Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS
  4. API Docs
  5. secretsmanager
  6. getSecretRotation
Viewing docs for AWS v7.43.0
published on Thursday, Aug 20, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.secretsmanager.getSecretRotation

aws logo aws logo
Viewing docs for AWS v7.43.0
published on Thursday, Aug 20, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    Retrieve information about a Secrets Manager secret rotation. To retrieve secret metadata, see the aws.secretsmanager.Secret data source. To retrieve a secret value, see the aws.secretsmanager.SecretVersion data source.

    Example Usage

    Retrieve Secret Rotation Configuration

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.secretsmanager.getSecretRotation({
    secretId: exampleAwsSecretsmanagerSecret.id,
});

    import pulumi
import pulumi_aws as aws

example = aws.secretsmanager.get_secret_rotation(secret_id=example_aws_secretsmanager_secret["id"])

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/secretsmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := secretsmanager.LookupSecretRotation(ctx, &secretsmanager.LookupSecretRotationArgs{
			SecretId: exampleAwsSecretsmanagerSecret.Id,
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = Aws.SecretsManager.GetSecretRotation.Invoke(new()
    {
        SecretId = exampleAwsSecretsmanagerSecret.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.secretsmanager.SecretsmanagerFunctions;
import com.pulumi.aws.secretsmanager.inputs.GetSecretRotationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = SecretsmanagerFunctions.getSecretRotation(GetSecretRotationArgs.builder()
            .secretId(exampleAwsSecretsmanagerSecret.id())
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: aws:secretsmanager:getSecretRotation
      arguments:
        secretId: ${exampleAwsSecretsmanagerSecret.id}

    pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_secretsmanager_getsecretrotation" "example" {
  secret_id = exampleAwsSecretsmanagerSecret.id
}

    Using getSecretRotation

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getSecretRotation(args: GetSecretRotationArgs, opts?: InvokeOptions): Promise<GetSecretRotationResult>
function getSecretRotationOutput(args: GetSecretRotationOutputArgs, opts?: InvokeOutputOptions): Output<GetSecretRotationResult>
    def get_secret_rotation(region: Optional[str] = None,
                        secret_id: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetSecretRotationResult
def get_secret_rotation_output(region: pulumi.Input[Optional[str]] = None,
                        secret_id: pulumi.Input[Optional[str]] = None,
                        opts: Optional[InvokeOutputOptions] = None) -> Output[GetSecretRotationResult]
    func LookupSecretRotation(ctx *Context, args *LookupSecretRotationArgs, opts ...InvokeOption) (*LookupSecretRotationResult, error)
func LookupSecretRotationOutput(ctx *Context, args *LookupSecretRotationOutputArgs, opts ...InvokeOption) LookupSecretRotationResultOutput

    > Note: This function is named LookupSecretRotation in the Go SDK.

    public static class GetSecretRotation 
{
    public static Task<GetSecretRotationResult> InvokeAsync(GetSecretRotationArgs args, InvokeOptions? opts = null)
    public static Output<GetSecretRotationResult> Invoke(GetSecretRotationInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetSecretRotationResult> Invoke(GetSecretRotationInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetSecretRotationResult> getSecretRotation(GetSecretRotationArgs args, InvokeOptions options)
public static Output<GetSecretRotationResult> getSecretRotation(GetSecretRotationArgs args, InvokeOptions options)
public static Output<GetSecretRotationResult> getSecretRotation(GetSecretRotationArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: aws:secretsmanager/getSecretRotation:getSecretRotation
  arguments:
    # arguments dictionary
    data "aws_secretsmanager_get_secret_rotation" "name" {
    # arguments
}

    The following arguments are supported:

    SecretId string
    Secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    SecretId string
    Secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    secret_id string
    Secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    secretId String
    Secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    secretId string
    Secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    secret_id str
    Secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    secretId String
    Secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.

    getSecretRotation Result

    The following output properties are available:

