published on Monday, Apr 27, 2026 by akeyless-community
published on Monday, Apr 27, 2026 by akeyless-community
Custom rotated secret resource
Create RotatedSecretCustom Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new RotatedSecretCustom(name: string, args: RotatedSecretCustomArgs, opts?: CustomResourceOptions);@overload
def RotatedSecretCustom(resource_name: str,
args: RotatedSecretCustomArgs,
opts: Optional[ResourceOptions] = None)
@overload
def RotatedSecretCustom(resource_name: str,
opts: Optional[ResourceOptions] = None,
target_name: Optional[str] = None,
rotation_interval: Optional[str] = None,
secure_access_certificate_issuer: Optional[str] = None,
delete_protection: Optional[str] = None,
description: Optional[str] = None,
enable_password_policy: Optional[str] = None,
item_custom_fields: Optional[Mapping[str, str]] = None,
keep_prev_version: Optional[str] = None,
key: Optional[str] = None,
max_versions: Optional[str] = None,
name: Optional[str] = None,
secure_access_enable: Optional[str] = None,
rotate_after_disconnect: Optional[str] = None,
rotated_secret_custom_id: Optional[str] = None,
rotation_event_ins: Optional[Sequence[str]] = None,
rotation_hour: Optional[float] = None,
authentication_credentials: Optional[str] = None,
custom_payload: Optional[str] = None,
secure_access_allow_external_user: Optional[bool] = None,
password_length: Optional[str] = None,
secure_access_hosts: Optional[Sequence[str]] = None,
secure_access_rdp_domain: Optional[str] = None,
secure_access_rdp_user: Optional[str] = None,
secure_access_ssh_user: Optional[str] = None,
secure_access_url: Optional[str] = None,
secure_access_web: Optional[bool] = None,
secure_access_web_browsing: Optional[bool] = None,
secure_access_web_proxy: Optional[bool] = None,
tags: Optional[Sequence[str]] = None,
auto_rotate: Optional[str] = None,
timeout_sec: Optional[float] = None,
use_capital_letters: Optional[str] = None,
use_lower_letters: Optional[str] = None,
use_numbers: Optional[str] = None,
use_special_characters: Optional[str] = None)func NewRotatedSecretCustom(ctx *Context, name string, args RotatedSecretCustomArgs, opts ...ResourceOption) (*RotatedSecretCustom, error)public RotatedSecretCustom(string name, RotatedSecretCustomArgs args, CustomResourceOptions? opts = null)
public RotatedSecretCustom(String name, RotatedSecretCustomArgs args)
public RotatedSecretCustom(String name, RotatedSecretCustomArgs args, CustomResourceOptions options)
type: akeyless:RotatedSecretCustom
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "akeyless_rotatedsecretcustom" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args RotatedSecretCustomArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args RotatedSecretCustomArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args RotatedSecretCustomArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args RotatedSecretCustomArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args RotatedSecretCustomArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var rotatedSecretCustomResource = new Akeyless.RotatedSecretCustom("rotatedSecretCustomResource", new()
{
TargetName = "string",
RotationInterval = "string",
SecureAccessCertificateIssuer = "string",
DeleteProtection = "string",
Description = "string",
EnablePasswordPolicy = "string",
ItemCustomFields =
{
{ "string", "string" },
},
KeepPrevVersion = "string",
Key = "string",
MaxVersions = "string",
Name = "string",
SecureAccessEnable = "string",
RotateAfterDisconnect = "string",
RotatedSecretCustomId = "string",
RotationEventIns = new[]
{
"string",
},
RotationHour = 0,
AuthenticationCredentials = "string",
CustomPayload = "string",
SecureAccessAllowExternalUser = false,
PasswordLength = "string",
SecureAccessHosts = new[]
{
"string",
},
SecureAccessRdpDomain = "string",
SecureAccessRdpUser = "string",
SecureAccessSshUser = "string",
SecureAccessUrl = "string",
SecureAccessWeb = false,
SecureAccessWebBrowsing = false,
SecureAccessWebProxy = false,
Tags = new[]
{
"string",
},
AutoRotate = "string",
TimeoutSec = 0,
UseCapitalLetters = "string",
UseLowerLetters = "string",
UseNumbers = "string",
UseSpecialCharacters = "string",
});
example, err := akeyless.NewRotatedSecretCustom(ctx, "rotatedSecretCustomResource", &akeyless.RotatedSecretCustomArgs{
TargetName: pulumi.String("string"),
RotationInterval: pulumi.String("string"),
SecureAccessCertificateIssuer: pulumi.String("string"),
DeleteProtection: pulumi.String("string"),
Description: pulumi.String("string"),
EnablePasswordPolicy: pulumi.String("string"),
ItemCustomFields: pulumi.StringMap{
"string": pulumi.String("string"),
},
KeepPrevVersion: pulumi.String("string"),
Key: pulumi.String("string"),
MaxVersions: pulumi.String("string"),
Name: pulumi.String("string"),
SecureAccessEnable: pulumi.String("string"),
RotateAfterDisconnect: pulumi.String("string"),
RotatedSecretCustomId: pulumi.String("string"),
RotationEventIns: pulumi.StringArray{
pulumi.String("string"),
},
RotationHour: pulumi.Float64(0),
AuthenticationCredentials: pulumi.String("string"),
CustomPayload: pulumi.String("string"),
SecureAccessAllowExternalUser: pulumi.Bool(false),
PasswordLength: pulumi.String("string"),
SecureAccessHosts: pulumi.StringArray{
pulumi.String("string"),
},
SecureAccessRdpDomain: pulumi.String("string"),
SecureAccessRdpUser: pulumi.String("string"),
SecureAccessSshUser: pulumi.String("string"),
SecureAccessUrl: pulumi.String("string"),
SecureAccessWeb: pulumi.Bool(false),
SecureAccessWebBrowsing: pulumi.Bool(false),
SecureAccessWebProxy: pulumi.Bool(false),
Tags: pulumi.StringArray{
pulumi.String("string"),
},
AutoRotate: pulumi.String("string"),
TimeoutSec: pulumi.Float64(0),
UseCapitalLetters: pulumi.String("string"),
UseLowerLetters: pulumi.String("string"),
UseNumbers: pulumi.String("string"),
UseSpecialCharacters: pulumi.String("string"),
})
resource "akeyless_rotatedsecretcustom" "rotatedSecretCustomResource" {
target_name = "string"
rotation_interval = "string"
secure_access_certificate_issuer = "string"
delete_protection = "string"
description = "string"
enable_password_policy = "string"
item_custom_fields = {
"string" = "string"
}
keep_prev_version = "string"
key = "string"
max_versions = "string"
name = "string"
secure_access_enable = "string"
rotate_after_disconnect = "string"
rotated_secret_custom_id = "string"
rotation_event_ins = ["string"]
rotation_hour = 0
authentication_credentials = "string"
custom_payload = "string"
secure_access_allow_external_user = false
password_length = "string"
secure_access_hosts = ["string"]
secure_access_rdp_domain = "string"
secure_access_rdp_user = "string"
secure_access_ssh_user = "string"
secure_access_url = "string"
secure_access_web = false
secure_access_web_browsing = false
secure_access_web_proxy = false
tags = ["string"]
auto_rotate = "string"
timeout_sec = 0
use_capital_letters = "string"
use_lower_letters = "string"
use_numbers = "string"
use_special_characters = "string"
}
var rotatedSecretCustomResource = new RotatedSecretCustom("rotatedSecretCustomResource", RotatedSecretCustomArgs.builder()
.targetName("string")
.rotationInterval("string")
.secureAccessCertificateIssuer("string")
.deleteProtection("string")
.description("string")
.enablePasswordPolicy("string")
.itemCustomFields(Map.of("string", "string"))
.keepPrevVersion("string")
.key("string")
.maxVersions("string")
.name("string")
.secureAccessEnable("string")
.rotateAfterDisconnect("string")
.rotatedSecretCustomId("string")
.rotationEventIns("string")
.rotationHour(0.0)
.authenticationCredentials("string")
.customPayload("string")
.secureAccessAllowExternalUser(false)
.passwordLength("string")
.secureAccessHosts("string")
.secureAccessRdpDomain("string")
.secureAccessRdpUser("string")
.secureAccessSshUser("string")
.secureAccessUrl("string")
.secureAccessWeb(false)
.secureAccessWebBrowsing(false)
.secureAccessWebProxy(false)
.tags("string")
.autoRotate("string")
.timeoutSec(0.0)
.useCapitalLetters("string")
.useLowerLetters("string")
.useNumbers("string")
.useSpecialCharacters("string")
.build());
rotated_secret_custom_resource = akeyless.RotatedSecretCustom("rotatedSecretCustomResource",
target_name="string",
rotation_interval="string",
secure_access_certificate_issuer="string",
delete_protection="string",
description="string",
enable_password_policy="string",
item_custom_fields={
"string": "string",
},
keep_prev_version="string",
key="string",
max_versions="string",
name="string",
secure_access_enable="string",
rotate_after_disconnect="string",
rotated_secret_custom_id="string",
rotation_event_ins=["string"],
rotation_hour=float(0),
authentication_credentials="string",
custom_payload="string",
secure_access_allow_external_user=False,
password_length="string",
secure_access_hosts=["string"],
secure_access_rdp_domain="string",
secure_access_rdp_user="string",
secure_access_ssh_user="string",
secure_access_url="string",
secure_access_web=False,
secure_access_web_browsing=False,
secure_access_web_proxy=False,
tags=["string"],
auto_rotate="string",
timeout_sec=float(0),
use_capital_letters="string",
use_lower_letters="string",
use_numbers="string",
use_special_characters="string")
const rotatedSecretCustomResource = new akeyless.RotatedSecretCustom("rotatedSecretCustomResource", {
targetName: "string",
rotationInterval: "string",
secureAccessCertificateIssuer: "string",
deleteProtection: "string",
description: "string",
enablePasswordPolicy: "string",
itemCustomFields: {
string: "string",
},
keepPrevVersion: "string",
key: "string",
maxVersions: "string",
name: "string",
secureAccessEnable: "string",
rotateAfterDisconnect: "string",
rotatedSecretCustomId: "string",
rotationEventIns: ["string"],
rotationHour: 0,
authenticationCredentials: "string",
customPayload: "string",
secureAccessAllowExternalUser: false,
passwordLength: "string",
secureAccessHosts: ["string"],
secureAccessRdpDomain: "string",
secureAccessRdpUser: "string",
secureAccessSshUser: "string",
secureAccessUrl: "string",
secureAccessWeb: false,
secureAccessWebBrowsing: false,
secureAccessWebProxy: false,
tags: ["string"],
autoRotate: "string",
timeoutSec: 0,
useCapitalLetters: "string",
useLowerLetters: "string",
useNumbers: "string",
useSpecialCharacters: "string",
});
type: akeyless:RotatedSecretCustom
properties:
authenticationCredentials: string
autoRotate: string
customPayload: string
deleteProtection: string
description: string
enablePasswordPolicy: string
itemCustomFields:
string: string
keepPrevVersion: string
key: string
maxVersions: string
name: string
passwordLength: string
rotateAfterDisconnect: string
rotatedSecretCustomId: string
rotationEventIns:
- string
rotationHour: 0
rotationInterval: string
secureAccessAllowExternalUser: false
secureAccessCertificateIssuer: string
secureAccessEnable: string
secureAccessHosts:
- string
secureAccessRdpDomain: string
secureAccessRdpUser: string
secureAccessSshUser: string
secureAccessUrl: string
secureAccessWeb: false
secureAccessWebBrowsing: false
secureAccessWebProxy: false
tags:
- string
targetName: string
timeoutSec: 0
useCapitalLetters: string
useLowerLetters: string
useNumbers: string
useSpecialCharacters: string
RotatedSecretCustom Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The RotatedSecretCustom resource accepts the following input properties:
- Target
Name string - The target name to associate
- Authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- Auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- Custom
Payload string - Secret payload to be sent with rotation request
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Enable
Password stringPolicy - Enable password policy
- Item
Custom Dictionary<string, string>Fields - Additional custom fields to associate with the item
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- Name string
- Secret name
- Password
Length string - The length of the password to be generated
- Rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- Rotated
Secret stringCustom Id - The ID of this resource.
- Rotation
Event List<string>Ins - How many days before the rotation of the item would you like to be notified
- Rotation
Hour double - The Hour of the rotation in UTC
- Rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- Secure
Access boolAllow External User - Allow providing external user for a domain users
- Secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- Secure
Access List<string>Hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- Secure
Access stringRdp Domain - Default domain name server. i.e. microsoft.com
- Secure
Access stringRdp User - Override the RDP Domain username
- Secure
Access stringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- Secure
Access stringUrl - Destination URL to inject secrets
- Secure
Access boolWeb - Enable Web Secure Remote Access
- Secure
Access boolWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- Secure
Access boolWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<string>
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- Timeout
Sec double - Maximum allowed time in seconds for the custom rotator to return the results
- Use
Capital stringLetters - Password must contain capital letters [true/false]
- Use
Lower stringLetters - Password must contain lower case letters [true/false]
- Use
Numbers string - Password must contain numbers [true/false]
- Use
Special stringCharacters - Password must contain special characters [true/false]
- Target
Name string - The target name to associate
- Authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- Auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- Custom
Payload string - Secret payload to be sent with rotation request
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Enable
Password stringPolicy - Enable password policy
- Item
Custom map[string]stringFields - Additional custom fields to associate with the item
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- Name string
- Secret name
- Password
Length string - The length of the password to be generated
- Rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- Rotated
Secret stringCustom Id - The ID of this resource.
- Rotation
Event []stringIns - How many days before the rotation of the item would you like to be notified
- Rotation
Hour float64 - The Hour of the rotation in UTC
- Rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- Secure
Access boolAllow External User - Allow providing external user for a domain users
- Secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- Secure
Access []stringHosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- Secure
Access stringRdp Domain - Default domain name server. i.e. microsoft.com
- Secure
Access stringRdp User - Override the RDP Domain username
- Secure
Access stringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- Secure
Access stringUrl - Destination URL to inject secrets
- Secure
Access boolWeb - Enable Web Secure Remote Access
- Secure
Access boolWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- Secure
Access boolWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- []string
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- Timeout
Sec float64 - Maximum allowed time in seconds for the custom rotator to return the results
- Use
Capital stringLetters - Password must contain capital letters [true/false]
- Use
Lower stringLetters - Password must contain lower case letters [true/false]
- Use
Numbers string - Password must contain numbers [true/false]
- Use
Special stringCharacters - Password must contain special characters [true/false]
- target_
name string - The target name to associate
- authentication_
credentials string - The credentials to connect with use-self-creds/use-target-creds
- auto_
rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom_
payload string - Secret payload to be sent with rotation request
- delete_
protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- enable_
password_ stringpolicy - Enable password policy
- item_
custom_ map(string)fields - Additional custom fields to associate with the item
- keep_
prev_ stringversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max_
versions string - Set the maximum number of versions, limited by the account settings defaults
- name string
- Secret name
- password_
length string - The length of the password to be generated
- rotate_
after_ stringdisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated_
secret_ stringcustom_ id - The ID of this resource.
- rotation_
event_ list(string)ins - How many days before the rotation of the item would you like to be notified
- rotation_
hour number - The Hour of the rotation in UTC
- rotation_
interval string - The number of days to wait between every automatic key rotation (1-365)
- secure_
access_ boolallow_ external_ user - Allow providing external user for a domain users
- secure_
access_ stringcertificate_ issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure_
access_ stringenable - Enable/Disable secure remote access [true/false]
- secure_
access_ list(string)hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure_
access_ stringrdp_ domain - Default domain name server. i.e. microsoft.com
- secure_
access_ stringrdp_ user - Override the RDP Domain username
- secure_
access_ stringssh_ user - Override the SSH username as indicated in SSH Certificate Issuer
- secure_
access_ stringurl - Destination URL to inject secrets
- secure_
access_ boolweb - Enable Web Secure Remote Access
- secure_
access_ boolweb_ browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure_
access_ boolweb_ proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- list(string)
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- timeout_
sec number - Maximum allowed time in seconds for the custom rotator to return the results
- use_
capital_ stringletters - Password must contain capital letters [true/false]
- use_
lower_ stringletters - Password must contain lower case letters [true/false]
- use_
numbers string - Password must contain numbers [true/false]
- use_
special_ stringcharacters - Password must contain special characters [true/false]
- target
Name String - The target name to associate
- authentication
Credentials String - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate String - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom
Payload String - Secret payload to be sent with rotation request
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- enable
Password StringPolicy - Enable password policy
- item
Custom Map<String,String>Fields - Additional custom fields to associate with the item
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key String
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults
- name String
- Secret name
- password
Length String - The length of the password to be generated
- rotate
After StringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret StringCustom Id - The ID of this resource.
- rotation
Event List<String>Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour Double - The Hour of the rotation in UTC
- rotation
Interval String - The number of days to wait between every automatic key rotation (1-365)
- secure
Access BooleanAllow External User - Allow providing external user for a domain users
- secure
Access StringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- secure
Access List<String>Hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure
Access StringRdp Domain - Default domain name server. i.e. microsoft.com
- secure
Access StringRdp User - Override the RDP Domain username
- secure
Access StringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- secure
Access StringUrl - Destination URL to inject secrets
- secure
Access BooleanWeb - Enable Web Secure Remote Access
- secure
Access BooleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access BooleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<String>
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- timeout
Sec Double - Maximum allowed time in seconds for the custom rotator to return the results
- use
Capital StringLetters - Password must contain capital letters [true/false]
- use
Lower StringLetters - Password must contain lower case letters [true/false]
- use
Numbers String - Password must contain numbers [true/false]
- use
Special StringCharacters - Password must contain special characters [true/false]
- target
Name string - The target name to associate
- authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom
Payload string - Secret payload to be sent with rotation request
- delete
Protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- enable
Password stringPolicy - Enable password policy
- item
Custom {[key: string]: string}Fields - Additional custom fields to associate with the item
- keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- name string
- Secret name
- password
Length string - The length of the password to be generated
- rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret stringCustom Id - The ID of this resource.
- rotation
Event string[]Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour number - The Hour of the rotation in UTC
- rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- secure
Access booleanAllow External User - Allow providing external user for a domain users
- secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- secure
Access string[]Hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure
Access stringRdp Domain - Default domain name server. i.e. microsoft.com
- secure
Access stringRdp User - Override the RDP Domain username
- secure
Access stringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- secure
Access stringUrl - Destination URL to inject secrets
- secure
Access booleanWeb - Enable Web Secure Remote Access
- secure
Access booleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access booleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- string[]
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- timeout
Sec number - Maximum allowed time in seconds for the custom rotator to return the results
- use
Capital stringLetters - Password must contain capital letters [true/false]
- use
Lower stringLetters - Password must contain lower case letters [true/false]
- use
Numbers string - Password must contain numbers [true/false]
- use
Special stringCharacters - Password must contain special characters [true/false]
- target_
name str - The target name to associate
- authentication_
credentials str - The credentials to connect with use-self-creds/use-target-creds
- auto_
rotate str - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom_
payload str - Secret payload to be sent with rotation request
- delete_
protection str - Protection from accidental deletion of this object [true/false]
- description str
- Description of the object
- enable_
password_ strpolicy - Enable password policy
- item_
custom_ Mapping[str, str]fields - Additional custom fields to associate with the item
- keep_
prev_ strversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key str
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max_
versions str - Set the maximum number of versions, limited by the account settings defaults
- name str
- Secret name
- password_
length str - The length of the password to be generated
- rotate_
after_ strdisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated_
secret_ strcustom_ id - The ID of this resource.
- rotation_
event_ Sequence[str]ins - How many days before the rotation of the item would you like to be notified
- rotation_
hour float - The Hour of the rotation in UTC
- rotation_
interval str - The number of days to wait between every automatic key rotation (1-365)
- secure_
access_ boolallow_ external_ user - Allow providing external user for a domain users
- secure_
access_ strcertificate_ issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure_
access_ strenable - Enable/Disable secure remote access [true/false]
- secure_
access_ Sequence[str]hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure_
access_ strrdp_ domain - Default domain name server. i.e. microsoft.com
- secure_
access_ strrdp_ user - Override the RDP Domain username
- secure_
access_ strssh_ user - Override the SSH username as indicated in SSH Certificate Issuer
- secure_
access_ strurl - Destination URL to inject secrets
- secure_
access_ boolweb - Enable Web Secure Remote Access
- secure_
access_ boolweb_ browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure_
access_ boolweb_ proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- Sequence[str]
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- timeout_
sec float - Maximum allowed time in seconds for the custom rotator to return the results
- use_
capital_ strletters - Password must contain capital letters [true/false]
- use_
lower_ strletters - Password must contain lower case letters [true/false]
- use_
numbers str - Password must contain numbers [true/false]
- use_
special_ strcharacters - Password must contain special characters [true/false]
- target
Name String - The target name to associate
- authentication
Credentials String - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate String - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom
Payload String - Secret payload to be sent with rotation request
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- enable
Password StringPolicy - Enable password policy
- item
Custom Map<String>Fields - Additional custom fields to associate with the item
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key String
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults
- name String
- Secret name
- password
Length String - The length of the password to be generated
- rotate
After StringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret StringCustom Id - The ID of this resource.
- rotation
Event List<String>Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour Number - The Hour of the rotation in UTC
- rotation
Interval String - The number of days to wait between every automatic key rotation (1-365)
- secure
Access BooleanAllow External User - Allow providing external user for a domain users
- secure
Access StringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- secure
Access List<String>Hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure
Access StringRdp Domain - Default domain name server. i.e. microsoft.com
- secure
Access StringRdp User - Override the RDP Domain username
- secure
Access StringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- secure
Access StringUrl - Destination URL to inject secrets
- secure
Access BooleanWeb - Enable Web Secure Remote Access
- secure
Access BooleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access BooleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<String>
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- timeout
Sec Number - Maximum allowed time in seconds for the custom rotator to return the results
- use
Capital StringLetters - Password must contain capital letters [true/false]
- use
Lower StringLetters - Password must contain lower case letters [true/false]
- use
Numbers String - Password must contain numbers [true/false]
- use
Special StringCharacters - Password must contain special characters [true/false]
Outputs
All input properties are implicitly available as output properties. Additionally, the RotatedSecretCustom resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing RotatedSecretCustom Resource
Get an existing RotatedSecretCustom resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: RotatedSecretCustomState, opts?: CustomResourceOptions): RotatedSecretCustom@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
authentication_credentials: Optional[str] = None,
auto_rotate: Optional[str] = None,
custom_payload: Optional[str] = None,
delete_protection: Optional[str] = None,
description: Optional[str] = None,
enable_password_policy: Optional[str] = None,
item_custom_fields: Optional[Mapping[str, str]] = None,
keep_prev_version: Optional[str] = None,
key: Optional[str] = None,
max_versions: Optional[str] = None,
name: Optional[str] = None,
password_length: Optional[str] = None,
rotate_after_disconnect: Optional[str] = None,
rotated_secret_custom_id: Optional[str] = None,
rotation_event_ins: Optional[Sequence[str]] = None,
rotation_hour: Optional[float] = None,
rotation_interval: Optional[str] = None,
secure_access_allow_external_user: Optional[bool] = None,
secure_access_certificate_issuer: Optional[str] = None,
secure_access_enable: Optional[str] = None,
secure_access_hosts: Optional[Sequence[str]] = None,
secure_access_rdp_domain: Optional[str] = None,
secure_access_rdp_user: Optional[str] = None,
secure_access_ssh_user: Optional[str] = None,
secure_access_url: Optional[str] = None,
secure_access_web: Optional[bool] = None,
secure_access_web_browsing: Optional[bool] = None,
secure_access_web_proxy: Optional[bool] = None,
tags: Optional[Sequence[str]] = None,
target_name: Optional[str] = None,
timeout_sec: Optional[float] = None,
use_capital_letters: Optional[str] = None,
use_lower_letters: Optional[str] = None,
use_numbers: Optional[str] = None,
use_special_characters: Optional[str] = None) -> RotatedSecretCustomfunc GetRotatedSecretCustom(ctx *Context, name string, id IDInput, state *RotatedSecretCustomState, opts ...ResourceOption) (*RotatedSecretCustom, error)public static RotatedSecretCustom Get(string name, Input<string> id, RotatedSecretCustomState? state, CustomResourceOptions? opts = null)public static RotatedSecretCustom get(String name, Output<String> id, RotatedSecretCustomState state, CustomResourceOptions options)resources: _: type: akeyless:RotatedSecretCustom get: id: ${id}import {
to = akeyless_rotatedsecretcustom.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- Auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- Custom
Payload string - Secret payload to be sent with rotation request
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Enable
Password stringPolicy - Enable password policy
- Item
Custom Dictionary<string, string>Fields - Additional custom fields to associate with the item
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- Name string
- Secret name
- Password
Length string - The length of the password to be generated
- Rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- Rotated
Secret stringCustom Id - The ID of this resource.
- Rotation
Event List<string>Ins - How many days before the rotation of the item would you like to be notified
- Rotation
Hour double - The Hour of the rotation in UTC
- Rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- Secure
Access boolAllow External User - Allow providing external user for a domain users
- Secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- Secure
Access List<string>Hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- Secure
Access stringRdp Domain - Default domain name server. i.e. microsoft.com
- Secure
Access stringRdp User - Override the RDP Domain username
- Secure
Access stringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- Secure
Access stringUrl - Destination URL to inject secrets
- Secure
Access boolWeb - Enable Web Secure Remote Access
- Secure
Access boolWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- Secure
Access boolWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<string>
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- Target
Name string - The target name to associate
- Timeout
Sec double - Maximum allowed time in seconds for the custom rotator to return the results
- Use
Capital stringLetters - Password must contain capital letters [true/false]
- Use
Lower stringLetters - Password must contain lower case letters [true/false]
- Use
Numbers string - Password must contain numbers [true/false]
- Use
Special stringCharacters - Password must contain special characters [true/false]
- Authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- Auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- Custom
Payload string - Secret payload to be sent with rotation request
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Enable
Password stringPolicy - Enable password policy
- Item
Custom map[string]stringFields - Additional custom fields to associate with the item
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- Name string
- Secret name
- Password
Length string - The length of the password to be generated
- Rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- Rotated
Secret stringCustom Id - The ID of this resource.
- Rotation
Event []stringIns - How many days before the rotation of the item would you like to be notified
- Rotation
Hour float64 - The Hour of the rotation in UTC
- Rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- Secure
Access boolAllow External User - Allow providing external user for a domain users
- Secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- Secure
Access []stringHosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- Secure
Access stringRdp Domain - Default domain name server. i.e. microsoft.com
- Secure
Access stringRdp User - Override the RDP Domain username
- Secure
Access stringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- Secure
Access stringUrl - Destination URL to inject secrets
- Secure
Access boolWeb - Enable Web Secure Remote Access
- Secure
Access boolWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- Secure
Access boolWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- []string
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- Target
Name string - The target name to associate
- Timeout
Sec float64 - Maximum allowed time in seconds for the custom rotator to return the results
- Use
Capital stringLetters - Password must contain capital letters [true/false]
- Use
Lower stringLetters - Password must contain lower case letters [true/false]
- Use
Numbers string - Password must contain numbers [true/false]
- Use
Special stringCharacters - Password must contain special characters [true/false]
- authentication_
credentials string - The credentials to connect with use-self-creds/use-target-creds
- auto_
rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom_
payload string - Secret payload to be sent with rotation request
- delete_
protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- enable_
password_ stringpolicy - Enable password policy
- item_
custom_ map(string)fields - Additional custom fields to associate with the item
- keep_
prev_ stringversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max_
versions string - Set the maximum number of versions, limited by the account settings defaults
- name string
- Secret name
- password_
length string - The length of the password to be generated
- rotate_
after_ stringdisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated_
secret_ stringcustom_ id - The ID of this resource.
- rotation_
event_ list(string)ins - How many days before the rotation of the item would you like to be notified
- rotation_
hour number - The Hour of the rotation in UTC
- rotation_
interval string - The number of days to wait between every automatic key rotation (1-365)
- secure_
access_ boolallow_ external_ user - Allow providing external user for a domain users
- secure_
access_ stringcertificate_ issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure_
access_ stringenable - Enable/Disable secure remote access [true/false]
- secure_
access_ list(string)hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure_
access_ stringrdp_ domain - Default domain name server. i.e. microsoft.com
- secure_
access_ stringrdp_ user - Override the RDP Domain username
- secure_
access_ stringssh_ user - Override the SSH username as indicated in SSH Certificate Issuer
- secure_
access_ stringurl - Destination URL to inject secrets
- secure_
access_ boolweb - Enable Web Secure Remote Access
- secure_
access_ boolweb_ browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure_
access_ boolweb_ proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- list(string)
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- target_
name string - The target name to associate
- timeout_
sec number - Maximum allowed time in seconds for the custom rotator to return the results
- use_
capital_ stringletters - Password must contain capital letters [true/false]
- use_
lower_ stringletters - Password must contain lower case letters [true/false]
- use_
numbers string - Password must contain numbers [true/false]
- use_
special_ stringcharacters - Password must contain special characters [true/false]
- authentication
Credentials String - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate String - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom
Payload String - Secret payload to be sent with rotation request
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- enable
Password StringPolicy - Enable password policy
- item
Custom Map<String,String>Fields - Additional custom fields to associate with the item
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key String
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults
- name String
- Secret name
- password
Length String - The length of the password to be generated
- rotate
After StringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret StringCustom Id - The ID of this resource.
- rotation
Event List<String>Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour Double - The Hour of the rotation in UTC
- rotation
Interval String - The number of days to wait between every automatic key rotation (1-365)
- secure
Access BooleanAllow External User - Allow providing external user for a domain users
- secure
Access StringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- secure
Access List<String>Hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure
Access StringRdp Domain - Default domain name server. i.e. microsoft.com
- secure
Access StringRdp User - Override the RDP Domain username
- secure
Access StringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- secure
Access StringUrl - Destination URL to inject secrets
- secure
Access BooleanWeb - Enable Web Secure Remote Access
- secure
Access BooleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access BooleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<String>
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- target
Name String - The target name to associate
- timeout
Sec Double - Maximum allowed time in seconds for the custom rotator to return the results
- use
Capital StringLetters - Password must contain capital letters [true/false]
- use
Lower StringLetters - Password must contain lower case letters [true/false]
- use
Numbers String - Password must contain numbers [true/false]
- use
Special StringCharacters - Password must contain special characters [true/false]
- authentication
Credentials string - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate string - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom
Payload string - Secret payload to be sent with rotation request
- delete
Protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- enable
Password stringPolicy - Enable password policy
- item
Custom {[key: string]: string}Fields - Additional custom fields to associate with the item
- keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key string
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- name string
- Secret name
- password
Length string - The length of the password to be generated
- rotate
After stringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret stringCustom Id - The ID of this resource.
- rotation
Event string[]Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour number - The Hour of the rotation in UTC
- rotation
Interval string - The number of days to wait between every automatic key rotation (1-365)
- secure
Access booleanAllow External User - Allow providing external user for a domain users
- secure
Access stringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- secure
Access string[]Hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure
Access stringRdp Domain - Default domain name server. i.e. microsoft.com
- secure
Access stringRdp User - Override the RDP Domain username
- secure
Access stringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- secure
Access stringUrl - Destination URL to inject secrets
- secure
Access booleanWeb - Enable Web Secure Remote Access
- secure
Access booleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access booleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- string[]
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- target
Name string - The target name to associate
- timeout
Sec number - Maximum allowed time in seconds for the custom rotator to return the results
- use
Capital stringLetters - Password must contain capital letters [true/false]
- use
Lower stringLetters - Password must contain lower case letters [true/false]
- use
Numbers string - Password must contain numbers [true/false]
- use
Special stringCharacters - Password must contain special characters [true/false]
- authentication_
credentials str - The credentials to connect with use-self-creds/use-target-creds
- auto_
rotate str - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom_
payload str - Secret payload to be sent with rotation request
- delete_
protection str - Protection from accidental deletion of this object [true/false]
- description str
- Description of the object
- enable_
password_ strpolicy - Enable password policy
- item_
custom_ Mapping[str, str]fields - Additional custom fields to associate with the item
- keep_
prev_ strversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key str
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max_
versions str - Set the maximum number of versions, limited by the account settings defaults
- name str
- Secret name
- password_
length str - The length of the password to be generated
- rotate_
after_ strdisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated_
secret_ strcustom_ id - The ID of this resource.
- rotation_
event_ Sequence[str]ins - How many days before the rotation of the item would you like to be notified
- rotation_
hour float - The Hour of the rotation in UTC
- rotation_
interval str - The number of days to wait between every automatic key rotation (1-365)
- secure_
access_ boolallow_ external_ user - Allow providing external user for a domain users
- secure_
access_ strcertificate_ issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure_
access_ strenable - Enable/Disable secure remote access [true/false]
- secure_
access_ Sequence[str]hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure_
access_ strrdp_ domain - Default domain name server. i.e. microsoft.com
- secure_
access_ strrdp_ user - Override the RDP Domain username
- secure_
access_ strssh_ user - Override the SSH username as indicated in SSH Certificate Issuer
- secure_
access_ strurl - Destination URL to inject secrets
- secure_
access_ boolweb - Enable Web Secure Remote Access
- secure_
access_ boolweb_ browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure_
access_ boolweb_ proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- Sequence[str]
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- target_
name str - The target name to associate
- timeout_
sec float - Maximum allowed time in seconds for the custom rotator to return the results
- use_
capital_ strletters - Password must contain capital letters [true/false]
- use_
lower_ strletters - Password must contain lower case letters [true/false]
- use_
numbers str - Password must contain numbers [true/false]
- use_
special_ strcharacters - Password must contain special characters [true/false]
- authentication
Credentials String - The credentials to connect with use-self-creds/use-target-creds
- auto
Rotate String - Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
- custom
Payload String - Secret payload to be sent with rotation request
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- enable
Password StringPolicy - Enable password policy
- item
Custom Map<String>Fields - Additional custom fields to associate with the item
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- key String
- The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults
- name String
- Secret name
- password
Length String - The length of the password to be generated
- rotate
After StringDisconnect - Rotate the value of the secret after SRA session ends [true/false]
- rotated
Secret StringCustom Id - The ID of this resource.
- rotation
Event List<String>Ins - How many days before the rotation of the item would you like to be notified
- rotation
Hour Number - The Hour of the rotation in UTC
- rotation
Interval String - The number of days to wait between every automatic key rotation (1-365)
- secure
Access BooleanAllow External User - Allow providing external user for a domain users
- secure
Access StringCertificate Issuer - Path to the SSH Certificate Issuer for your Akeyless Secure Access
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- secure
Access List<String>Hosts - Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
- secure
Access StringRdp Domain - Default domain name server. i.e. microsoft.com
- secure
Access StringRdp User - Override the RDP Domain username
- secure
Access StringSsh User - Override the SSH username as indicated in SSH Certificate Issuer
- secure
Access StringUrl - Destination URL to inject secrets
- secure
Access BooleanWeb - Enable Web Secure Remote Access
- secure
Access BooleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access BooleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<String>
- List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
- target
Name String - The target name to associate
- timeout
Sec Number - Maximum allowed time in seconds for the custom rotator to return the results
- use
Capital StringLetters - Password must contain capital letters [true/false]
- use
Lower StringLetters - Password must contain lower case letters [true/false]
- use
Numbers String - Password must contain numbers [true/false]
- use
Special StringCharacters - Password must contain special characters [true/false]
Package Details
- Repository
- akeyless akeyless-community/terraform-provider-akeyless
- License
- Notes
- This Pulumi package is based on the
akeylessTerraform Provider.
published on Monday, Apr 27, 2026 by akeyless-community
