Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Dynatrace
  4. API Docs
  5. Credentials
Viewing docs for Dynatrace v0.36.0
published on Tuesday, Jun 9, 2026 by Pulumiverse
Schema (JSON)
pulumiverse/pulumi-dynatrace

dynatrace.Credentials

dynatrace logo
Viewing docs for Dynatrace v0.36.0
published on Tuesday, Jun 9, 2026 by Pulumiverse
Schema (JSON)
pulumiverse/pulumi-dynatrace

    Destroy Warning Credentials cannot be deleted if they are still associated with active synthetic monitors. Terraform will proceed with the destroy operation, but the credential will not be removed if any associations remain. Action Required: Before destroying this resource, ensure the credential is removed from all associated monitors. If any monitors remain associated after destroy, you must manually remove those associations and delete the credential manually.

    This resource requires the API token scopes Read credential vault entries (credentialVault.read) and Write credential vault entries (credentialVault.write)

    Dynatrace Documentation

    • Credential vault for synthetic monitors - https://www.dynatrace.com/support/help/platform-modules/digital-experience/synthetic-monitoring/general-information/credential-vault-for-synthetic-monitors

    • Credential vault API - https://www.dynatrace.com/support/help/dynatrace-api/environment-api/credential-vault

    • External vault integration for Azure Key Vault, HashiCorp Vault, and CyberArk Vault - https://docs.dynatrace.com/docs/shortlink/external-vault-integration

    Export Example Usage

    • terraform-provider-dynatrace -export dynatrace.Credentials downloads all existing credentials

    The full documentation of the export feature is available here.

    Resource Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as dynatrace from "@pulumiverse/dynatrace";

const usernamePasswordCredentials = new dynatrace.Credentials("username_password_credentials", {
    name: "#name#",
    username: "username",
    password: "password",
    ownerAccessOnly: true,
    scopes: ["SYNTHETIC"],
});

    import pulumi
import pulumiverse_dynatrace as dynatrace

username_password_credentials = dynatrace.Credentials("username_password_credentials",
    name="#name#",
    username="username",
    password="password",
    owner_access_only=True,
    scopes=["SYNTHETIC"])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-dynatrace/sdk/go/dynatrace"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := dynatrace.NewCredentials(ctx, "username_password_credentials", &dynatrace.CredentialsArgs{
			Name:            pulumi.String("#name#"),
			Username:        pulumi.String("username"),
			Password:        pulumi.String("password"),
			OwnerAccessOnly: pulumi.Bool(true),
			Scopes: pulumi.StringArray{
				pulumi.String("SYNTHETIC"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Dynatrace = Pulumiverse.Dynatrace;

return await Deployment.RunAsync(() => 
{
    var usernamePasswordCredentials = new Dynatrace.Credentials("username_password_credentials", new()
    {
        Name = "#name#",
        Username = "username",
        Password = "password",
        OwnerAccessOnly = true,
        Scopes = new[]
        {
            "SYNTHETIC",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dynatrace.Credentials;
import com.pulumi.dynatrace.CredentialsArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var usernamePasswordCredentials = new Credentials("usernamePasswordCredentials", CredentialsArgs.builder()
            .name("#name#")
            .username("username")
            .password("password")
            .ownerAccessOnly(true)
            .scopes("SYNTHETIC")
            .build());

    }
}

    resources:
  usernamePasswordCredentials:
    type: dynatrace:Credentials
    name: username_password_credentials
    properties:
      name: '#name#'
      username: username
      password: password
      ownerAccessOnly: true
      scopes:
        - SYNTHETIC

    pulumi {
  required_providers {
    dynatrace = {
      source = "pulumi/dynatrace"
    }
  }
}

resource "dynatrace_credentials" "username_password_credentials" {
  name              = "#name#"
  username          = "username"
  password          = "password"
  owner_access_only = true
  scopes            = ["SYNTHETIC"]
}

    import * as pulumi from "@pulumi/pulumi";
import * as dynatrace from "@pulumiverse/dynatrace";
import * as std from "@pulumi/std";

const rootCertificate = new dynatrace.Credentials("root_certificate", {
    name: "Root Certificate",
    description: "Root certificate for validating Extension 2.0 signatures",
    certificate: std.file({
        input: "certificate.pem",
    }).then(invoke => std.base64encode({
        input: invoke.result,
    })).then(invoke => invoke.result),
    format: "PEM",
    "public": true,
});

    import pulumi
import pulumi_std as std
import pulumiverse_dynatrace as dynatrace

root_certificate = dynatrace.Credentials("root_certificate",
    name="Root Certificate",
    description="Root certificate for validating Extension 2.0 signatures",
    certificate=std.base64encode(input=std.file(input="certificate.pem").result).result,
    format="PEM",
    public=True)

    package main

import (
	"github.com/pulumi/pulumi-std/sdk/v2/go/std"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-dynatrace/sdk/go/dynatrace"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		invokeBase64encode, err := std.Base64encode(ctx, &std.Base64encodeArgs{
			Input: std.File(ctx, &std.FileArgs{
				Input: "certificate.pem",
			}, nil).Result,
		}, nil)
		if err != nil {
			return err
		}
		_, err = dynatrace.NewCredentials(ctx, "root_certificate", &dynatrace.CredentialsArgs{
			Name:        pulumi.String("Root Certificate"),
			Description: pulumi.String("Root certificate for validating Extension 2.0 signatures"),
			Certificate: pulumi.String(invokeBase64encode.Result),
			Format:      pulumi.String("PEM"),
			Public:      pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Dynatrace = Pulumiverse.Dynatrace;
using Std = Pulumi.Std;

return await Deployment.RunAsync(() => 
{
    var rootCertificate = new Dynatrace.Credentials("root_certificate", new()
    {
        Name = "Root Certificate",
        Description = "Root certificate for validating Extension 2.0 signatures",
        Certificate = Std.File.Invoke(new()
        {
            Input = "certificate.pem",
        }).Apply(invoke => Std.Base64encode.Invoke(new()
        {
            Input = invoke.Result,
        })).Apply(invoke => invoke.Result),
        Format = "PEM",
        Public = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dynatrace.Credentials;
import com.pulumi.dynatrace.CredentialsArgs;
import com.pulumi.std.StdFunctions;
import com.pulumi.std.inputs.FileArgs;
import com.pulumi.std.inputs.Base64encodeArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var rootCertificate = new Credentials("rootCertificate", CredentialsArgs.builder()
            .name("Root Certificate")
            .description("Root certificate for validating Extension 2.0 signatures")
            .certificate(StdFunctions.base64encode(Base64encodeArgs.builder()
                .input(StdFunctions.file(FileArgs.builder()
                    .input("certificate.pem")
                    .build()).result())
                .build()).result())
            .format("PEM")
            .public_(true)
            .build());

