published on Monday, Apr 27, 2026 by akeyless-community
published on Monday, Apr 27, 2026 by akeyless-community
Aws rotated secret resource
Create RotatedSecretAws Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new RotatedSecretAws(name: string, args: RotatedSecretAwsArgs, opts?: CustomResourceOptions);@overload
def RotatedSecretAws(resource_name: str,
args: RotatedSecretAwsArgs,
opts: Optional[ResourceOptions] = None)
@overload
def RotatedSecretAws(resource_name: str,
opts: Optional[ResourceOptions] = None,
rotator_type: Optional[str] = None,
target_name: Optional[str] = None,
grace_rotation: Optional[str] = None,
secure_access_certificate_issuer: Optional[str] = None,
aws_region: Optional[str] = None,
delete_protection: Optional[str] = None,
description: Optional[str] = None,
api_id: Optional[str] = None,
grace_rotation_hour: Optional[float] = None,
grace_rotation_interval: Optional[str] = None,
item_custom_fields: Optional[Mapping[str, str]] = None,
keep_prev_version: Optional[str] = None,
key: Optional[str] = None,
max_versions: Optional[str] = None,
auto_rotate: Optional[str] = None,
name: Optional[str] = None,
rotation_interval: Optional[str] = None,
rotated_secret_aws_id: Optional[str] = None,
rotation_event_ins: Optional[Sequence[str]] = None,
rotation_hour: Optional[float] = None,
rotate_after_disconnect: Optional[str] = None,
authentication_credentials: Optional[str] = None,
secure_access_aws_account_id: Optional[str] = None,
secure_access_aws_native_cli: Optional[bool] = None,
password_length: Optional[str] = None,
secure_access_enable: Optional[str] = None,
tags: Optional[Sequence[str]] = None,
api_key: Optional[str] = None)func NewRotatedSecretAws(ctx *Context, name string, args RotatedSecretAwsArgs, opts ...ResourceOption) (*RotatedSecretAws, error)public RotatedSecretAws(string name, RotatedSecretAwsArgs args, CustomResourceOptions? opts = null)
public RotatedSecretAws(String name, RotatedSecretAwsArgs args)
public RotatedSecretAws(String name, RotatedSecretAwsArgs args, CustomResourceOptions options)
type: akeyless:RotatedSecretAws
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "akeyless_rotatedsecretaws" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args RotatedSecretAwsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args RotatedSecretAwsArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args RotatedSecretAwsArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args RotatedSecretAwsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args RotatedSecretAwsArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var rotatedSecretAwsResource = new Akeyless.RotatedSecretAws("rotatedSecretAwsResource", new()
{
RotatorType = "string",
TargetName = "string",
GraceRotation = "string",
SecureAccessCertificateIssuer = "string",
AwsRegion = "string",
DeleteProtection = "string",
Description = "string",
ApiId = "string",
GraceRotationHour = 0,
GraceRotationInterval = "string",
ItemCustomFields =
{
{ "string", "string" },
},
KeepPrevVersion = "string",
Key = "string",
MaxVersions = "string",
AutoRotate = "string",
Name = "string",
RotationInterval = "string",
RotatedSecretAwsId = "string",
RotationEventIns = new[]
{
"string",
},
RotationHour = 0,
RotateAfterDisconnect = "string",
AuthenticationCredentials = "string",
SecureAccessAwsAccountId = "string",
SecureAccessAwsNativeCli = false,
PasswordLength = "string",
SecureAccessEnable = "string",
Tags = new[]
{
"string",
},
ApiKey = "string",
});
example, err := akeyless.NewRotatedSecretAws(ctx, "rotatedSecretAwsResource", &akeyless.RotatedSecretAwsArgs{
RotatorType: pulumi.String("string"),
TargetName: pulumi.String("string"),
GraceRotation: pulumi.String("string"),
SecureAccessCertificateIssuer: pulumi.String("string"),
AwsRegion: pulumi.String("string"),
DeleteProtection: pulumi.String("string"),
Description: pulumi.String("string"),
ApiId: pulumi.String("string"),
GraceRotationHour: pulumi.Float64(0),
GraceRotationInterval: pulumi.String("string"),
ItemCustomFields: pulumi.StringMap{
"string": pulumi.String("string"),
},
KeepPrevVersion: pulumi.String("string"),
Key: pulumi.String("string"),
MaxVersions: pulumi.String("string"),
AutoRotate: pulumi.String("string"),
Name: pulumi.String("string"),
RotationInterval: pulumi.String("string"),
RotatedSecretAwsId: pulumi.String("string"),
