired (Relevant when using TPP)
    venafiUseTpp Boolean
    Venafi using TPP
    venafiZone String
    Venafi Zone

    Package Details

    Repository
    akeyless akeyless-community/terraform-provider-akeyless
    License
    Notes
    This Pulumi package is based on the akeyless Terraform Provider.
    Viewing docs for akeyless 2.0.1
    published on Monday, Apr 27, 2026 by akeyless-community
      Try Pulumi Cloud free. Your team will thank you.