    }
}

    resources:
  rootCertificate:
    type: dynatrace:Credentials
    name: root_certificate
    properties:
      name: Root Certificate
      description: Root certificate for validating Extension 2.0 signatures
      certificate:
        fn::invoke:
          function: std:base64encode
          arguments:
            input:
              fn::invoke:
                function: std:file
                arguments:
                  input: certificate.pem
                return: result
          return: result
      format: PEM
      public: true

    pulumi {
  required_providers {
    dynatrace = {
      source = "pulumi/dynatrace"
    }
    std = {
      source = "pulumi/std"
    }
  }
}

resource "dynatrace_credentials" "root_certificate" {
  name        = "Root Certificate"
  description = "Root certificate for validating Extension 2.0 signatures"
  certificate = base64encode(file("certificate.pem"))
  format      = "PEM"
  public      = true
}

    CyberArk Vault with username and password

    import * as pulumi from "@pulumi/pulumi";
import * as dynatrace from "@pulumiverse/dynatrace";

const config = new pulumi.Config();
const credentialsUsername = config.requireObject<any>("credentialsUsername");
const credentialsPassword = config.requireObject<any>("credentialsPassword");
const usernamePasswordCredentials = new dynatrace.Credentials("username_password_credentials", {
    name: "#name#",
    username: credentialsUsername,
    password: credentialsPassword,
    ownerAccessOnly: true,
    scopes: ["SYNTHETIC"],
});
const cyberarkUsernamePassword = new dynatrace.Credentials("cyberark_username_password", {
    name: "#name#",
    ownerAccessOnly: true,
    external: {
        vaultUrl: "https://example.com",
        applicationId: "my-application-id",
        safeName: "my-safe-name",
        folderName: "my-folder-name",
        accountName: "my-account-name",
        usernamePasswordForCpm: usernamePasswordCredentials.id,
    },
    scopes: ["SYNTHETIC"],
});

    import pulumi
import pulumiverse_dynatrace as dynatrace

config = pulumi.Config()
credentials_username = config.require_object("credentialsUsername")
credentials_password = config.require_object("credentialsPassword")
username_password_credentials = dynatrace.Credentials("username_password_credentials",
    name="#name#",
    username=credentials_username,
    password=credentials_password,
    owner_access_only=True,
    scopes=["SYNTHETIC"])
cyberark_username_password = dynatrace.Credentials("cyberark_username_password",
    name="#name#",
    owner_access_only=True,
    external={
        "vault_url": "https://example.com",
        "application_id": "my-application-id",
        "safe_name": "my-safe-name",
        "folder_name": "my-folder-name",
        "account_name": "my-account-name",
        "username_password_for_cpm": username_password_credentials.id,
    },
    scopes=["SYNTHETIC"])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
	"github.com/pulumiverse/pulumi-dynatrace/sdk/go/dynatrace"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		var credentialsUsername interface{}
		cfg.RequireObject("credentialsUsername", &credentialsUsername)
		var credentialsPassword interface{}
		cfg.RequireObject("credentialsPassword", &credentialsPassword)
		usernamePasswordCredentials, err := dynatrace.NewCredentials(ctx, "username_password_credentials", &dynatrace.CredentialsArgs{
			Name:            pulumi.String("#name#"),
			Username:        pulumi.Any(credentialsUsername),
			Password:        pulumi.Any(credentialsPassword),
			OwnerAccessOnly: pulumi.Bool(true),
			Scopes: pulumi.StringArray{
				pulumi.String("SYNTHETIC"),
			},
		})
		if err != nil {
			return err
		}
		_, err = dynatrace.NewCredentials(ctx, "cyberark_username_password", &dynatrace.CredentialsArgs{
			Name:            pulumi.String("#name#"),
			OwnerAccessOnly: pulumi.Bool(true),
			External: &dynatrace.CredentialsExternalArgs{
				VaultUrl:               pulumi.String("https://example.com"),
				ApplicationId:          pulumi.String("my-application-id"),
				SafeName:               pulumi.String("my-safe-name"),
				FolderName:             pulumi.String("my-folder-name"),
				AccountName:            pulumi.String("my-account-name"),
				UsernamePasswordForCpm: usernamePasswordCredentials.ID(),
			},
			Scopes: pulumi.StringArray{
				pulumi.String("SYNTHETIC"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Dynatrace = Pulumiverse.Dynatrace;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var credentialsUsername = config.RequireObject<dynamic>("credentialsUsername");
    var credentialsPassword = config.RequireObject<dynamic>("credentialsPassword");
    var usernamePasswordCredentials = new Dynatrace.Credentials("username_password_credentials", new()
    {
        Name = "#name#",
        Username = credentialsUsername,
        Password = credentialsPassword,
        OwnerAccessOnly = true,
        Scopes = new[]
        {
            "SYNTHETIC",
        },
    });

    var cyberarkUsernamePassword = new Dynatrace.Credentials("cyberark_username_password", new()
    {
        Name = "#name#",
        OwnerAccessOnly = true,
        External = new Dynatrace.Inputs.CredentialsExternalArgs
        {
            VaultUrl = "https://example.com",
            ApplicationId = "my-application-id",
            SafeName = "my-safe-name",
            FolderName = "my-folder-name",
            AccountName = "my-account-name",
            UsernamePasswordForCpm = usernamePasswordCredentials.Id,
        },
        Scopes = new[]
        {
            "SYNTHETIC",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dynatrace.Credentials;
import com.pulumi.dynatrace.CredentialsArgs;
import com.pulumi.dynatrace.inputs.CredentialsExternalArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var credentialsUsername = config.require("credentialsUsername");
        final var credentialsPassword = config.require("credentialsPassword");
        var usernamePasswordCredentials = new Credentials("usernamePasswordCredentials", CredentialsArgs.builder()
            .name("#name#")
            .username(credentialsUsername)
            .password(credentialsPassword)
            .ownerAccessOnly(true)
            .scopes("SYNTHETIC")
            .build());

        var cyberarkUsernamePassword = new Credentials("cyberarkUsernamePassword", CredentialsArgs.builder()
            .name("#name#")
            .ownerAccessOnly(true)
            .external(CredentialsExternalArgs.builder()
                .vaultUrl("https://example.com")
                .applicationId("my-application-id")
                .safeName("my-safe-name")
                .folderName("my-folder-name")
                .accountName("my-account-name")
                .usernamePasswordForCpm(usernamePasswordCredentials.id())
                .build())
            .scopes("SYNTHETIC")
            .build());

    }
}

    configuration:
  credentialsUsername:
    type: object
  credentialsPassword:
    type: object
resources:
  usernamePasswordCredentials:
    type: dynatrace:Credentials
    name: username_password_credentials
    properties:
      name: '#name#'
      username: ${credentialsUsername}
      password: ${credentialsPassword}
      ownerAccessOnly: true
      scopes:
        - SYNTHETIC
  cyberarkUsernamePassword:
    type: dynatrace:Credentials
    name: cyberark_username_password
    properties:
      name: '#name#'
      ownerAccessOnly: true
      external:
        vaultUrl: https://example.com
        applicationId: my-application-id
        safeName: my-safe-name
        folderName: my-folder-name
        accountName: my-account-name
        usernamePasswordForCpm: ${usernamePasswordCredentials.id}
      scopes:
        - SYNTHETIC

    pulumi {
  required_providers {
    dynatrace = {
      source = "pulumi/dynatrace"
    }
  }
}

resource "dynatrace_credentials" "username_password_credentials" {
  name              = "#name#"
  username          = var.credentialsUsername
  password          = var.credentialsPassword
  owner_access_only = true
  scopes            = ["SYNTHETIC"]
}
resource "dynatrace_credentials" "cyberark_username_password" {
  name              = "#name#"
  owner_access_only = true
  external = {
    vault_url                 = "https://example.com"
    application_id            = "my-application-id"
    safe_name                 = "my-safe-name"
    folder_name               = "my-folder-name"
    account_name              = "my-account-name"
    username_password_for_cpm = dynatrace_credentials.username_password_credentials.id
  }
  scopes = ["SYNTHETIC"]
}
variable "credentialsUsername" {
}
variable "credentialsPassword" {
}

    CyberArk Vault with allowed location

    import * as pulumi from "@pulumi/pulumi";
import * as dynatrace from "@pulumiverse/dynatrace";

const config = new pulumi.Config();
const certificate = config.requireObject<any>("certificate");
const certificatePassword = config.requireObject<any>("certificatePassword");
const certificateCredentials = new dynatrace.Credentials("certificate_credentials", {
    name: "#name#",
    certificate: certificate,
    format: "PKCS12",
    ownerAccessOnly: true,
    password: certificatePassword,
    scopes: ["SYNTHETIC"],
});
const cyberarkAllowedLocation = new dynatrace.Credentials("cyberark_allowed_location", {
    name: "#name#",
    ownerAccessOnly: true,
    external: {
        vaultUrl: "https://example.com",
        applicationId: "my-application-id",
        safeName: "my-safe-name",
        folderName: "my-folder-name",
        accountName: "my-account-name",
        certificate: certificateCredentials.id,
    },
    scopes: ["SYNTHETIC"],
});

    import pulumi
import pulumiverse_dynatrace as dynatrace

config = pulumi.Config()
certificate = config.require_object("certificate")
certificate_password = config.require_object("certificatePassword")
certificate_credentials = dynatrace.Credentials("certificate_credentials",
    name="#name#",
    certificate=certificate,
    format="PKCS12",
    owner_access_only=True,
    password=certificate_password,
    scopes=["SYNTHETIC"])
cyberark_allowed_location = dynatrace.Credentials("cyberark_allowed_location",
    name="#name#",
    owner_access_only=True,
    external={
        "vault_url": "https://example.com",
        "application_id": "my-application-id",
        "safe_name": "my-safe-name",
        "folder_name": "my-folder-name",
        "account_name": "my-account-name",
        "certificate": certificate_credentials.id,
    },
    scopes=["SYNTHETIC"])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
	"github.com/pulumiverse/pulumi-dynatrace/sdk/go/dynatrace"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		var certificate interface{}
		cfg.RequireObject("certificate", &certificate)
		var certificatePassword interface{}
		cfg.RequireObject("certificatePassword", &certificatePassword)
		certificateCredentials, err := dynatrace.NewCredentials(ctx, "certificate_credentials", &dynatrace.CredentialsArgs{
			Name:            pulumi.String("#name#"),
			Certificate:     pulumi.Any(certificate),
			Format:          pulumi.String("PKCS12"),
			OwnerAccessOnly: pulumi.Bool(true),
			Password:        pulumi.Any(certificatePassword),
			Scopes: pulumi.StringArray{
				pulumi.String("SYNTHETIC"),
			},
		})
		if err != nil {
			return err
		}
		_, err = dynatrace.NewCredentials(ctx, "cyberark_allowed_location", &dynatrace.CredentialsArgs{
			Name:            pulumi.String("#name#"),
			OwnerAccessOnly: pulumi.Bool(true),
			External: &dynatrace.CredentialsExternalArgs{
				VaultUrl:      pulumi.String("https://example.com"),
				ApplicationId: pulumi.String("my-application-id"),
				SafeName:      pulumi.String("my-safe-name"),
				FolderName:    pulumi.String("my-folder-name"),
				AccountName:   pulumi.String("my-account-name"),
				Certificate:   certificateCredentials.ID(),
			},
			Scopes: pulumi.StringArray{
				pulumi.String("SYNTHETIC"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Dynatrace = Pulumiverse.Dynatrace;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var certificate = config.RequireObject<dynamic>("certificate");
    var certificatePassword = config.RequireObject<dynamic>("certificatePassword");
    var certificateCredentials = new Dynatrace.Credentials("certificate_credentials", new()
    {
        Name = "#name#",
        Certificate = certificate,
        Format = "PKCS12",
        OwnerAccessOnly = true,
        Password = certificatePassword,
        Scopes = new[]
        {
            "SYNTHETIC",
        },
    });

    var cyberarkAllowedLocation = new Dynatrace.Credentials("cyberark_allowed_location", new()
    {
        Name = "#name#",
        OwnerAccessOnly = true,
        External = new Dynatrace.Inputs.CredentialsExternalArgs
        {
            VaultUrl = "https://example.com",
            ApplicationId = "my-application-id",
            SafeName = "my-safe-name",
            FolderName = "my-folder-name",
            AccountName = "my-account-name",
            Certificate = certificateCredentials.Id,
        },
        Scopes = new[]
        {
            "SYNTHETIC",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dynatrace.Credentials;
import com.pulumi.dynatrace.CredentialsArgs;
import com.pulumi.dynatrace.inputs.CredentialsExternalArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var certificate = config.require("certificate");
        final var certificatePassword = config.require("certificatePassword");
        var certificateCredentials = new Credentials("certificateCredentials", CredentialsArgs.builder()
            .name("#name#")
            .certificate(certificate)
            .format("PKCS12")
            .ownerAccessOnly(true)
            .password(certificatePassword)
            .scopes("SYNTHETIC")
            .build());

        var cyberarkAllowedLocation = new Credentials("cyberarkAllowedLocation", CredentialsArgs.builder()
            .name("#name#")
            .ownerAccessOnly(true)
            .external(CredentialsExternalArgs.builder()
                .vaultUrl("https://example.com")
                .applicationId("my-application-id")
                .safeName("my-safe-name")
                .folderName("my-folder-name")
                .accountName("my-account-name")
                .certificate(certificateCredentials.id())
                .build())
            .scopes("SYNTHETIC")
            .build());

    }
}

    configuration:
  # certificate encoded in base64
  certificate:
    type: object
  certificatePassword:
    type: object
resources:
  certificateCredentials:
    type: dynatrace:Credentials
    name: certificate_credentials
    properties:
      name: '#name#'
      certificate: ${certificate}
      format: PKCS12
      ownerAccessOnly: true
      password: ${certificatePassword}
      scopes:
        - SYNTHETIC
  cyberarkAllowedLocation:
    type: dynatrace:Credentials
    name: cyberark_allowed_location
    properties:
      name: '#name#'
      ownerAccessOnly: true
      external:
        vaultUrl: https://example.com
        applicationId: my-application-id
        safeName: my-safe-name
        folderName: my-folder-name
        accountName: my-account-name
        certificate: ${certificateCredentials.id}
      scopes:
        - SYNTHETIC

    pulumi {
  required_providers {
    dynatrace = {
      source = "pulumi/dynatrace"
    }
  }
}

resource "dynatrace_credentials" "certificate_credentials" {
  name              = "#name#"
  certificate       = var.certificate
  format            = "PKCS12"
  owner_access_only = true
  password          = var.certificatePassword
  scopes            = ["SYNTHETIC"]
}
resource "dynatrace_credentials" "cyberark_allowed_location" {
  name              = "#name#"
  owner_access_only = true
  external = {
    vault_url      = "https://example.com"
    application_id = "my-application-id"
    safe_name      = "my-safe-name"
    folder_name    = "my-folder-name"
    account_name   = "my-account-name"
    certificate    = dynatrace_credentials.certificate_credentials.id
  }
  scopes = ["SYNTHETIC"]
}
# certificate encoded in base64
variable "certificate" {
}
variable "certificatePassword" {
}

    Create Credentials Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Credentials(name: string, args?: CredentialsArgs, opts?: CustomResourceOptions);
    @overload
def Credentials(resource_name: str,
                args: Optional[CredentialsArgs] = None,
                opts: Optional[ResourceOptions] = None)

@overload
def Credentials(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                allow_contextless_requests: Optional[bool] = None,
                allowed_entities: Optional[CredentialsAllowedEntitiesArgs] = None,
                certificate: Optional[str] = None,
                credential_usage_summaries: Optional[Sequence[CredentialsCredentialUsageSummaryArgs]] = None,
                description: Optional[str] = None,
                external: Optional[CredentialsExternalArgs] = None,
                format: Optional[str] = None,
                name: Optional[str] = None,
                owner_access_only: Optional[bool] = None,
                password: Optional[str] = None,
                public: Optional[bool] = None,
                scope: Optional[str] = None,
                scopes: Optional[Sequence[str]] = None,
                token: Optional[str] = None,
                username: Optional[str] = None)
    func NewCredentials(ctx *Context, name string, args *CredentialsArgs, opts ...ResourceOption) (*Credentials, error)
    public Credentials(string name, CredentialsArgs? args = null, CustomResourceOptions? opts = null)
    public Credentials(String name, CredentialsArgs args)
public Credentials(String name, CredentialsArgs args, CustomResourceOptions options)

    type: dynatrace:Credentials
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "dynatrace_credentials" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args CredentialsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CredentialsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CredentialsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CredentialsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CredentialsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var credentialsResource = new Dynatrace.Credentials("credentialsResource", new()
{
    AllowContextlessRequests = false,
    AllowedEntities = new Dynatrace.Inputs.CredentialsAllowedEntitiesArgs
    {
        Entities = new[]
        {
            new Dynatrace.Inputs.CredentialsAllowedEntitiesEntityArgs
            {
                Id = "string",
                Type = "string",
            },
        },
    },
    Certificate = "string",
    Description = "string",
    External = new Dynatrace.Inputs.CredentialsExternalArgs
    {
        AccountName = "string",
        ApplicationId = "string",
        Certificate = "string",
        ClientSecret = "string",
        Clientid = "string",
        CredentialsUsedForExternalSynchronizations = new[]
        {
            "string",
        },
        FolderName = "string",
        PasswordSecretName = "string",
        PathToCredentials = "string",
        Roleid = "string",
        SafeName = "string",
        Secretid = "string",
        Tenantid = "string",
        TokenSecretName = "string",
        UsernamePasswordForCpm = "string",
        UsernameSecretName = "string",
        VaultNamespace = "string",
        VaultUrl = "string",
    },
    Format = "string",
    Name = "string",
    OwnerAccessOnly = false,
    Password = "string",
    Public = false,
    Scopes = new[]
    {
        "string",
    },
    Token = "string",
    Username = "string",
});

    example, err := dynatrace.NewCredentials(ctx, "credentialsResource", &dynatrace.CredentialsArgs{
	AllowContextlessRequests: pulumi.Bool(false),
	AllowedEntities: &dynatrace.CredentialsAllowedEntitiesArgs{
		Entities: dynatrace.CredentialsAllowedEntitiesEntityArray{
			&dynatrace.CredentialsAllowedEntitiesEntityArgs{
				Id:   pulumi.String("string"),
				Type: pulumi.String("string"),
			},
		},
	},
	Certificate: pulumi.String("string"),
	Description: pulumi.String("string"),
	External: &dynatrace.CredentialsExternalArgs{
		AccountName:   pulumi.String("string"),
		ApplicationId: pulumi.String("string"),
		Certificate:   pulumi.String("string"),
		ClientSecret:  pulumi.String("string"),
		Clientid:      pulumi.String("string"),
		CredentialsUsedForExternalSynchronizations: pulumi.StringArray{
			pulumi.String("string"),
		},
		FolderName:             pulumi.String("string"),
		PasswordSecretName:     pulumi.String("string"),
		PathToCredentials:      pulumi.String("string"),
		Roleid:                 pulumi.String("string"),
		SafeName:               pulumi.String("string"),
		Secretid:               pulumi.String("string"),
		Tenantid:               pulumi.String("string"),
		TokenSecretName:        pulumi.String("string"),
		UsernamePasswordForCpm: pulumi.String("string"),
		UsernameSecretName:     pulumi.String("string"),
		VaultNamespace:         pulumi.String("string"),
		VaultUrl:               pulumi.String("string"),
	},
	Format:          pulumi.String("string"),
	Name:            pulumi.String("string"),
	OwnerAccessOnly: pulumi.Bool(false),
	Password:        pulumi.String("string"),
	Public:          pulumi.Bool(false),
	Scopes: pulumi.StringArray{
		pulumi.String("string"),
	},
	Token:    pulumi.String("string"),
	Username: pulumi.String("string"),
})

    resource "dynatrace_credentials" "credentialsResource" {
  allow_contextless_requests = false
  allowed_entities = {
    entities = [{
      "id"   = "string"
      "type" = "string"
    }]
  }
  certificate = "string"
  description = "string"
  external = {
    account_name                                   = "string"
    application_id                                 = "string"
    certificate                                    = "string"
    client_secret                                  = "string"
    clientid                                       = "string"
    credentials_used_for_external_synchronizations = ["string"]
    folder_name                                    = "string"
    password_secret_name                           = "string"
    path_to_credentials                            = "string"
    roleid                                         = "string"
    safe_name                                      = "string"
    secretid                                       = "string"
    tenantid                                       = "string"
    token_secret_name                              = "string"
    username_password_for_cpm                      = "string"
    username_secret_name                           = "string"
    vault_namespace                                = "string"
    vault_url                                      = "string"
  }
  format            = "string"
  name              = "string"
  owner_access_only = false
  password          = "string"
  public            = false
  scopes            = ["string"]
  token             = "string"
  username          = "string"
}

