aws.odb.AutonomousDatabaseSecretsManagerIntegration

AWS v7.52.1, Oct 28 26

Viewing docs for AWS v7.52.1
published on Wednesday, Oct 28, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws

Viewing docs for AWS v7.52.1
published on Wednesday, Oct 28, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws

Note: This integration is shared by all databases in the AWS account and Region. Creating this resource manages the existing integration if it is already enabled. Destroying this resource disables the integration for the entire account and Region, which can disrupt databases outside this Terraform configuration that use AWS Secrets Manager credentials. Manage the integration in only one Terraform configuration and coordinate changes with all database owners that depend on it.

For accounts with a resource anchor, creating or destroying this resource preserves an existing OCI identity domain. If no identity domain exists, the service creates one when enabling or disabling the integration. This resource does not delete the identity domain.

Create the customer-managed IAM role separately. Its trust policy must allow the exported roleArn to assume it, and its permissions must grant access to the selected secret. See the AWS Secrets Manager documentation for IAM permission guidance.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = new aws.odb.AutonomousDatabaseSecretsManagerIntegration("example", {});
export const adbsSecretsManagerServiceRoleArn = example.roleArn;

import pulumi
import pulumi_aws as aws

example = aws.odb.AutonomousDatabaseSecretsManagerIntegration("example")
pulumi.export("adbsSecretsManagerServiceRoleArn", example.role_arn)

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/odb"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := odb.NewAutonomousDatabaseSecretsManagerIntegration(ctx, "example", nil)
		if err != nil {
			return err
		}
		ctx.Export("adbsSecretsManagerServiceRoleArn", example.RoleArn)
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = new Aws.Odb.AutonomousDatabaseSecretsManagerIntegration("example");

    return new Dictionary<string, object?>
    {
        ["adbsSecretsManagerServiceRoleArn"] = example.RoleArn,
    };
});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.odb.AutonomousDatabaseSecretsManagerIntegration;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new AutonomousDatabaseSecretsManagerIntegration("example");

        ctx.export("adbsSecretsManagerServiceRoleArn", example.roleArn());
    }
}

resources:
  example:
    type: aws:odb:AutonomousDatabaseSecretsManagerIntegration
outputs:
  adbsSecretsManagerServiceRoleArn: ${example.roleArn}

terraform {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_odb_autonomous_database_secrets_manager_integration" "example" {
  lifecycle {
    create_before_destroy = true
  }
}
output "adbsSecretsManagerServiceRoleArn" {
  value = aws_odb_autonomous_database_secrets_manager_integration.example.role_arn
}

Create AutonomousDatabaseSecretsManagerIntegration Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AutonomousDatabaseSecretsManagerIntegration(name: string, args?: AutonomousDatabaseSecretsManagerIntegrationArgs, opts?: CustomResourceOptions);

@overload
def AutonomousDatabaseSecretsManagerIntegration(resource_name: str,
                                                args: Optional[AutonomousDatabaseSecretsManagerIntegrationArgs] = None,
                                                opts: Optional[ResourceOptions] = None)

@overload
def AutonomousDatabaseSecretsManagerIntegration(resource_name: str,
                                                opts: Optional[ResourceOptions] = None,
                                                region: Optional[str] = None,
                                                timeouts: Optional[AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs] = None)

func NewAutonomousDatabaseSecretsManagerIntegration(ctx *Context, name string, args *AutonomousDatabaseSecretsManagerIntegrationArgs, opts ...ResourceOption) (*AutonomousDatabaseSecretsManagerIntegration, error)

public AutonomousDatabaseSecretsManagerIntegration(string name, AutonomousDatabaseSecretsManagerIntegrationArgs? args = null, CustomResourceOptions? opts = null)

public AutonomousDatabaseSecretsManagerIntegration(String name, AutonomousDatabaseSecretsManagerIntegrationArgs args)
public AutonomousDatabaseSecretsManagerIntegration(String name, AutonomousDatabaseSecretsManagerIntegrationArgs args, CustomResourceOptions options)

type: aws:odb:AutonomousDatabaseSecretsManagerIntegration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "aws_odb_autonomous_database_secrets_manager_integration" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args AutonomousDatabaseSecretsManagerIntegrationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args AutonomousDatabaseSecretsManagerIntegrationArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args AutonomousDatabaseSecretsManagerIntegrationArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args AutonomousDatabaseSecretsManagerIntegrationArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args AutonomousDatabaseSecretsManagerIntegrationArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var autonomousDatabaseSecretsManagerIntegrationResource = new Aws.Odb.AutonomousDatabaseSecretsManagerIntegration("autonomousDatabaseSecretsManagerIntegrationResource", new()
{
    Region = "string",
    Timeouts = new Aws.Odb.Inputs.AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
    },
});

example, err := odb.NewAutonomousDatabaseSecretsManagerIntegration(ctx, "autonomousDatabaseSecretsManagerIntegrationResource", &odb.AutonomousDatabaseSecretsManagerIntegrationArgs{
	Region: pulumi.String("string"),
	Timeouts: &odb.AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
	},
})

resource "aws_odb_autonomous_database_secrets_manager_integration" "autonomousDatabaseSecretsManagerIntegrationResource" {
  lifecycle {
    create_before_destroy = true
  }
  region = "string"
  timeouts = {
    create = "string"
    delete = "string"
  }
}

var autonomousDatabaseSecretsManagerIntegrationResource = new AutonomousDatabaseSecretsManagerIntegration("autonomousDatabaseSecretsManagerIntegrationResource", AutonomousDatabaseSecretsManagerIntegrationArgs.builder()
    .region("string")
    .timeouts(AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .build())
    .build());

autonomous_database_secrets_manager_integration_resource = aws.odb.AutonomousDatabaseSecretsManagerIntegration("autonomousDatabaseSecretsManagerIntegrationResource",
    region="string",
    timeouts={
        "create": "string",
        "delete": "string",
    })

const autonomousDatabaseSecretsManagerIntegrationResource = new aws.odb.AutonomousDatabaseSecretsManagerIntegration("autonomousDatabaseSecretsManagerIntegrationResource", {
    region: "string",
    timeouts: {
        create: "string",
        "delete": "string",
    },
});

type: aws:odb:AutonomousDatabaseSecretsManagerIntegration
properties:
    region: string
    timeouts:
        create: string
        delete: string

AutonomousDatabaseSecretsManagerIntegration Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AutonomousDatabaseSecretsManagerIntegration resource accepts the following input properties:

Region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
Timeouts AutonomousDatabaseSecretsManagerIntegrationTimeouts

Region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
Timeouts AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs

region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
timeouts object

region String: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
timeouts AutonomousDatabaseSecretsManagerIntegrationTimeouts

region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
timeouts AutonomousDatabaseSecretsManagerIntegrationTimeouts

region str: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
timeouts AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs

region String: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
timeouts Property Map

Outputs

All input properties are implicitly available as output properties. Additionally, the AutonomousDatabaseSecretsManagerIntegration resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
RoleArn string: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
Status string: Current lifecycle status of the service role.
StatusReason string: Additional lifecycle-status information, if available.

Id string: The provider-assigned unique ID for this managed resource.
RoleArn string: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
Status string: Current lifecycle status of the service role.
StatusReason string: Additional lifecycle-status information, if available.

id string: The provider-assigned unique ID for this managed resource.
role_arn string: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status string: Current lifecycle status of the service role.
status_reason string: Additional lifecycle-status information, if available.

id String: The provider-assigned unique ID for this managed resource.
roleArn String: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status String: Current lifecycle status of the service role.
statusReason String: Additional lifecycle-status information, if available.

id string: The provider-assigned unique ID for this managed resource.
roleArn string: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status string: Current lifecycle status of the service role.
statusReason string: Additional lifecycle-status information, if available.

id str: The provider-assigned unique ID for this managed resource.
role_arn str: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status str: Current lifecycle status of the service role.
status_reason str: Additional lifecycle-status information, if available.

id String: The provider-assigned unique ID for this managed resource.
roleArn String: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status String: Current lifecycle status of the service role.
statusReason String: Additional lifecycle-status information, if available.

Look up Existing AutonomousDatabaseSecretsManagerIntegration Resource

Get an existing AutonomousDatabaseSecretsManagerIntegration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AutonomousDatabaseSecretsManagerIntegrationState, opts?: CustomResourceOptions): AutonomousDatabaseSecretsManagerIntegration

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        region: Optional[str] = None,
        role_arn: Optional[str] = None,
        status: Optional[str] = None,
        status_reason: Optional[str] = None,
        timeouts: Optional[AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs] = None) -> AutonomousDatabaseSecretsManagerIntegration

func GetAutonomousDatabaseSecretsManagerIntegration(ctx *Context, name string, id IDInput, state *AutonomousDatabaseSecretsManagerIntegrationState, opts ...ResourceOption) (*AutonomousDatabaseSecretsManagerIntegration, error)

public static AutonomousDatabaseSecretsManagerIntegration Get(string name, Input<string> id, AutonomousDatabaseSecretsManagerIntegrationState? state, CustomResourceOptions? opts = null)

public static AutonomousDatabaseSecretsManagerIntegration get(String name, Output<String> id, AutonomousDatabaseSecretsManagerIntegrationState state, CustomResourceOptions options)

resources:  _:    type: aws:odb:AutonomousDatabaseSecretsManagerIntegration    get:      id: ${id}

import {
  to = aws_odb_autonomous_database_secrets_manager_integration.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
RoleArn string: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
Status string: Current lifecycle status of the service role.
StatusReason string: Additional lifecycle-status information, if available.
Timeouts AutonomousDatabaseSecretsManagerIntegrationTimeouts

Region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
RoleArn string: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
Status string: Current lifecycle status of the service role.
StatusReason string: Additional lifecycle-status information, if available.
Timeouts AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs

region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
role_arn string: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status string: Current lifecycle status of the service role.
status_reason string: Additional lifecycle-status information, if available.
timeouts object

region String: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
roleArn String: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status String: Current lifecycle status of the service role.
statusReason String: Additional lifecycle-status information, if available.
timeouts AutonomousDatabaseSecretsManagerIntegrationTimeouts

region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
roleArn string: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status string: Current lifecycle status of the service role.
statusReason string: Additional lifecycle-status information, if available.
timeouts AutonomousDatabaseSecretsManagerIntegrationTimeouts

region str: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
role_arn str: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status str: Current lifecycle status of the service role.
status_reason str: Additional lifecycle-status information, if available.
timeouts AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs

region String: Region where this resource will be managed. Defaults to the Region set in the provider configuration.
roleArn String: ARN of the Oracle-managed service role that assumes the customer-managed IAM role.
status String: Current lifecycle status of the service role.
statusReason String: Additional lifecycle-status information, if available.
timeouts Property Map

Supporting Types

AutonomousDatabaseSecretsManagerIntegrationTimeouts, AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs

Create string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
Delete string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.

Create string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
Delete string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.

create string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.

create String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.

create string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete string: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.

create str: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete str: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.

create String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
delete String: A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.

Import

Identity Schema

Required

Optional

accountId (String) AWS Account where this resource is managed.
region (String) Region where this resource is managed.

Using pulumi import, import the integration using its Region. For example:

$ pulumi import aws:odb/autonomousDatabaseSecretsManagerIntegration:AutonomousDatabaseSecretsManagerIntegration example us-east-1

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: AWS Classic pulumi/pulumi-aws
License: Apache-2.0
Notes: This Pulumi package is based on the aws Terraform Provider.

Viewing docs for AWS v7.52.1
published on Wednesday, Oct 28, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-aws

aws.odb.AutonomousDatabaseSecretsManagerIntegration

On this page

On this page

Example Usage

Basic Usage

Create AutonomousDatabaseSecretsManagerIntegration Resource

Constructor syntax

Parameters

Constructor example

AutonomousDatabaseSecretsManagerIntegration Resource Properties

Inputs

Outputs

Look up Existing AutonomousDatabaseSecretsManagerIntegration Resource

Supporting Types

AutonomousDatabaseSecretsManagerIntegrationTimeouts, AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs

Import

Identity Schema

Required

Optional

Package Details

On this page

On this page

Try Pulumi Cloud free.
Your team will thank you.

aws.odb.AutonomousDatabaseSecretsManagerIntegration

On this page

On this page

Example Usage

Basic Usage

Create AutonomousDatabaseSecretsManagerIntegration Resource

Constructor syntax

Parameters

Constructor example

AutonomousDatabaseSecretsManagerIntegration Resource Properties

Inputs

Outputs

Look up Existing AutonomousDatabaseSecretsManagerIntegration Resource

Supporting Types

AutonomousDatabaseSecretsManagerIntegrationTimeouts, AutonomousDatabaseSecretsManagerIntegrationTimeoutsArgs

Import

Identity Schema

Required

Optional

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.