RotationEventIns: pulumi.StringArray{
pulumi.String("string"),
},
RotationHour: pulumi.Float64(0),
RotateAfterDisconnect: pulumi.String("string"),
AuthenticationCredentials: pulumi.String("string"),
SecureAccessAwsAccountId: pulumi.String("string"),
SecureAccessAwsNativeCli: pulumi.Bool(false),
PasswordLength: pulumi.String("string"),
SecureAccessEnable: pulumi.String("string"),
Tags: pulumi.StringArray{
pulumi.String("string"),
},
ApiKey: pulumi.String("string"),
})
resource "akeyless_rotatedsecretaws" "rotatedSecretAwsResource" {
rotator_type = "string"
target_name = "string"
grace_rotation = "string"
secure_access_certificate_issuer = "string"
aws_region = "string"
delete_protection = "string"
description = "string"
api_id = "string"
grace_rotation_hour = 0
grace_rotation_interval = "string"
item_custom_fields = {
"string" = "string"
}
keep_prev_version = "string"
key = "string"
max_versions = "string"
auto_rotate = "string"
name = "string"
rotation_interval = "string"
rotated_secret_aws_id = "string"
rotation_event_ins = ["string"]
rotation_hour = 0
rotate_after_disconnect = "string"
authentication_credentials = "string"
secure_access_aws_account_id = "string"
secure_access_aws_native_cli = false
password_length = "string"
secure_access_enable = "string"
tags = ["string"]
api_key = "string"
}
var rotatedSecretAwsResource = new RotatedSecretAws("rotatedSecretAwsResource", RotatedSecretAwsArgs.builder()
.rotatorType("string")
.targetName("string")
.graceRotation("string")
.secureAccessCertificateIssuer("string")
.awsRegion("string")
.deleteProtection("string")
.description("string")
.apiId("string")
.graceRotationHour(0.0)
.graceRotationInterval("string")
.itemCustomFields(Map.of("string", "string"))
.keepPrevVersion("string")
.key("string")
.maxVersions("string")
.autoRotate("string")
.name("string")
.rotationInterval("string")
.rotatedSecretAwsId("string")
.rotationEventIns("string")
.rotationHour(0.0)
.rotateAfterDisconnect("string")
.authenticationCredentials("string")
.secureAccessAwsAccountId("string")
.secureAccessAwsNativeCli(false)
.passwordLength("string")
.secureAccessEnable("string")
.tags("string")
.apiKey("string")
.build());
rotated_secret_aws_resource = akeyless.RotatedSecretAws("rotatedSecretAwsResource",
rotator_type="string",
target_name="string",
grace_rotation="string",
secure_access_certificate_issuer="string",
aws_region="string",
delete_protection="string",
description="string",
api_id="string",
grace_rotation_hour=float(0),
grace_rotation_interval="string",
item_custom_fields={
"string": "string",
},
keep_prev_version="string",
key="string",
max_versions="string",
auto_rotate="string",
name="string",
rotation_interval="string",
rotated_secret_aws_id="string",
rotation_event_ins=["string"],
rotation_hour=float(0),
rotate_after_disconnect="string",
authentication_credentials="string",
secure_access_aws_account_id="string",
secure_access_aws_native_cli=False,
password_length="string",
secure_access_enable="string",
tags=["string"],
api_key="string")
const rotatedSecretAwsResource = new akeyless.RotatedSecretAws("rotatedSecretAwsResource", {
rotatorType: "string",
targetName: "string",
graceRotation: "string",
secureAccessCertificateIssuer: "string",
awsRegion: "string",
deleteProtection: "string",
description: "string",
apiId: "string",
graceRotationHour: 0,
graceRotationInterval: "string",
itemCustomFields: {
string: "string",
},
keepPrevVersion: "string",
key: "string",
maxVersions: "string",
autoRotate: "string",
name: "string",
rotationInterval: "string",
rotatedSecretAwsId: "string",
rotationEventIns: ["string"],
rotationHour: 0,
rotateAfterDisconnect: "string",
authenticationCredentials: "string",
secureAccessAwsAccountId: "string",
secureAccessAwsNativeCli: false,
passwordLength: "string",
secureAccessEnable: "string",
tags: ["string"],
apiKey: "string",
});
type: akeyless:RotatedSecretAws
properties:
apiId: string
apiKey: string
authenticationCredentials: string
autoRotate: string
awsRegion: string
deleteProtection: string
description: string
graceRotation: string
graceRotationHour: 0
graceRotationInterval: string
itemCustomFields:
string: string
keepPrevVersion: string
key: string
maxVersions: string
name: string
passwordLength: string
rotateAfterDisconnect: string
rotatedSecretAwsId: string
rotationEventIns:
- string
rotationHour: 0
rotationInterval: string
rotatorType: string
secureAccessAwsAccountId: string
secureAccessAwsNativeCli: false
secureAccessCertificateIssuer: string
secureAccessEnable: string
tags:
- string
targetName: string
RotatedSecretAws Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The RotatedSecretAws resource accepts the following input properties:
- Rotator
Type string - The rotator type. options: [target/api-key]
- Target
Name string - Target name
- Api
Id string - API ID to rotate (relevant only for rotator-type=api-key)
- Api
Key string - API key to rotate (relevant only for rotator-type=api-key)
- Authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- Auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- Aws
Region string - Aws Region
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Grace
Rotation string - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- Grace
Rotation doubleHour - The Hour of the grace rotation in UTC
- Grace
Rotation stringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- Item
Custom Dictionary<string, string>Fields - Additional custom fields to associate with the item
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults.
- Name string
- Rotated secret name
- Password
Length string - The length of the password to be generated
- Rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- Rotated
Secret stringAws Id - The ID of this resource.
- Rotation
Event List<string>Ins - How many days before the rotation of the item would you like to be notified
- Rotation
Hour double - The Hour of the rotation in UTC
- Rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- Secure
Access stringAws Account Id - The AWS account id
- Secure
Access boolAws Native Cli - The AWS native cli
- Secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- List<string>
- Add tags attached to this object
- Rotator
Type string - The rotator type. options: [target/api-key]
- Target
Name string - Target name
- Api
Id string - API ID to rotate (relevant only for rotator-type=api-key)
- Api
Key string - API key to rotate (relevant only for rotator-type=api-key)
- Authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- Auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- Aws
Region string - Aws Region
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Grace
Rotation string - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- Grace
Rotation float64Hour - The Hour of the grace rotation in UTC
- Grace
Rotation stringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- Item
Custom map[string]stringFields - Additional custom fields to associate with the item
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults.
- Name string
- Rotated secret name
- Password
Length string - The length of the password to be generated
- Rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- Rotated
Secret stringAws Id - The ID of this resource.
- Rotation
Event []stringIns - How many days before the rotation of the item would you like to be notified
- Rotation
Hour float64 - The Hour of the rotation in UTC
- Rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- Secure
Access stringAws Account Id - The AWS account id
- Secure
Access boolAws Native Cli - The AWS native cli
- Secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- []string
- Add tags attached to this object
- rotator_
type string - The rotator type. options: [target/api-key]
- target_
name string - Target name
- api_
id string - API ID to rotate (relevant only for rotator-type=api-key)
- api_
key string - API key to rotate (relevant only for rotator-type=api-key)
- authentication_
credentials string - The credentials to connect with use-self-creds/use-target-creds
- auto_
rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws_
region string - Aws Region
- delete_
protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- grace_
rotation string - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace_
rotation_ numberhour - The Hour of the grace rotation in UTC
- grace_
rotation_ stringinterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item_
custom_ map(string)fields - Additional custom fields to associate with the item
- keep_
prev_ stringversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max_
versions string - Set the maximum number of versions, limited by the account settings defaults.
- name string
- Rotated secret name
- password_
length string - The length of the password to be generated
- rotate_
after_ stringdisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated_
secret_ stringaws_ id - The ID of this resource.
- rotation_
event_ list(string)ins - How many days before the rotation of the item would you like to be notified
- rotation_
hour number - The Hour of the rotation in UTC
- rotation_
interval string - The number of days to wait between every automatic key rotation (1-365)
- secure_
access_ stringaws_ account_ id - The AWS account id
- secure_
access_ boolaws_ native_ cli - The AWS native cli
- secure_
access_ stringcertificate_ issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure_
access_ stringenable - Enable/Disable secure remote access [true/false]
- list(string)
- Add tags attached to this object
- rotator
Type String - The rotator type. options: [target/api-key]
- target
Name String - Target name
- api
Id String - API ID to rotate (relevant only for rotator-type=api-key)
- api
Key String - API key to rotate (relevant only for rotator-type=api-key)
- authentication
Credentials String - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate String - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws
Region String - Aws Region
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- grace
Rotation String - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace
Rotation DoubleHour - The Hour of the grace rotation in UTC
- grace
Rotation StringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item
Custom Map<String,String>Fields - Additional custom fields to associate with the item
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key String
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults.
- name String
- Rotated secret name
- password
Length String - The length of the password to be generated
- rotate
After StringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret StringAws Id - The ID of this resource.
- rotation
Event List<String>Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour Double - The Hour of the rotation in UTC
- rotation
Interval String - The number of days to wait between every automatic key rotation (1-365)
- secure
Access StringAws Account Id - The AWS account id
- secure
Access BooleanAws Native Cli - The AWS native cli
- secure
Access StringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- List<String>
- Add tags attached to this object
- rotator
Type string - The rotator type. options: [target/api-key]
- target
Name string - Target name
- api
Id string - API ID to rotate (relevant only for rotator-type=api-key)
- api
Key string - API key to rotate (relevant only for rotator-type=api-key)
- authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws
Region string - Aws Region
- delete
Protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- grace
Rotation string - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace
Rotation numberHour - The Hour of the grace rotation in UTC
- grace
Rotation stringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item
Custom {[key: string]: string}Fields - Additional custom fields to associate with the item
- keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions string - Set the maximum number of versions, limited by the account settings defaults.
- name string
- Rotated secret name
- password
Length string - The length of the password to be generated
- rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret stringAws Id - The ID of this resource.
- rotation
Event string[]Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour number - The Hour of the rotation in UTC
- rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- secure
Access stringAws Account Id - The AWS account id
- secure
Access booleanAws Native Cli - The AWS native cli
- secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- string[]
- Add tags attached to this object
- rotator_
type str - The rotator type. options: [target/api-key]
- target_
name str - Target name
- api_
id str - API ID to rotate (relevant only for rotator-type=api-key)
- api_
key str - API key to rotate (relevant only for rotator-type=api-key)
- authentication_
credentials str - The credentials to connect with use-self-creds/use-target-creds
- auto_
rotate str - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws_
region str - Aws Region
- delete_
protection str - Protection from accidental deletion of this object [true/false]
- description str
- Description of the object
- grace_
rotation str - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace_
rotation_ floathour - The Hour of the grace rotation in UTC
- grace_
rotation_ strinterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item_
custom_ Mapping[str, str]fields - Additional custom fields to associate with the item
- keep_
prev_ strversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key str
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max_
versions str - Set the maximum number of versions, limited by the account settings defaults.
- name str
- Rotated secret name
- password_
length str - The length of the password to be generated
- rotate_
after_ strdisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated_
secret_ straws_ id - The ID of this resource.
- rotation_
event_ Sequence[str]ins - How many days before the rotation of the item would you like to be notified
- rotation_
hour float - The Hour of the rotation in UTC
- rotation_
interval str - The number of days to wait between every automatic key rotation (1-365)
- secure_
access_ straws_ account_ id - The AWS account id
- secure_
access_ boolaws_ native_ cli - The AWS native cli
- secure_
access_ strcertificate_ issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure_
access_ strenable - Enable/Disable secure remote access [true/false]
- Sequence[str]
- Add tags attached to this object
- rotator
Type String - The rotator type. options: [target/api-key]
- target
Name String - Target name
- api
Id String - API ID to rotate (relevant only for rotator-type=api-key)
- api
Key String - API key to rotate (relevant only for rotator-type=api-key)
- authentication
Credentials String - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate String - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws
Region String - Aws Region
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- grace
Rotation String - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace
Rotation NumberHour - The Hour of the grace rotation in UTC
- grace
Rotation StringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item
Custom Map<String>Fields - Additional custom fields to associate with the item
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key String
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults.
- name String
- Rotated secret name
- password
Length String - The length of the password to be generated
- rotate
After StringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret StringAws Id - The ID of this resource.
- rotation
Event List<String>Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour Number - The Hour of the rotation in UTC
- rotation
Interval String - The number of days to wait between every automatic key rotation (1-365)
- secure
Access StringAws Account Id - The AWS account id
- secure
Access BooleanAws Native Cli - The AWS native cli
- secure
Access StringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- List<String>
- Add tags attached to this object
Outputs
All input properties are implicitly available as output properties. Additionally, the RotatedSecretAws resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing RotatedSecretAws Resource
Get an existing RotatedSecretAws resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: RotatedSecretAwsState, opts?: CustomResourceOptions): RotatedSecretAws@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
api_id: Optional[str] = None,
api_key: Optional[str] = None,
authentication_credentials: Optional[str] = None,
auto_rotate: Optional[str] = None,
aws_region: Optional[str] = None,
delete_protection: Optional[str] = None,
description: Optional[str] = None,
grace_rotation: Optional[str] = None,
grace_rotation_hour: Optional[float] = None,
grace_rotation_interval: Optional[str] = None,
item_custom_fields: Optional[Mapping[str, str]] = None,
keep_prev_version: Optional[str] = None,
key: Optional[str] = None,
max_versions: Optional[str] = None,
name: Optional[str] = None,
password_length: Optional[str] = None,
rotate_after_disconnect: Optional[str] = None,
rotated_secret_aws_id: Optional[str] = None,
rotation_event_ins: Optional[Sequence[str]] = None,
rotation_hour: Optional[float] = None,
rotation_interval: Optional[str] = None,
rotator_type: Optional[str] = None,
secure_access_aws_account_id: Optional[str] = None,
secure_access_aws_native_cli: Optional[bool] = None,
secure_access_certificate_issuer: Optional[str] = None,
secure_access_enable: Optional[str] = None,
tags: Optional[Sequence[str]] = None,
target_name: Optional[str] = None) -> RotatedSecretAwsfunc GetRotatedSecretAws(ctx *Context, name string, id IDInput, state *RotatedSecretAwsState, opts ...ResourceOption) (*RotatedSecretAws, error)public static RotatedSecretAws Get(string name, Input<string> id, RotatedSecretAwsState? state, CustomResourceOptions? opts = null)public static RotatedSecretAws get(String name, Output<String> id, RotatedSecretAwsState state, CustomResourceOptions options)resources: _: type: akeyless:RotatedSecretAws get: id: ${id}import {
to = akeyless_rotatedsecretaws.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Api
Id string - API ID to rotate (relevant only for rotator-type=api-key)
- Api
Key string - API key to rotate (relevant only for rotator-type=api-key)
- Authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- Auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- Aws
Region string - Aws Region
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Grace
Rotation string - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- Grace
Rotation doubleHour - The Hour of the grace rotation in UTC
- Grace
Rotation stringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- Item
Custom Dictionary<string, string>Fields - Additional custom fields to associate with the item
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults.
- Name string
- Rotated secret name
- Password
Length string - The length of the password to be generated
- Rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- Rotated
Secret stringAws Id - The ID of this resource.
- Rotation
Event List<string>Ins - How many days before the rotation of the item would you like to be notified
- Rotation
Hour double - The Hour of the rotation in UTC
- Rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- Rotator
Type string - The rotator type. options: [target/api-key]
- Secure
Access stringAws Account Id - The AWS account id
- Secure
Access boolAws Native Cli - The AWS native cli
- Secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- List<string>
- Add tags attached to this object
- Target
Name string - Target name
- Api
Id string - API ID to rotate (relevant only for rotator-type=api-key)
- Api
Key string - API key to rotate (relevant only for rotator-type=api-key)
- Authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- Auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- Aws
Region string - Aws Region
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Grace
Rotation string - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- Grace
Rotation float64Hour - The Hour of the grace rotation in UTC
- Grace
Rotation stringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- Item
Custom map[string]stringFields - Additional custom fields to associate with the item
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults.
- Name string
- Rotated secret name
- Password
Length string - The length of the password to be generated
- Rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- Rotated
Secret stringAws Id - The ID of this resource.
- Rotation
Event []stringIns - How many days before the rotation of the item would you like to be notified
- Rotation
Hour float64 - The Hour of the rotation in UTC
- Rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- Rotator
Type string - The rotator type. options: [target/api-key]
- Secure
Access stringAws Account Id - The AWS account id
- Secure
Access boolAws Native Cli - The AWS native cli
- Secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- []string
- Add tags attached to this object
- Target
Name string - Target name
- api_
id string - API ID to rotate (relevant only for rotator-type=api-key)
- api_
key string - API key to rotate (relevant only for rotator-type=api-key)
- authentication_
credentials string - The credentials to connect with use-self-creds/use-target-creds
- auto_
rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws_
region string - Aws Region
- delete_
protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- grace_
rotation string - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace_
rotation_ numberhour - The Hour of the grace rotation in UTC
- grace_
rotation_ stringinterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item_
custom_ map(string)fields - Additional custom fields to associate with the item
- keep_
prev_ stringversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max_
versions string - Set the maximum number of versions, limited by the account settings defaults.
- name string
- Rotated secret name
- password_
length string - The length of the password to be generated
- rotate_
after_ stringdisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated_
secret_ stringaws_ id - The ID of this resource.
- rotation_
event_ list(string)ins - How many days before the rotation of the item would you like to be notified
- rotation_
hour number - The Hour of the rotation in UTC
- rotation_
interval string - The number of days to wait between every automatic key rotation (1-365)
- rotator_
type string - The rotator type. options: [target/api-key]
- secure_
access_ stringaws_ account_ id - The AWS account id
- secure_
access_ boolaws_ native_ cli - The AWS native cli
- secure_
access_ stringcertificate_ issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure_
access_ stringenable - Enable/Disable secure remote access [true/false]
- list(string)
- Add tags attached to this object
- target_
name string - Target name
- api
Id String - API ID to rotate (relevant only for rotator-type=api-key)
- api
Key String - API key to rotate (relevant only for rotator-type=api-key)
- authentication
Credentials String - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate String - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws
Region String - Aws Region
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- grace
Rotation String - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace
Rotation DoubleHour - The Hour of the grace rotation in UTC
- grace
Rotation StringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item
Custom Map<String,String>Fields - Additional custom fields to associate with the item
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key String
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults.
- name String
- Rotated secret name
- password
Length String - The length of the password to be generated
- rotate
After StringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret StringAws Id - The ID of this resource.
- rotation
Event List<String>Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour Double - The Hour of the rotation in UTC
- rotation
Interval String - The number of days to wait between every automatic key rotation (1-365)
- rotator
Type String - The rotator type. options: [target/api-key]
- secure
Access StringAws Account Id - The AWS account id
- secure
Access BooleanAws Native Cli - The AWS native cli
- secure
Access StringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- List<String>
- Add tags attached to this object
- target
Name String - Target name
- api
Id string - API ID to rotate (relevant only for rotator-type=api-key)
- api
Key string - API key to rotate (relevant only for rotator-type=api-key)
- authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws
Region string - Aws Region
- delete
Protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- grace
Rotation string - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace
Rotation numberHour - The Hour of the grace rotation in UTC
- grace
Rotation stringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item
Custom {[key: string]: string}Fields - Additional custom fields to associate with the item
- keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions string - Set the maximum number of versions, limited by the account settings defaults.
- name string
- Rotated secret name
- password
Length string - The length of the password to be generated
- rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret stringAws Id - The ID of this resource.
- rotation
Event string[]Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour number - The Hour of the rotation in UTC
- rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- rotator
Type string - The rotator type. options: [target/api-key]
- secure
Access stringAws Account Id - The AWS account id
- secure
Access booleanAws Native Cli - The AWS native cli
- secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- string[]
- Add tags attached to this object
- target
Name string - Target name
- api_
id str - API ID to rotate (relevant only for rotator-type=api-key)
- api_
key str - API key to rotate (relevant only for rotator-type=api-key)
- authentication_
credentials str - The credentials to connect with use-self-creds/use-target-creds
- auto_
rotate str - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws_
region str - Aws Region
- delete_
protection str - Protection from accidental deletion of this object [true/false]
- description str
- Description of the object
- grace_
rotation str - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace_
rotation_ floathour - The Hour of the grace rotation in UTC
- grace_
rotation_ strinterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item_
custom_ Mapping[str, str]fields - Additional custom fields to associate with the item
- keep_
prev_ strversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key str
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max_
versions str - Set the maximum number of versions, limited by the account settings defaults.
- name str
- Rotated secret name
- password_
length str - The length of the password to be generated
- rotate_
after_ strdisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated_
secret_ straws_ id - The ID of this resource.
- rotation_
event_ Sequence[str]ins - How many days before the rotation of the item would you like to be notified
- rotation_
hour float - The Hour of the rotation in UTC
- rotation_
interval str - The number of days to wait between every automatic key rotation (1-365)
- rotator_
type str - The rotator type. options: [target/api-key]
- secure_
access_ straws_ account_ id - The AWS account id
- secure_
access_ boolaws_ native_ cli - The AWS native cli
- secure_
access_ strcertificate_ issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure_
access_ strenable - Enable/Disable secure remote access [true/false]
- Sequence[str]
- Add tags attached to this object
- target_
name str - Target name
- api
Id String - API ID to rotate (relevant only for rotator-type=api-key)
- api
Key String - API key to rotate (relevant only for rotator-type=api-key)
- authentication
Credentials String - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate String - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- aws
Region String - Aws Region
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- grace
Rotation String - Create a new access key without deleting the old key from AWS/Azure/GCP for backup (relevant only for AWS/Azure/GCP) [true/false]
- grace
Rotation NumberHour - The Hour of the grace rotation in UTC
- grace
Rotation StringInterval - The number of days to wait before deleting the old key (must be bigger than rotation-interval)
- item
Custom Map<String>Fields - Additional custom fields to associate with the item
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key String
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults.
- name String
- Rotated secret name
- password
Length String - The length of the password to be generated
- rotate
After StringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret StringAws Id - The ID of this resource.
- rotation
Event List<String>Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour Number - The Hour of the rotation in UTC
- rotation
Interval String - The number of days to wait between every automatic key rotation (1-365)
- rotator
Type String - The rotator type. options: [target/api-key]
- secure
Access StringAws Account Id - The AWS account id
- secure
Access BooleanAws Native Cli - The AWS native cli
- secure
Access StringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- List<String>
- Add tags attached to this object
- target
Name String - Target name
Package Details
- Repository
- akeyless akeyless-community/terraform-provider-akeyless
- License
- Notes
- This Pulumi package is based on the
akeylessTerraform Provider.
published on Monday, Apr 27, 2026 by akeyless-community