    var credentialsResource = new Credentials("credentialsResource", CredentialsArgs.builder()
    .allowContextlessRequests(false)
    .allowedEntities(CredentialsAllowedEntitiesArgs.builder()
        .entities(CredentialsAllowedEntitiesEntityArgs.builder()
            .id("string")
            .type("string")
            .build())
        .build())
    .certificate("string")
    .description("string")
    .external(CredentialsExternalArgs.builder()
        .accountName("string")
        .applicationId("string")
        .certificate("string")
        .clientSecret("string")
        .clientid("string")
        .credentialsUsedForExternalSynchronizations("string")
        .folderName("string")
        .passwordSecretName("string")
        .pathToCredentials("string")
        .roleid("string")
        .safeName("string")
        .secretid("string")
        .tenantid("string")
        .tokenSecretName("string")
        .usernamePasswordForCpm("string")
        .usernameSecretName("string")
        .vaultNamespace("string")
        .vaultUrl("string")
        .build())
    .format("string")
    .name("string")
    .ownerAccessOnly(false)
    .password("string")
    .public_(false)
    .scopes("string")
    .token("string")
    .username("string")
    .build());

    credentials_resource = dynatrace.Credentials("credentialsResource",
    allow_contextless_requests=False,
    allowed_entities={
        "entities": [{
            "id": "string",
            "type": "string",
        }],
    },
    certificate="string",
    description="string",
    external={
        "account_name": "string",
        "application_id": "string",
        "certificate": "string",
        "client_secret": "string",
        "clientid": "string",
        "credentials_used_for_external_synchronizations": ["string"],
        "folder_name": "string",
        "password_secret_name": "string",
        "path_to_credentials": "string",
        "roleid": "string",
        "safe_name": "string",
        "secretid": "string",
        "tenantid": "string",
        "token_secret_name": "string",
        "username_password_for_cpm": "string",
        "username_secret_name": "string",
        "vault_namespace": "string",
        "vault_url": "string",
    },
    format="string",
    name="string",
    owner_access_only=False,
    password="string",
    public=False,
    scopes=["string"],
    token="string",
    username="string")

    const credentialsResource = new dynatrace.Credentials("credentialsResource", {
    allowContextlessRequests: false,
    allowedEntities: {
        entities: [{
            id: "string",
            type: "string",
        }],
    },
    certificate: "string",
    description: "string",
    external: {
        accountName: "string",
        applicationId: "string",
        certificate: "string",
        clientSecret: "string",
        clientid: "string",
        credentialsUsedForExternalSynchronizations: ["string"],
        folderName: "string",
        passwordSecretName: "string",
        pathToCredentials: "string",
        roleid: "string",
        safeName: "string",
        secretid: "string",
        tenantid: "string",
        tokenSecretName: "string",
        usernamePasswordForCpm: "string",
        usernameSecretName: "string",
        vaultNamespace: "string",
        vaultUrl: "string",
    },
    format: "string",
    name: "string",
    ownerAccessOnly: false,
    password: "string",
    "public": false,
    scopes: ["string"],
    token: "string",
    username: "string",
});

    type: dynatrace:Credentials
properties:
    allowContextlessRequests: false
    allowedEntities:
        entities:
            - id: string
              type: string
    certificate: string
    description: string
    external:
        accountName: string
        applicationId: string
        certificate: string
        clientSecret: string
        clientid: string
        credentialsUsedForExternalSynchronizations:
            - string
        folderName: string
        passwordSecretName: string
        pathToCredentials: string
        roleid: string
        safeName: string
        secretid: string
        tenantid: string
        tokenSecretName: string
        usernamePasswordForCpm: string
        usernameSecretName: string
        vaultNamespace: string
        vaultUrl: string
    format: string
    name: string
    ownerAccessOnly: false
    password: string
    public: false
    scopes:
        - string
    token: string
    username: string

    Credentials Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Credentials resource accepts the following input properties:

    AllowContextlessRequests bool
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    AllowedEntities Pulumiverse.Dynatrace.Inputs.CredentialsAllowedEntities
    The set of entities allowed to use the credential.
    Certificate string
    The certificate in the string format.
    CredentialUsageSummaries List<Pulumiverse.Dynatrace.Inputs.CredentialsCredentialUsageSummary>
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    Description string
    A short description of the credentials set
    External Pulumiverse.Dynatrace.Inputs.CredentialsExternal
    External Vault Configuration
    Format string
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    Name string
    The name of the credentials set
    OwnerAccessOnly bool
    The credentials set is available to every user (false) or to owner only (true)
    Password string
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    Public bool
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    Scope string
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    Scopes List<string>
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    Token string
    Token in the string format. Specifying a token implies Token Authentication.
    Username string
    The username of the credentials set.
    AllowContextlessRequests bool
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    AllowedEntities CredentialsAllowedEntitiesArgs
    The set of entities allowed to use the credential.
    Certificate string
    The certificate in the string format.
    CredentialUsageSummaries []CredentialsCredentialUsageSummaryArgs
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    Description string
    A short description of the credentials set
    External CredentialsExternalArgs
    External Vault Configuration
    Format string
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    Name string
    The name of the credentials set
    OwnerAccessOnly bool
    The credentials set is available to every user (false) or to owner only (true)
    Password string
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    Public bool
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    Scope string
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    Scopes []string
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    Token string
    Token in the string format. Specifying a token implies Token Authentication.
    Username string
    The username of the credentials set.
    allow_contextless_requests bool
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowed_entities object
    The set of entities allowed to use the credential.
    certificate string
    The certificate in the string format.
    credential_usage_summaries list(object)
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description string
    A short description of the credentials set
    external object
    External Vault Configuration
    format string
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name string
    The name of the credentials set
    owner_access_only bool
    The credentials set is available to every user (false) or to owner only (true)
    password string
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public bool
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope string
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes list(string)
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token string
    Token in the string format. Specifying a token implies Token Authentication.
    username string
    The username of the credentials set.
    allowContextlessRequests Boolean
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowedEntities CredentialsAllowedEntities
    The set of entities allowed to use the credential.
    certificate String
    The certificate in the string format.
    credentialUsageSummaries List<CredentialsCredentialUsageSummary>
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description String
    A short description of the credentials set
    external CredentialsExternal
    External Vault Configuration
    format String
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name String
    The name of the credentials set
    ownerAccessOnly Boolean
    The credentials set is available to every user (false) or to owner only (true)
    password String
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public_ Boolean
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope String
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes List<String>
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token String
    Token in the string format. Specifying a token implies Token Authentication.
    username String
    The username of the credentials set.
    allowContextlessRequests boolean
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowedEntities CredentialsAllowedEntities
    The set of entities allowed to use the credential.
    certificate string
    The certificate in the string format.
    credentialUsageSummaries CredentialsCredentialUsageSummary[]
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description string
    A short description of the credentials set
    external CredentialsExternal
    External Vault Configuration
    format string
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name string
    The name of the credentials set
    ownerAccessOnly boolean
    The credentials set is available to every user (false) or to owner only (true)
    password string
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public boolean
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope string
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes string[]
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token string
    Token in the string format. Specifying a token implies Token Authentication.
    username string
    The username of the credentials set.
    allow_contextless_requests bool
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowed_entities CredentialsAllowedEntitiesArgs
    The set of entities allowed to use the credential.
    certificate str
    The certificate in the string format.
    credential_usage_summaries Sequence[CredentialsCredentialUsageSummaryArgs]
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description str
    A short description of the credentials set
    external CredentialsExternalArgs
    External Vault Configuration
    format str
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name str
    The name of the credentials set
    owner_access_only bool
    The credentials set is available to every user (false) or to owner only (true)
    password str
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public bool
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope str
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes Sequence[str]
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token str
    Token in the string format. Specifying a token implies Token Authentication.
    username str
    The username of the credentials set.
    allowContextlessRequests Boolean
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowedEntities Property Map
    The set of entities allowed to use the credential.
    certificate String
    The certificate in the string format.
    credentialUsageSummaries List<Property Map>
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description String
    A short description of the credentials set
    external Property Map
    External Vault Configuration
    format String
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name String
    The name of the credentials set
    ownerAccessOnly Boolean
    The credentials set is available to every user (false) or to owner only (true)
    password String
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public Boolean
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope String
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes List<String>
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token String
    Token in the string format. Specifying a token implies Token Authentication.
    username String
    The username of the credentials set.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Credentials resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Credentials Resource

    Get an existing Credentials resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CredentialsState, opts?: CustomResourceOptions): Credentials
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_contextless_requests: Optional[bool] = None,
        allowed_entities: Optional[CredentialsAllowedEntitiesArgs] = None,
        certificate: Optional[str] = None,
        credential_usage_summaries: Optional[Sequence[CredentialsCredentialUsageSummaryArgs]] = None,
        description: Optional[str] = None,
        external: Optional[CredentialsExternalArgs] = None,
        format: Optional[str] = None,
        name: Optional[str] = None,
        owner_access_only: Optional[bool] = None,
        password: Optional[str] = None,
        public: Optional[bool] = None,
        scope: Optional[str] = None,
        scopes: Optional[Sequence[str]] = None,
        token: Optional[str] = None,
        username: Optional[str] = None) -> Credentials
    func GetCredentials(ctx *Context, name string, id IDInput, state *CredentialsState, opts ...ResourceOption) (*Credentials, error)
    public static Credentials Get(string name, Input<string> id, CredentialsState? state, CustomResourceOptions? opts = null)
    public static Credentials get(String name, Output<String> id, CredentialsState state, CustomResourceOptions options)
    resources:  _:    type: dynatrace:Credentials    get:      id: ${id}
    import {
  to = dynatrace_credentials.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowContextlessRequests bool
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    AllowedEntities Pulumiverse.Dynatrace.Inputs.CredentialsAllowedEntities
    The set of entities allowed to use the credential.
    Certificate string
    The certificate in the string format.
    CredentialUsageSummaries List<Pulumiverse.Dynatrace.Inputs.CredentialsCredentialUsageSummary>
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    Description string
    A short description of the credentials set
    External Pulumiverse.Dynatrace.Inputs.CredentialsExternal
    External Vault Configuration
    Format string
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    Name string
    The name of the credentials set
    OwnerAccessOnly bool
    The credentials set is available to every user (false) or to owner only (true)
    Password string
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    Public bool
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    Scope string
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    Scopes List<string>
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    Token string
    Token in the string format. Specifying a token implies Token Authentication.
    Username string
    The username of the credentials set.
    AllowContextlessRequests bool
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    AllowedEntities CredentialsAllowedEntitiesArgs
    The set of entities allowed to use the credential.
    Certificate string
    The certificate in the string format.
    CredentialUsageSummaries []CredentialsCredentialUsageSummaryArgs
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    Description string
    A short description of the credentials set
    External CredentialsExternalArgs
    External Vault Configuration
    Format string
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    Name string
    The name of the credentials set
    OwnerAccessOnly bool
    The credentials set is available to every user (false) or to owner only (true)
    Password string
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    Public bool
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    Scope string
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    Scopes []string
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    Token string
    Token in the string format. Specifying a token implies Token Authentication.
    Username string
    The username of the credentials set.
    allow_contextless_requests bool
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowed_entities object
    The set of entities allowed to use the credential.
    certificate string
    The certificate in the string format.
    credential_usage_summaries list(object)
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description string
    A short description of the credentials set
    external object
    External Vault Configuration
    format string
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name string
    The name of the credentials set
    owner_access_only bool
    The credentials set is available to every user (false) or to owner only (true)
    password string
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public bool
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope string
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes list(string)
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token string
    Token in the string format. Specifying a token implies Token Authentication.
    username string
    The username of the credentials set.
    allowContextlessRequests Boolean
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowedEntities CredentialsAllowedEntities
    The set of entities allowed to use the credential.
    certificate String
    The certificate in the string format.
    credentialUsageSummaries List<CredentialsCredentialUsageSummary>
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description String
    A short description of the credentials set
    external CredentialsExternal
    External Vault Configuration
    format String
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name String
    The name of the credentials set
    ownerAccessOnly Boolean
    The credentials set is available to every user (false) or to owner only (true)
    password String
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public_ Boolean
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope String
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes List<String>
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token String
    Token in the string format. Specifying a token implies Token Authentication.
    username String
    The username of the credentials set.
    allowContextlessRequests boolean
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowedEntities CredentialsAllowedEntities
    The set of entities allowed to use the credential.
    certificate string
    The certificate in the string format.
    credentialUsageSummaries CredentialsCredentialUsageSummary[]
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description string
    A short description of the credentials set
    external CredentialsExternal
    External Vault Configuration
    format string
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name string
    The name of the credentials set
    ownerAccessOnly boolean
    The credentials set is available to every user (false) or to owner only (true)
    password string
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public boolean
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope string
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes string[]
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token string
    Token in the string format. Specifying a token implies Token Authentication.
    username string
    The username of the credentials set.
    allow_contextless_requests bool
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowed_entities CredentialsAllowedEntitiesArgs
    The set of entities allowed to use the credential.
    certificate str
    The certificate in the string format.
    credential_usage_summaries Sequence[CredentialsCredentialUsageSummaryArgs]
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description str
    A short description of the credentials set
    external CredentialsExternalArgs
    External Vault Configuration
    format str
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name str
    The name of the credentials set
    owner_access_only bool
    The credentials set is available to every user (false) or to owner only (true)
    password str
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public bool
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope str
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes Sequence[str]
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token str
    Token in the string format. Specifying a token implies Token Authentication.
    username str
    The username of the credentials set.
    allowContextlessRequests Boolean
    Allow ad-hoc functions to access the credential details (requires the APP_ENGINE scope).
    allowedEntities Property Map
    The set of entities allowed to use the credential.
    certificate String
    The certificate in the string format.
    credentialUsageSummaries List<Property Map>
    The list contains summary data related to the use of credentials

    Deprecated: credentialUsageSummary will be removed in future versions. It's not getting filled anymore, because it's runtime data

    description String
    A short description of the credentials set
    external Property Map
    External Vault Configuration
    format String
    The certificate format. Possible values are PEM, PKCS12 and UNKNOWN.
    name String
    The name of the credentials set
    ownerAccessOnly Boolean
    The credentials set is available to every user (false) or to owner only (true)
    password String
    The password of the credential. Note: Terraform treats an empty string for a value as if the attribute was absent. If you want to set an empty password, use the value --empty--.
    public Boolean
    For certificate authentication specifies whether it's public certificate auth (true) or not (false).
    scope String
    The scope of the credentials set. Possible values are ALL, APP_ENGINE, EXTENSION and SYNTHETIC

    Deprecated: Deprecated(v279), please use scopes instead.

    scopes List<String>
    The set of scopes of the credentials set. Possible values are APP_ENGINE and SYNTHETIC
    token String
    Token in the string format. Specifying a token implies Token Authentication.
    username String
    The username of the credentials set.

    Supporting Types

    CredentialsAllowedEntities, CredentialsAllowedEntitiesArgs

    Entities List<Pulumiverse.Dynatrace.Inputs.CredentialsAllowedEntitiesEntity>
    The set of entities allowed to use the credential.
    Entities []CredentialsAllowedEntitiesEntity
    The set of entities allowed to use the credential.
    entities list(object)
    The set of entities allowed to use the credential.
    entities List<CredentialsAllowedEntitiesEntity>
    The set of entities allowed to use the credential.
    entities CredentialsAllowedEntitiesEntity[]
    The set of entities allowed to use the credential.
    entities Sequence[CredentialsAllowedEntitiesEntity]
    The set of entities allowed to use the credential.
    entities List<Property Map>
    The set of entities allowed to use the credential.

    CredentialsAllowedEntitiesEntity, CredentialsAllowedEntitiesEntityArgs

    Id string
    ID of the entity
    Type string
    Type of entity. Possible values: USER, APPLICATION, UNKNOWN
    Id string
    ID of the entity
    Type string
    Type of entity. Possible values: USER, APPLICATION, UNKNOWN
    id string
    ID of the entity
    type string
    Type of entity. Possible values: USER, APPLICATION, UNKNOWN
    id String
    ID of the entity
    type String
    Type of entity. Possible values: USER, APPLICATION, UNKNOWN
    id string
    ID of the entity
    type string
    Type of entity. Possible values: USER, APPLICATION, UNKNOWN
    id str
    ID of the entity
    type str
    Type of entity. Possible values: USER, APPLICATION, UNKNOWN
    id String
    ID of the entity
    type String
    Type of entity. Possible values: USER, APPLICATION, UNKNOWN

    CredentialsCredentialUsageSummary, CredentialsCredentialUsageSummaryArgs

    Count int
    The number of uses
    Type string
    Type of usage, HTTP_MONITOR or BROWSER_MONITOR
    Count int
    The number of uses
    Type string
    Type of usage, HTTP_MONITOR or BROWSER_MONITOR
    count number
    The number of uses
    type string
    Type of usage, HTTP_MONITOR or BROWSER_MONITOR
    count Integer
    The number of uses
    type String
    Type of usage, HTTP_MONITOR or BROWSER_MONITOR
    count number
    The number of uses
    type string
    Type of usage, HTTP_MONITOR or BROWSER_MONITOR
    count int
    The number of uses
    type str
    Type of usage, HTTP_MONITOR or BROWSER_MONITOR
    count Number
    The number of uses
    type String
    Type of usage, HTTP_MONITOR or BROWSER_MONITOR

    CredentialsExternal, CredentialsExternalArgs

    AccountName string
    The name of the object that stores the username and password to retrieve and synchronize with the Dynatrace credential vault; this is not the name of the account logged into CyberArk Central Credential Provider.
    ApplicationId string
    The application ID defined in CyberArk Vault
    Certificate string
    Required for Hashicorp Certificate, CyberArk username and password authentication, and CyberArk host-based authentication. The ID of Credentials within the Credentials Vault holding the certificate.
    ClientSecret string
    Required for Azure Client Secret. No further documentation available
    Clientid string
    Required for Azure Client Secret. No further documentation available
    CredentialsUsedForExternalSynchronizations List<string>
    No documentation available
    FolderName string
    The name of the folder where the credentials are stored in CyberArk Vault; the default folder name is Root.
    PasswordSecretName string
    No documentation available
    PathToCredentials string
    Required for Hashicorp App Role or Hashicorp Certificate. No further documentation available
    Roleid string
    Required for Hashicorp App Role. No further documentation available
    SafeName string
    Safe name connected to CyberArk Vault
    Secretid string
    Required for Hashicorp App Role. The ID of Credentials within the Certificate Vault holding the secret id
    Tenantid string
    Required for Azure Client Secret. No further documentation available
    TokenSecretName string
    No documentation available
    UsernamePasswordForCpm string
    Dynatrace credential ID of the username-password pair used for authentication to the CyberArk Central Credential Provider
    UsernameSecretName string
    No documentation available
    VaultNamespace string
    Required for Hashicorp App Role. No further documentation available
    VaultUrl string
    No documentation available
    AccountName string
    The name of the object that stores the username and password to retrieve and synchronize with the Dynatrace credential vault; this is not the name of the account logged into CyberArk Central Credential Provider.
    ApplicationId string
    The application ID defined in CyberArk Vault
    Certificate string
    Required for Hashicorp Certificate, CyberArk username and password authentication, and CyberArk host-based authentication. The ID of Credentials within the Credentials Vault holding the certificate.
    ClientSecret string
    Required for Azure Client Secret. No further documentation available
    Clientid string
    Required for Azure Client Secret. No further documentation available
    CredentialsUsedForExternalSynchronizations []string
    No documentation available
    FolderName string
    The name of the folder where the credentials are stored in CyberArk Vault; the default folder name is Root.
    PasswordSecretName string
    No documentation available
    PathToCredentials string
    Required for Hashicorp App Role or Hashicorp Certificate. No further documentation available
    Roleid string
    Required for Hashicorp App Role. No further documentation available
    SafeName string
    Safe name connected to CyberArk Vault
    Secretid string
    Required for Hashicorp App Role. The ID of Credentials within the Certificate Vault holding the secret id
    Tenantid string
    Required for Azure Client Secret. No further documentation available
    TokenSecretName string
    No documentation available
    UsernamePasswordForCpm string
    Dynatrace credential ID of the username-password pair used for authentication to the CyberArk Central Credential Provider
    UsernameSecretName string
    No documentation available
    VaultNamespace string
    Required for Hashicorp App Role. No further documentation available
    VaultUrl string
    No documentation available
    account_name string
    The name of the object that stores the username and password to retrieve and synchronize with the Dynatrace credential vault; this is not the name of the account logged into CyberArk Central Credential Provider.
    application_id string
    The application ID defined in CyberArk Vault
    certificate string
    Required for Hashicorp Certificate, CyberArk username and password authentication, and CyberArk host-based authentication. The ID of Credentials within the Credentials Vault holding the certificate.
    client_secret string
    Required for Azure Client Secret. No further documentation available
    clientid string
    Required for Azure Client Secret. No further documentation available
    credentials_used_for_external_synchronizations list(string)
    No documentation available
    folder_name string
    The name of the folder where the credentials are stored in CyberArk Vault; the default folder name is Root.
    password_secret_name string
    No documentation available
    path_to_credentials string
    Required for Hashicorp App Role or Hashicorp Certificate. No further documentation available
    roleid string
    Required for Hashicorp App Role. No further documentation available
    safe_name string
    Safe name connected to CyberArk Vault
    secretid string
    Required for Hashicorp App Role. The ID of Credentials within the Certificate Vault holding the secret id
    tenantid string
    Required for Azure Client Secret. No further documentation available
    token_secret_name string
    No documentation available
    username_password_for_cpm string
    Dynatrace credential ID of the username-password pair used for authentication to the CyberArk Central Credential Provider
    username_secret_name string
    No documentation available
    vault_namespace string
    Required for Hashicorp App Role. No further documentation available
    vault_url string
    No documentation available
    accountName String
    The name of the object that stores the username and password to retrieve and synchronize with the Dynatrace credential vault; this is not the name of the account logged into CyberArk Central Credential Provider.
    applicationId String
    The application ID defined in CyberArk Vault
    certificate String
    Required for Hashicorp Certificate, CyberArk username and password authentication, and CyberArk host-based authentication. The ID of Credentials within the Credentials Vault holding the certificate.
    clientSecret String
    Required for Azure Client Secret. No further documentation available
    clientid String
    Required for Azure Client Secret. No further documentation available
    credentialsUsedForExternalSynchronizations List<String>
    No documentation available
    folderName String
    The name of the folder where the credentials are stored in CyberArk Vault; the default folder name is Root.
    passwordSecretName String
    No documentation available
    pathToCredentials String
    Required for Hashicorp App Role or Hashicorp Certificate. No further documentation available
    roleid String
    Required for Hashicorp App Role. No further documentation available
    safeName String
    Safe name connected to CyberArk Vault
    secretid String
    Required for Hashicorp App Role. The ID of Credentials within the Certificate Vault holding the secret id
    tenantid String
    Required for Azure Client Secret. No further documentation available
    tokenSecretName String
    No documentation available
    usernamePasswordForCpm String
    Dynatrace credential ID of the username-password pair used for authentication to the CyberArk Central Credential Provider
    usernameSecretName String
    No documentation available
    vaultNamespace String
    Required for Hashicorp App Role. No further documentation available
    vaultUrl String
    No documentation available
    accountName string
    The name of the object that stores the username and password to retrieve and synchronize with the Dynatrace credential vault; this is not the name of the account logged into CyberArk Central Credential Provider.
    applicationId string
    The application ID defined in CyberArk Vault
    certificate string
    Required for Hashicorp Certificate, CyberArk username and password authentication, and CyberArk host-based authentication. The ID of Credentials within the Credentials Vault holding the certificate.
    clientSecret string
    Required for Azure Client Secret. No further documentation available
    clientid string
    Required for Azure Client Secret. No further documentation available
    credentialsUsedForExternalSynchronizations string[]
    No documentation available
    folderName string
    The name of the folder where the credentials are stored in CyberArk Vault; the default folder name is Root.
    passwordSecretName string
    No documentation available
    pathToCredentials string
    Required for Hashicorp App Role or Hashicorp Certificate. No further documentation available
    roleid string
    Required for Hashicorp App Role. No further documentation available
    safeName string
    Safe name connected to CyberArk Vault
    secretid string
    Required for Hashicorp App Role. The ID of Credentials within the Certificate Vault holding the secret id
    tenantid string
    Required for Azure Client Secret. No further documentation available
    tokenSecretName string
    No documentation available
    usernamePasswordForCpm string
    Dynatrace credential ID of the username-password pair used for authentication to the CyberArk Central Credential Provider
    usernameSecretName string
    No documentation available
    vaultNamespace string
    Required for Hashicorp App Role. No further documentation available
    vaultUrl string
    No documentation available
    account_name str
    The name of the object that stores the username and password to retrieve and synchronize with the Dynatrace credential vault; this is not the name of the account logged into CyberArk Central Credential Provider.
    application_id str
    The application ID defined in CyberArk Vault
    certificate str
    Required for Hashicorp Certificate, CyberArk username and password authentication, and CyberArk host-based authentication. The ID of Credentials within the Credentials Vault holding the certificate.
    client_secret str
    Required for Azure Client Secret. No further documentation available
    clientid str
    Required for Azure Client Secret. No further documentation available
    credentials_used_for_external_synchronizations Sequence[str]
    No documentation available
    folder_name str
    The name of the folder where the credentials are stored in CyberArk Vault; the default folder name is Root.
    password_secret_name str
    No documentation available
    path_to_credentials str
    Required for Hashicorp App Role or Hashicorp Certificate. No further documentation available
    roleid str
    Required for Hashicorp App Role. No further documentation available
    safe_name str
    Safe name connected to CyberArk Vault
    secretid str
    Required for Hashicorp App Role. The ID of Credentials within the Certificate Vault holding the secret id
    tenantid str
    Required for Azure Client Secret. No further documentation available
    token_secret_name str
    No documentation available
    username_password_for_cpm str
    Dynatrace credential ID of the username-password pair used for authentication to the CyberArk Central Credential Provider
    username_secret_name str
    No documentation available
    vault_namespace str
    Required for Hashicorp App Role. No further documentation available
    vault_url str
    No documentation available
    accountName String
    The name of the object that stores the username and password to retrieve and synchronize with the Dynatrace credential vault; this is not the name of the account logged into CyberArk Central Credential Provider.
    applicationId String
    The application ID defined in CyberArk Vault
    certificate String
    Required for Hashicorp Certificate, CyberArk username and password authentication, and CyberArk host-based authentication. The ID of Credentials within the Credentials Vault holding the certificate.
    clientSecret String
    Required for Azure Client Secret. No further documentation available
    clientid String
    Required for Azure Client Secret. No further documentation available
    credentialsUsedForExternalSynchronizations List<String>
    No documentation available
    folderName String
    The name of the folder where the credentials are stored in CyberArk Vault; the default folder name is Root.
    passwordSecretName String
    No documentation available
    pathToCredentials String
    Required for Hashicorp App Role or Hashicorp Certificate. No further documentation available
    roleid String
    Required for Hashicorp App Role. No further documentation available
    safeName String
    Safe name connected to CyberArk Vault
    secretid String
    Required for Hashicorp App Role. The ID of Credentials within the Certificate Vault holding the secret id
    tenantid String
    Required for Azure Client Secret. No further documentation available
    tokenSecretName String
    No documentation available
    usernamePasswordForCpm String
    Dynatrace credential ID of the username-password pair used for authentication to the CyberArk Central Credential Provider
    usernameSecretName String
    No documentation available
    vaultNamespace String
    Required for Hashicorp App Role. No further documentation available
    vaultUrl String
    No documentation available

    Package Details

    Repository
    dynatrace pulumiverse/pulumi-dynatrace
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the dynatrace Terraform Provider.
    dynatrace logo
    Viewing docs for Dynatrace v0.36.0
    published on Tuesday, Jun 9, 2026 by Pulumiverse
    Schema (JSON)
    pulumiverse/pulumi-dynatrace

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial