ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm.getSmIamCredentialsSecretMetadata
Explore with Pulumi AI
Provides a read-only data source for the metadata of an IAM credentials secret. You can then reference the fields of the data source in other resources within the same configuration using interpolation syntax.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";
const iamSecretMetadata = ibm.getSmIamCredentialsSecretMetadata({
instanceId: ibm_resource_instance.sm_instance.guid,
region: "us-south",
secretId: "0b5571f7-21e6-42b7-91c5-3f5ac9793a46",
});
import pulumi
import pulumi_ibm as ibm
iam_secret_metadata = ibm.get_sm_iam_credentials_secret_metadata(instance_id=ibm_resource_instance["sm_instance"]["guid"],
region="us-south",
secret_id="0b5571f7-21e6-42b7-91c5-3f5ac9793a46")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := ibm.GetSmIamCredentialsSecretMetadata(ctx, &ibm.GetSmIamCredentialsSecretMetadataArgs{
InstanceId: ibm_resource_instance.Sm_instance.Guid,
Region: pulumi.StringRef("us-south"),
SecretId: "0b5571f7-21e6-42b7-91c5-3f5ac9793a46",
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;
return await Deployment.RunAsync(() =>
{
var iamSecretMetadata = Ibm.GetSmIamCredentialsSecretMetadata.Invoke(new()
{
InstanceId = ibm_resource_instance.Sm_instance.Guid,
Region = "us-south",
SecretId = "0b5571f7-21e6-42b7-91c5-3f5ac9793a46",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.IbmFunctions;
import com.pulumi.ibm.inputs.GetSmIamCredentialsSecretMetadataArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var iamSecretMetadata = IbmFunctions.getSmIamCredentialsSecretMetadata(GetSmIamCredentialsSecretMetadataArgs.builder()
.instanceId(ibm_resource_instance.sm_instance().guid())
.region("us-south")
.secretId("0b5571f7-21e6-42b7-91c5-3f5ac9793a46")
.build());
}
}
variables:
iamSecretMetadata:
fn::invoke:
function: ibm:getSmIamCredentialsSecretMetadata
arguments:
instanceId: ${ibm_resource_instance.sm_instance.guid}
region: us-south
secretId: 0b5571f7-21e6-42b7-91c5-3f5ac9793a46
Using getSmIamCredentialsSecretMetadata
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getSmIamCredentialsSecretMetadata(args: GetSmIamCredentialsSecretMetadataArgs, opts?: InvokeOptions): Promise<GetSmIamCredentialsSecretMetadataResult>
function getSmIamCredentialsSecretMetadataOutput(args: GetSmIamCredentialsSecretMetadataOutputArgs, opts?: InvokeOptions): Output<GetSmIamCredentialsSecretMetadataResult>
def get_sm_iam_credentials_secret_metadata(endpoint_type: Optional[str] = None,
id: Optional[str] = None,
instance_id: Optional[str] = None,
region: Optional[str] = None,
secret_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetSmIamCredentialsSecretMetadataResult
def get_sm_iam_credentials_secret_metadata_output(endpoint_type: Optional[pulumi.Input[str]] = None,
id: Optional[pulumi.Input[str]] = None,
instance_id: Optional[pulumi.Input[str]] = None,
region: Optional[pulumi.Input[str]] = None,
secret_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetSmIamCredentialsSecretMetadataResult]
func GetSmIamCredentialsSecretMetadata(ctx *Context, args *GetSmIamCredentialsSecretMetadataArgs, opts ...InvokeOption) (*GetSmIamCredentialsSecretMetadataResult, error)
func GetSmIamCredentialsSecretMetadataOutput(ctx *Context, args *GetSmIamCredentialsSecretMetadataOutputArgs, opts ...InvokeOption) GetSmIamCredentialsSecretMetadataResultOutput
> Note: This function is named GetSmIamCredentialsSecretMetadata
in the Go SDK.
public static class GetSmIamCredentialsSecretMetadata
{
public static Task<GetSmIamCredentialsSecretMetadataResult> InvokeAsync(GetSmIamCredentialsSecretMetadataArgs args, InvokeOptions? opts = null)
public static Output<GetSmIamCredentialsSecretMetadataResult> Invoke(GetSmIamCredentialsSecretMetadataInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetSmIamCredentialsSecretMetadataResult> getSmIamCredentialsSecretMetadata(GetSmIamCredentialsSecretMetadataArgs args, InvokeOptions options)
public static Output<GetSmIamCredentialsSecretMetadataResult> getSmIamCredentialsSecretMetadata(GetSmIamCredentialsSecretMetadataArgs args, InvokeOptions options)
fn::invoke:
function: ibm:index/getSmIamCredentialsSecretMetadata:getSmIamCredentialsSecretMetadata
arguments:
# arguments dictionary
The following arguments are supported:
- Instance
Id string - The GUID of the Secrets Manager instance.
- Secret
Id string - The ID of the secret.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/
.
- Constraints: The maximum length is
- Endpoint
Type string - The endpoint type. If not provided the endpoint type is determined by the
visibility
argument provided in the provider configuration.- Constraints: Allowable values are:
private
,public
.
- Constraints: Allowable values are:
- Id string
- The unique identifier of the data source.
- Region string
- The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
- Instance
Id string - The GUID of the Secrets Manager instance.
- Secret
Id string - The ID of the secret.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/
.
- Constraints: The maximum length is
- Endpoint
Type string - The endpoint type. If not provided the endpoint type is determined by the
visibility
argument provided in the provider configuration.- Constraints: Allowable values are:
private
,public
.
- Constraints: Allowable values are:
- Id string
- The unique identifier of the data source.
- Region string
- The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
- instance
Id String - The GUID of the Secrets Manager instance.
- secret
Id String - The ID of the secret.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/
.
- Constraints: The maximum length is
- endpoint
Type String - The endpoint type. If not provided the endpoint type is determined by the
visibility
argument provided in the provider configuration.- Constraints: Allowable values are:
private
,public
.
- Constraints: Allowable values are:
- id String
- The unique identifier of the data source.
- region String
- The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
- instance
Id string - The GUID of the Secrets Manager instance.
- secret
Id string - The ID of the secret.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/
.
- Constraints: The maximum length is
- endpoint
Type string - The endpoint type. If not provided the endpoint type is determined by the
visibility
argument provided in the provider configuration.- Constraints: Allowable values are:
private
,public
.
- Constraints: Allowable values are:
- id string
- The unique identifier of the data source.
- region string
- The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
- instance_
id str - The GUID of the Secrets Manager instance.
- secret_
id str - The ID of the secret.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/
.
- Constraints: The maximum length is
- endpoint_
type str - The endpoint type. If not provided the endpoint type is determined by the
visibility
argument provided in the provider configuration.- Constraints: Allowable values are:
private
,public
.
- Constraints: Allowable values are:
- id str
- The unique identifier of the data source.
- region str
- The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
- instance
Id String - The GUID of the Secrets Manager instance.
- secret
Id String - The ID of the secret.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/
.
- Constraints: The maximum length is
- endpoint
Type String - The endpoint type. If not provided the endpoint type is determined by the
visibility
argument provided in the provider configuration.- Constraints: Allowable values are:
private
,public
.
- Constraints: Allowable values are:
- id String
- The unique identifier of the data source.
- region String
- The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
getSmIamCredentialsSecretMetadata Result
The following output properties are available:
- Access
Groups List<string> - (List) Access Groups that you can use for an
iam_credentials
secret.Up to 10 Access Groups can be used for each secret.- Constraints: The list items must match regular expression
/^AccessGroupId-[a-z0-9-]+[a-z0-9]$/
. The maximum length is10
items. The minimum length is1
item.
- Constraints: The list items must match regular expression
- Account
Id string - (String) The ID of the account in which the IAM credentials are created. This field is omitted if the target account is the same as the account of the Secrets Manager instance.
- Api
Key stringId - (String) The ID of the API key that is generated for this secret.
- Created
At string - (String) The date when a resource was created. The date format follows RFC 3339.
- Created
By string - (String) The unique identifier that is associated with the entity that created the secret.
- Constraints: The maximum length is
128
characters. The minimum length is4
characters.
- Constraints: The maximum length is
- Crn string
- (String) A CRN that uniquely identifies an IBM Cloud resource.
- Constraints: The maximum length is
512
characters. The minimum length is9
characters. The value must match regular expression/^crn:v0-9*+,;=@\/]|%[0-9A-Z]{2})*){8}$/
.
- Constraints: The maximum length is
- Custom
Metadata Dictionary<string, string> - (Map) The secret metadata that a user can customize.
- Description string
- (String) An extended description of your secret.To protect your privacy, do not use personal data, such as your name or location, as a description for your secret group.
- Constraints: The maximum length is
1024
characters. The minimum length is0
characters. The value must match regular expression/(.*?)/
.
- Constraints: The maximum length is
- Downloaded bool
- (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
- Expiration
Date string - (String) The date a secret is expired. The date format follows RFC 3339.
- Id string
- The unique identifier of the data source.
- Instance
Id string - Labels List<string>
- (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.
- Constraints: The list items must match regular expression
/(.*?)/
. The maximum length is30
items. The minimum length is0
items.
- Constraints: The list items must match regular expression
- Locks
Total double - (Integer) The number of locks of the secret.
- Constraints: The maximum value is
1000
. The minimum value is0
.
- Constraints: The maximum value is
- Name string
- (String) The human-readable name of your secret.
- Constraints: The maximum length is
256
characters. The minimum length is2
characters.
- Constraints: The maximum length is
- Next
Rotation stringDate - (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
- Region string
- Reuse
Api boolKey - Rotations
List<Get
Sm Iam Credentials Secret Metadata Rotation> - (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
- Secret
Group stringId - (String) A UUID identifier, or
default
secret group.- Constraints: The maximum length is
36
characters. The minimum length is7
characters. The value must match regular expression/^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/
.
- Constraints: The maximum length is
- Secret
Id string - Secret
Type string - (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.
- Constraints: Allowable values are:
arbitrary
,imported_cert
,public_cert
,iam_credentials
,kv
,username_password
,private_cert
.
- Constraints: Allowable values are:
- Service
Id string - (String) The service ID under which the API key (see the
api_key
field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include theaccess_groups
parameter.- Constraints: The maximum length is
50
characters. The minimum length is40
characters. The value must match regular expression/^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/
.
- Constraints: The maximum length is
- Service
Id boolIs Static - (Boolean) Indicates whether an
iam_credentials
secret was created with a static service ID.If it is set totrue
, the service ID for the secret was provided by the user at secret creation. If it is set tofalse
, the service ID was generated by Secrets Manager. - State double
- (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the
Pre-activation = 0
,Active = 1
,Suspended = 2
,Deactivated = 3
, andDestroyed = 5
values.- Constraints: Allowable values are:
0
,1
,2
,3
,5
.
- Constraints: Allowable values are:
- State
Description string - (String) A text representation of the secret state.
- Constraints: Allowable values are:
pre_activation
,active
,suspended
,deactivated
,destroyed
.
- Constraints: Allowable values are:
- Ttl string
- (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For
iam_credentials
secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as120m
or24h
.Minimum duration is 1 minute. Maximum is 90 days.- Constraints: The maximum length is
10
characters. The minimum length is2
characters. The value must match regular expression/^[0-9]+[s,m,h,d]{0,1}$/
.
- Constraints: The maximum length is
- Updated
At string - (String) The date when a resource was recently modified. The date format follows RFC 3339.
- Versions
Total double - (Integer) The number of versions of the secret.
- Constraints: The maximum value is
50
. The minimum value is0
.
- Constraints: The maximum value is
- Endpoint
Type string
- Access
Groups []string - (List) Access Groups that you can use for an
iam_credentials
secret.Up to 10 Access Groups can be used for each secret.- Constraints: The list items must match regular expression
/^AccessGroupId-[a-z0-9-]+[a-z0-9]$/
. The maximum length is10
items. The minimum length is1
item.
- Constraints: The list items must match regular expression
- Account
Id string - (String) The ID of the account in which the IAM credentials are created. This field is omitted if the target account is the same as the account of the Secrets Manager instance.
- Api
Key stringId - (String) The ID of the API key that is generated for this secret.
- Created
At string - (String) The date when a resource was created. The date format follows RFC 3339.
- Created
By string - (String) The unique identifier that is associated with the entity that created the secret.
- Constraints: The maximum length is
128
characters. The minimum length is4
characters.
- Constraints: The maximum length is
- Crn string
- (String) A CRN that uniquely identifies an IBM Cloud resource.
- Constraints: The maximum length is
512
characters. The minimum length is9
characters. The value must match regular expression/^crn:v0-9*+,;=@\/]|%[0-9A-Z]{2})*){8}$/
.
- Constraints: The maximum length is
- Custom
Metadata map[string]string - (Map) The secret metadata that a user can customize.
- Description string
- (String) An extended description of your secret.To protect your privacy, do not use personal data, such as your name or location, as a description for your secret group.
- Constraints: The maximum length is
1024
characters. The minimum length is0
characters. The value must match regular expression/(.*?)/
.
- Constraints: The maximum length is
- Downloaded bool
- (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
- Expiration
Date string - (String) The date a secret is expired. The date format follows RFC 3339.
- Id string
- The unique identifier of the data source.
- Instance
Id string - Labels []string
- (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.
- Constraints: The list items must match regular expression
/(.*?)/
. The maximum length is30
items. The minimum length is0
items.
- Constraints: The list items must match regular expression
- Locks
Total float64 - (Integer) The number of locks of the secret.
- Constraints: The maximum value is
1000
. The minimum value is0
.
- Constraints: The maximum value is
- Name string
- (String) The human-readable name of your secret.
- Constraints: The maximum length is
256
characters. The minimum length is2
characters.
- Constraints: The maximum length is
- Next
Rotation stringDate - (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
- Region string
- Reuse
Api boolKey - Rotations
[]Get
Sm Iam Credentials Secret Metadata Rotation - (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
- Secret
Group stringId - (String) A UUID identifier, or
default
secret group.- Constraints: The maximum length is
36
characters. The minimum length is7
characters. The value must match regular expression/^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/
.
- Constraints: The maximum length is
- Secret
Id string - Secret
Type string - (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.
- Constraints: Allowable values are:
arbitrary
,imported_cert
,public_cert
,iam_credentials
,kv
,username_password
,private_cert
.
- Constraints: Allowable values are:
- Service
Id string - (String) The service ID under which the API key (see the
api_key
field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include theaccess_groups
parameter.- Constraints: The maximum length is
50
characters. The minimum length is40
characters. The value must match regular expression/^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/
.
- Constraints: The maximum length is
- Service
Id boolIs Static - (Boolean) Indicates whether an
iam_credentials
secret was created with a static service ID.If it is set totrue
, the service ID for the secret was provided by the user at secret creation. If it is set tofalse
, the service ID was generated by Secrets Manager. - State float64
- (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the
Pre-activation = 0
,Active = 1
,Suspended = 2
,Deactivated = 3
, andDestroyed = 5
values.- Constraints: Allowable values are:
0
,1
,2
,3
,5
.
- Constraints: Allowable values are:
- State
Description string - (String) A text representation of the secret state.
- Constraints: Allowable values are:
pre_activation
,active
,suspended
,deactivated
,destroyed
.
- Constraints: Allowable values are:
- Ttl string
- (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For
iam_credentials
secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as120m
or24h
.Minimum duration is 1 minute. Maximum is 90 days.- Constraints: The maximum length is
10
characters. The minimum length is2
characters. The value must match regular expression/^[0-9]+[s,m,h,d]{0,1}$/
.
- Constraints: The maximum length is
- Updated
At string - (String) The date when a resource was recently modified. The date format follows RFC 3339.
- Versions
Total float64 - (Integer) The number of versions of the secret.
- Constraints: The maximum value is
50
. The minimum value is0
.
- Constraints: The maximum value is
- Endpoint
Type string
- access
Groups List<String> - (List) Access Groups that you can use for an
iam_credentials
secret.Up to 10 Access Groups can be used for each secret.- Constraints: The list items must match regular expression
/^AccessGroupId-[a-z0-9-]+[a-z0-9]$/
. The maximum length is10
items. The minimum length is1
item.
- Constraints: The list items must match regular expression
- account
Id String - (String) The ID of the account in which the IAM credentials are created. This field is omitted if the target account is the same as the account of the Secrets Manager instance.
- api
Key StringId - (String) The ID of the API key that is generated for this secret.
- created
At String - (String) The date when a resource was created. The date format follows RFC 3339.
- created
By String - (String) The unique identifier that is associated with the entity that created the secret.
- Constraints: The maximum length is
128
characters. The minimum length is4
characters.
- Constraints: The maximum length is
- crn String
- (String) A CRN that uniquely identifies an IBM Cloud resource.
- Constraints: The maximum length is
512
characters. The minimum length is9
characters. The value must match regular expression/^crn:v0-9*+,;=@\/]|%[0-9A-Z]{2})*){8}$/
.
- Constraints: The maximum length is
- custom
Metadata Map<String,String> - (Map) The secret metadata that a user can customize.
- description String
- (String) An extended description of your secret.To protect your privacy, do not use personal data, such as your name or location, as a description for your secret group.
- Constraints: The maximum length is
1024
characters. The minimum length is0
characters. The value must match regular expression/(.*?)/
.
- Constraints: The maximum length is
- downloaded Boolean
- (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
- expiration
Date String - (String) The date a secret is expired. The date format follows RFC 3339.
- id String
- The unique identifier of the data source.
- instance
Id String - labels List<String>
- (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.
- Constraints: The list items must match regular expression
/(.*?)/
. The maximum length is30
items. The minimum length is0
items.
- Constraints: The list items must match regular expression
- locks
Total Double - (Integer) The number of locks of the secret.
- Constraints: The maximum value is
1000
. The minimum value is0
.
- Constraints: The maximum value is
- name String
- (String) The human-readable name of your secret.
- Constraints: The maximum length is
256
characters. The minimum length is2
characters.
- Constraints: The maximum length is
- next
Rotation StringDate - (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
- region String
- reuse
Api BooleanKey - rotations
List<Get
Sm Iam Credentials Secret Metadata Rotation> - (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
- secret
Group StringId - (String) A UUID identifier, or
default
secret group.- Constraints: The maximum length is
36
characters. The minimum length is7
characters. The value must match regular expression/^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/
.
- Constraints: The maximum length is
- secret
Id String - secret
Type String - (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.
- Constraints: Allowable values are:
arbitrary
,imported_cert
,public_cert
,iam_credentials
,kv
,username_password
,private_cert
.
- Constraints: Allowable values are:
- service
Id String - (String) The service ID under which the API key (see the
api_key
field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include theaccess_groups
parameter.- Constraints: The maximum length is
50
characters. The minimum length is40
characters. The value must match regular expression/^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/
.
- Constraints: The maximum length is
- service
Id BooleanIs Static - (Boolean) Indicates whether an
iam_credentials
secret was created with a static service ID.If it is set totrue
, the service ID for the secret was provided by the user at secret creation. If it is set tofalse
, the service ID was generated by Secrets Manager. - state Double
- (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the
Pre-activation = 0
,Active = 1
,Suspended = 2
,Deactivated = 3
, andDestroyed = 5
values.- Constraints: Allowable values are:
0
,1
,2
,3
,5
.
- Constraints: Allowable values are:
- state
Description String - (String) A text representation of the secret state.
- Constraints: Allowable values are:
pre_activation
,active
,suspended
,deactivated
,destroyed
.
- Constraints: Allowable values are:
- ttl String
- (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For
iam_credentials
secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as120m
or24h
.Minimum duration is 1 minute. Maximum is 90 days.- Constraints: The maximum length is
10
characters. The minimum length is2
characters. The value must match regular expression/^[0-9]+[s,m,h,d]{0,1}$/
.
- Constraints: The maximum length is
- updated
At String - (String) The date when a resource was recently modified. The date format follows RFC 3339.
- versions
Total Double - (Integer) The number of versions of the secret.
- Constraints: The maximum value is
50
. The minimum value is0
.
- Constraints: The maximum value is
- endpoint
Type String
- access
Groups string[] - (List) Access Groups that you can use for an
iam_credentials
secret.Up to 10 Access Groups can be used for each secret.- Constraints: The list items must match regular expression
/^AccessGroupId-[a-z0-9-]+[a-z0-9]$/
. The maximum length is10
items. The minimum length is1
item.
- Constraints: The list items must match regular expression
- account
Id string - (String) The ID of the account in which the IAM credentials are created. This field is omitted if the target account is the same as the account of the Secrets Manager instance.
- api
Key stringId - (String) The ID of the API key that is generated for this secret.
- created
At string - (String) The date when a resource was created. The date format follows RFC 3339.
- created
By string - (String) The unique identifier that is associated with the entity that created the secret.
- Constraints: The maximum length is
128
characters. The minimum length is4
characters.
- Constraints: The maximum length is
- crn string
- (String) A CRN that uniquely identifies an IBM Cloud resource.
- Constraints: The maximum length is
512
characters. The minimum length is9
characters. The value must match regular expression/^crn:v0-9*+,;=@\/]|%[0-9A-Z]{2})*){8}$/
.
- Constraints: The maximum length is
- custom
Metadata {[key: string]: string} - (Map) The secret metadata that a user can customize.
- description string
- (String) An extended description of your secret.To protect your privacy, do not use personal data, such as your name or location, as a description for your secret group.
- Constraints: The maximum length is
1024
characters. The minimum length is0
characters. The value must match regular expression/(.*?)/
.
- Constraints: The maximum length is
- downloaded boolean
- (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
- expiration
Date string - (String) The date a secret is expired. The date format follows RFC 3339.
- id string
- The unique identifier of the data source.
- instance
Id string - labels string[]
- (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.
- Constraints: The list items must match regular expression
/(.*?)/
. The maximum length is30
items. The minimum length is0
items.
- Constraints: The list items must match regular expression
- locks
Total number - (Integer) The number of locks of the secret.
- Constraints: The maximum value is
1000
. The minimum value is0
.
- Constraints: The maximum value is
- name string
- (String) The human-readable name of your secret.
- Constraints: The maximum length is
256
characters. The minimum length is2
characters.
- Constraints: The maximum length is
- next
Rotation stringDate - (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
- region string
- reuse
Api booleanKey - rotations
Get
Sm Iam Credentials Secret Metadata Rotation[] - (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
- secret
Group stringId - (String) A UUID identifier, or
default
secret group.- Constraints: The maximum length is
36
characters. The minimum length is7
characters. The value must match regular expression/^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/
.
- Constraints: The maximum length is
- secret
Id string - secret
Type string - (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.
- Constraints: Allowable values are:
arbitrary
,imported_cert
,public_cert
,iam_credentials
,kv
,username_password
,private_cert
.
- Constraints: Allowable values are:
- service
Id string - (String) The service ID under which the API key (see the
api_key
field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include theaccess_groups
parameter.- Constraints: The maximum length is
50
characters. The minimum length is40
characters. The value must match regular expression/^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/
.
- Constraints: The maximum length is
- service
Id booleanIs Static - (Boolean) Indicates whether an
iam_credentials
secret was created with a static service ID.If it is set totrue
, the service ID for the secret was provided by the user at secret creation. If it is set tofalse
, the service ID was generated by Secrets Manager. - state number
- (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the
Pre-activation = 0
,Active = 1
,Suspended = 2
,Deactivated = 3
, andDestroyed = 5
values.- Constraints: Allowable values are:
0
,1
,2
,3
,5
.
- Constraints: Allowable values are:
- state
Description string - (String) A text representation of the secret state.
- Constraints: Allowable values are:
pre_activation
,active
,suspended
,deactivated
,destroyed
.
- Constraints: Allowable values are:
- ttl string
- (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For
iam_credentials
secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as120m
or24h
.Minimum duration is 1 minute. Maximum is 90 days.- Constraints: The maximum length is
10
characters. The minimum length is2
characters. The value must match regular expression/^[0-9]+[s,m,h,d]{0,1}$/
.
- Constraints: The maximum length is
- updated
At string - (String) The date when a resource was recently modified. The date format follows RFC 3339.
- versions
Total number - (Integer) The number of versions of the secret.
- Constraints: The maximum value is
50
. The minimum value is0
.
- Constraints: The maximum value is
- endpoint
Type string
- access_
groups Sequence[str] - (List) Access Groups that you can use for an
iam_credentials
secret.Up to 10 Access Groups can be used for each secret.- Constraints: The list items must match regular expression
/^AccessGroupId-[a-z0-9-]+[a-z0-9]$/
. The maximum length is10
items. The minimum length is1
item.
- Constraints: The list items must match regular expression
- account_
id str - (String) The ID of the account in which the IAM credentials are created. This field is omitted if the target account is the same as the account of the Secrets Manager instance.
- api_
key_ strid - (String) The ID of the API key that is generated for this secret.
- created_
at str - (String) The date when a resource was created. The date format follows RFC 3339.
- created_
by str - (String) The unique identifier that is associated with the entity that created the secret.
- Constraints: The maximum length is
128
characters. The minimum length is4
characters.
- Constraints: The maximum length is
- crn str
- (String) A CRN that uniquely identifies an IBM Cloud resource.
- Constraints: The maximum length is
512
characters. The minimum length is9
characters. The value must match regular expression/^crn:v0-9*+,;=@\/]|%[0-9A-Z]{2})*){8}$/
.
- Constraints: The maximum length is
- custom_
metadata Mapping[str, str] - (Map) The secret metadata that a user can customize.
- description str
- (String) An extended description of your secret.To protect your privacy, do not use personal data, such as your name or location, as a description for your secret group.
- Constraints: The maximum length is
1024
characters. The minimum length is0
characters. The value must match regular expression/(.*?)/
.
- Constraints: The maximum length is
- downloaded bool
- (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
- expiration_
date str - (String) The date a secret is expired. The date format follows RFC 3339.
- id str
- The unique identifier of the data source.
- instance_
id str - labels Sequence[str]
- (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.
- Constraints: The list items must match regular expression
/(.*?)/
. The maximum length is30
items. The minimum length is0
items.
- Constraints: The list items must match regular expression
- locks_
total float - (Integer) The number of locks of the secret.
- Constraints: The maximum value is
1000
. The minimum value is0
.
- Constraints: The maximum value is
- name str
- (String) The human-readable name of your secret.
- Constraints: The maximum length is
256
characters. The minimum length is2
characters.
- Constraints: The maximum length is
- next_
rotation_ strdate - (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
- region str
- reuse_
api_ boolkey - rotations
Sequence[Get
Sm Iam Credentials Secret Metadata Rotation] - (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
- secret_
group_ strid - (String) A UUID identifier, or
default
secret group.- Constraints: The maximum length is
36
characters. The minimum length is7
characters. The value must match regular expression/^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/
.
- Constraints: The maximum length is
- secret_
id str - secret_
type str - (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.
- Constraints: Allowable values are:
arbitrary
,imported_cert
,public_cert
,iam_credentials
,kv
,username_password
,private_cert
.
- Constraints: Allowable values are:
- service_
id str - (String) The service ID under which the API key (see the
api_key
field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include theaccess_groups
parameter.- Constraints: The maximum length is
50
characters. The minimum length is40
characters. The value must match regular expression/^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/
.
- Constraints: The maximum length is
- service_
id_ boolis_ static - (Boolean) Indicates whether an
iam_credentials
secret was created with a static service ID.If it is set totrue
, the service ID for the secret was provided by the user at secret creation. If it is set tofalse
, the service ID was generated by Secrets Manager. - state float
- (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the
Pre-activation = 0
,Active = 1
,Suspended = 2
,Deactivated = 3
, andDestroyed = 5
values.- Constraints: Allowable values are:
0
,1
,2
,3
,5
.
- Constraints: Allowable values are:
- state_
description str - (String) A text representation of the secret state.
- Constraints: Allowable values are:
pre_activation
,active
,suspended
,deactivated
,destroyed
.
- Constraints: Allowable values are:
- ttl str
- (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For
iam_credentials
secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as120m
or24h
.Minimum duration is 1 minute. Maximum is 90 days.- Constraints: The maximum length is
10
characters. The minimum length is2
characters. The value must match regular expression/^[0-9]+[s,m,h,d]{0,1}$/
.
- Constraints: The maximum length is
- updated_
at str - (String) The date when a resource was recently modified. The date format follows RFC 3339.
- versions_
total float - (Integer) The number of versions of the secret.
- Constraints: The maximum value is
50
. The minimum value is0
.
- Constraints: The maximum value is
- endpoint_
type str
- access
Groups List<String> - (List) Access Groups that you can use for an
iam_credentials
secret.Up to 10 Access Groups can be used for each secret.- Constraints: The list items must match regular expression
/^AccessGroupId-[a-z0-9-]+[a-z0-9]$/
. The maximum length is10
items. The minimum length is1
item.
- Constraints: The list items must match regular expression
- account
Id String - (String) The ID of the account in which the IAM credentials are created. This field is omitted if the target account is the same as the account of the Secrets Manager instance.
- api
Key StringId - (String) The ID of the API key that is generated for this secret.
- created
At String - (String) The date when a resource was created. The date format follows RFC 3339.
- created
By String - (String) The unique identifier that is associated with the entity that created the secret.
- Constraints: The maximum length is
128
characters. The minimum length is4
characters.
- Constraints: The maximum length is
- crn String
- (String) A CRN that uniquely identifies an IBM Cloud resource.
- Constraints: The maximum length is
512
characters. The minimum length is9
characters. The value must match regular expression/^crn:v0-9*+,;=@\/]|%[0-9A-Z]{2})*){8}$/
.
- Constraints: The maximum length is
- custom
Metadata Map<String> - (Map) The secret metadata that a user can customize.
- description String
- (String) An extended description of your secret.To protect your privacy, do not use personal data, such as your name or location, as a description for your secret group.
- Constraints: The maximum length is
1024
characters. The minimum length is0
characters. The value must match regular expression/(.*?)/
.
- Constraints: The maximum length is
- downloaded Boolean
- (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
- expiration
Date String - (String) The date a secret is expired. The date format follows RFC 3339.
- id String
- The unique identifier of the data source.
- instance
Id String - labels List<String>
- (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.
- Constraints: The list items must match regular expression
/(.*?)/
. The maximum length is30
items. The minimum length is0
items.
- Constraints: The list items must match regular expression
- locks
Total Number - (Integer) The number of locks of the secret.
- Constraints: The maximum value is
1000
. The minimum value is0
.
- Constraints: The maximum value is
- name String
- (String) The human-readable name of your secret.
- Constraints: The maximum length is
256
characters. The minimum length is2
characters.
- Constraints: The maximum length is
- next
Rotation StringDate - (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
- region String
- reuse
Api BooleanKey - rotations List<Property Map>
- (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
- secret
Group StringId - (String) A UUID identifier, or
default
secret group.- Constraints: The maximum length is
36
characters. The minimum length is7
characters. The value must match regular expression/^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/
.
- Constraints: The maximum length is
- secret
Id String - secret
Type String - (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.
- Constraints: Allowable values are:
arbitrary
,imported_cert
,public_cert
,iam_credentials
,kv
,username_password
,private_cert
.
- Constraints: Allowable values are:
- service
Id String - (String) The service ID under which the API key (see the
api_key
field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include theaccess_groups
parameter.- Constraints: The maximum length is
50
characters. The minimum length is40
characters. The value must match regular expression/^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/
.
- Constraints: The maximum length is
- service
Id BooleanIs Static - (Boolean) Indicates whether an
iam_credentials
secret was created with a static service ID.If it is set totrue
, the service ID for the secret was provided by the user at secret creation. If it is set tofalse
, the service ID was generated by Secrets Manager. - state Number
- (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the
Pre-activation = 0
,Active = 1
,Suspended = 2
,Deactivated = 3
, andDestroyed = 5
values.- Constraints: Allowable values are:
0
,1
,2
,3
,5
.
- Constraints: Allowable values are:
- state
Description String - (String) A text representation of the secret state.
- Constraints: Allowable values are:
pre_activation
,active
,suspended
,deactivated
,destroyed
.
- Constraints: Allowable values are:
- ttl String
- (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For
iam_credentials
secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as120m
or24h
.Minimum duration is 1 minute. Maximum is 90 days.- Constraints: The maximum length is
10
characters. The minimum length is2
characters. The value must match regular expression/^[0-9]+[s,m,h,d]{0,1}$/
.
- Constraints: The maximum length is
- updated
At String - (String) The date when a resource was recently modified. The date format follows RFC 3339.
- versions
Total Number - (Integer) The number of versions of the secret.
- Constraints: The maximum value is
50
. The minimum value is0
.
- Constraints: The maximum value is
- endpoint
Type String
Supporting Types
GetSmIamCredentialsSecretMetadataRotation
- Auto
Rotate bool - (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is
false
. Ifauto_rotate
is set totrue
the service rotates your secret based on the defined interval. - Interval double
- (Integer) The length of the secret rotation time interval.
- Constraints: The minimum value is
1
.
- Constraints: The minimum value is
- Unit string
- (String) The units for the secret rotation time interval.
- Constraints: Allowable values are:
day
,month
.
- Constraints: Allowable values are:
- Auto
Rotate bool - (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is
false
. Ifauto_rotate
is set totrue
the service rotates your secret based on the defined interval. - Interval float64
- (Integer) The length of the secret rotation time interval.
- Constraints: The minimum value is
1
.
- Constraints: The minimum value is
- Unit string
- (String) The units for the secret rotation time interval.
- Constraints: Allowable values are:
day
,month
.
- Constraints: Allowable values are:
- auto
Rotate Boolean - (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is
false
. Ifauto_rotate
is set totrue
the service rotates your secret based on the defined interval. - interval Double
- (Integer) The length of the secret rotation time interval.
- Constraints: The minimum value is
1
.
- Constraints: The minimum value is
- unit String
- (String) The units for the secret rotation time interval.
- Constraints: Allowable values are:
day
,month
.
- Constraints: Allowable values are:
- auto
Rotate boolean - (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is
false
. Ifauto_rotate
is set totrue
the service rotates your secret based on the defined interval. - interval number
- (Integer) The length of the secret rotation time interval.
- Constraints: The minimum value is
1
.
- Constraints: The minimum value is
- unit string
- (String) The units for the secret rotation time interval.
- Constraints: Allowable values are:
day
,month
.
- Constraints: Allowable values are:
- auto_
rotate bool - (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is
false
. Ifauto_rotate
is set totrue
the service rotates your secret based on the defined interval. - interval float
- (Integer) The length of the secret rotation time interval.
- Constraints: The minimum value is
1
.
- Constraints: The minimum value is
- unit str
- (String) The units for the secret rotation time interval.
- Constraints: Allowable values are:
day
,month
.
- Constraints: Allowable values are:
- auto
Rotate Boolean - (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is
false
. Ifauto_rotate
is set totrue
the service rotates your secret based on the defined interval. - interval Number
- (Integer) The length of the secret rotation time interval.
- Constraints: The minimum value is
1
.
- Constraints: The minimum value is
- unit String
- (String) The units for the secret rotation time interval.
- Constraints: Allowable values are:
day
,month
.
- Constraints: Allowable values are:
Package Details
- Repository
- ibm ibm-cloud/terraform-provider-ibm
- License
- Notes
- This Pulumi package is based on the
ibm
Terraform Provider.