    ExternalSecretRotationMetadatas List<GetSecretRotationExternalSecretRotationMetadata>
    Metadata required by the external secret partner. See externalSecretRotationMetadata below.
    ExternalSecretRotationRoleArn string
    ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner.
    Id string
    The provider-assigned unique ID for this managed resource.
    Region string
    RotationEnabled bool
    Whether automatic rotation is enabled for this secret.
    RotationLambdaArn string
    Amazon Resource Name (ARN) of the lambda function used for rotation.
    RotationRules List<GetSecretRotationRotationRule>
    Configuration block for rotation rules. See rotationRules below.
    SecretId string
    ExternalSecretRotationMetadatas []GetSecretRotationExternalSecretRotationMetadata
    Metadata required by the external secret partner. See externalSecretRotationMetadata below.
    ExternalSecretRotationRoleArn string
    ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner.
    Id string
    The provider-assigned unique ID for this managed resource.
    Region string
    RotationEnabled bool
    Whether automatic rotation is enabled for this secret.
    RotationLambdaArn string
    Amazon Resource Name (ARN) of the lambda function used for rotation.
    RotationRules []GetSecretRotationRotationRule
    Configuration block for rotation rules. See rotationRules below.
    SecretId string
    external_secret_rotation_metadatas list(object)
    Metadata required by the external secret partner. See externalSecretRotationMetadata below.
    external_secret_rotation_role_arn string
    ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner.
    id string
    The provider-assigned unique ID for this managed resource.
    region string
    rotation_enabled bool
    Whether automatic rotation is enabled for this secret.
    rotation_lambda_arn string
    Amazon Resource Name (ARN) of the lambda function used for rotation.
    rotation_rules list(object)
    Configuration block for rotation rules. See rotationRules below.
    secret_id string
    externalSecretRotationMetadatas List<GetSecretRotationExternalSecretRotationMetadata>
    Metadata required by the external secret partner. See externalSecretRotationMetadata below.
    externalSecretRotationRoleArn String
    ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner.
    id String
    The provider-assigned unique ID for this managed resource.
    region String
    rotationEnabled Boolean
    Whether automatic rotation is enabled for this secret.
    rotationLambdaArn String
    Amazon Resource Name (ARN) of the lambda function used for rotation.
    rotationRules List<GetSecretRotationRotationRule>
    Configuration block for rotation rules. See rotationRules below.
    secretId String
    externalSecretRotationMetadatas GetSecretRotationExternalSecretRotationMetadata[]
    Metadata required by the external secret partner. See externalSecretRotationMetadata below.
    externalSecretRotationRoleArn string
    ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner.
    id string
    The provider-assigned unique ID for this managed resource.
    region string
    rotationEnabled boolean
    Whether automatic rotation is enabled for this secret.
    rotationLambdaArn string
    Amazon Resource Name (ARN) of the lambda function used for rotation.
    rotationRules GetSecretRotationRotationRule[]
    Configuration block for rotation rules. See rotationRules below.
    secretId string
    external_secret_rotation_metadatas Sequence[GetSecretRotationExternalSecretRotationMetadata]
    Metadata required by the external secret partner. See externalSecretRotationMetadata below.
    external_secret_rotation_role_arn str
    ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner.
    id str
    The provider-assigned unique ID for this managed resource.
    region str
    rotation_enabled bool
    Whether automatic rotation is enabled for this secret.
    rotation_lambda_arn str
    Amazon Resource Name (ARN) of the lambda function used for rotation.
    rotation_rules Sequence[GetSecretRotationRotationRule]
    Configuration block for rotation rules. See rotationRules below.
    secret_id str
    externalSecretRotationMetadatas List<Property Map>
    Metadata required by the external secret partner. See externalSecretRotationMetadata below.
    externalSecretRotationRoleArn String
    ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner.
    id String
    The provider-assigned unique ID for this managed resource.
    region String
    rotationEnabled Boolean
    Whether automatic rotation is enabled for this secret.
    rotationLambdaArn String
    Amazon Resource Name (ARN) of the lambda function used for rotation.
    rotationRules List<Property Map>
    Configuration block for rotation rules. See rotationRules below.
    secretId String

    Supporting Types

    GetSecretRotationExternalSecretRotationMetadata

    Key string
    Metadata key name.
    Value string
    Metadata value for the specified key.
    Key string
    Metadata key name.
    Value string
    Metadata value for the specified key.
    key string
    Metadata key name.
    value string
    Metadata value for the specified key.
    key String
    Metadata key name.
    value String
    Metadata value for the specified key.
    key string
    Metadata key name.
    value string
    Metadata value for the specified key.
    key str
    Metadata key name.
    value str
    Metadata value for the specified key.
    key String
    Metadata key name.
    value String
    Metadata value for the specified key.

    GetSecretRotationRotationRule

    AutomaticallyAfterDays int
    Number of days between automatic scheduled rotations of the secret.
    Duration string
    Length of the rotation window in hours.
    ScheduleExpression string
    cron() or rate() expression that defines the schedule for rotating the secret.
    AutomaticallyAfterDays int
    Number of days between automatic scheduled rotations of the secret.
    Duration string
    Length of the rotation window in hours.
    ScheduleExpression string
    cron() or rate() expression that defines the schedule for rotating the secret.
    automatically_after_days number
    Number of days between automatic scheduled rotations of the secret.
    duration string
    Length of the rotation window in hours.
    schedule_expression string
    cron() or rate() expression that defines the schedule for rotating the secret.
    automaticallyAfterDays Integer
    Number of days between automatic scheduled rotations of the secret.
    duration String
    Length of the rotation window in hours.
    scheduleExpression String
    cron() or rate() expression that defines the schedule for rotating the secret.
    automaticallyAfterDays number
    Number of days between automatic scheduled rotations of the secret.
    duration string
    Length of the rotation window in hours.
    scheduleExpression string
    cron() or rate() expression that defines the schedule for rotating the secret.
    automatically_after_days int
    Number of days between automatic scheduled rotations of the secret.
    duration str
    Length of the rotation window in hours.
    schedule_expression str
    cron() or rate() expression that defines the schedule for rotating the secret.
    automaticallyAfterDays Number
    Number of days between automatic scheduled rotations of the secret.
    duration String
    Length of the rotation window in hours.
    scheduleExpression String
    cron() or rate() expression that defines the schedule for rotating the secret.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo aws logo
    Viewing docs for AWS v7.43.0
    published on Thursday, Aug 20, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial