1. Packages
  2. Ibm Provider
  3. API Docs
  4. getSmSecrets
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud

ibm.getSmSecrets

Explore with Pulumi AI

ibm logo
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud

    Provides a read-only data source for sm_secrets. You can then reference the fields of the data source in other resources within the same configuration using interpolation syntax.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as ibm from "@pulumi/ibm";
    
    const secrets = ibm.getSmSecrets({
        instanceId: ibm_resource_instance.sm_instance.guid,
        region: "us-south",
    });
    
    import pulumi
    import pulumi_ibm as ibm
    
    secrets = ibm.get_sm_secrets(instance_id=ibm_resource_instance["sm_instance"]["guid"],
        region="us-south")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := ibm.GetSmSecrets(ctx, &ibm.GetSmSecretsArgs{
    			InstanceId: ibm_resource_instance.Sm_instance.Guid,
    			Region:     pulumi.StringRef("us-south"),
    		}, nil)
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Ibm = Pulumi.Ibm;
    
    return await Deployment.RunAsync(() => 
    {
        var secrets = Ibm.GetSmSecrets.Invoke(new()
        {
            InstanceId = ibm_resource_instance.Sm_instance.Guid,
            Region = "us-south",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.ibm.IbmFunctions;
    import com.pulumi.ibm.inputs.GetSmSecretsArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var secrets = IbmFunctions.getSmSecrets(GetSmSecretsArgs.builder()
                .instanceId(ibm_resource_instance.sm_instance().guid())
                .region("us-south")
                .build());
    
        }
    }
    
    variables:
      secrets:
        fn::invoke:
          function: ibm:getSmSecrets
          arguments:
            instanceId: ${ibm_resource_instance.sm_instance.guid}
            region: us-south
    

    Using getSmSecrets

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getSmSecrets(args: GetSmSecretsArgs, opts?: InvokeOptions): Promise<GetSmSecretsResult>
    function getSmSecretsOutput(args: GetSmSecretsOutputArgs, opts?: InvokeOptions): Output<GetSmSecretsResult>
    def get_sm_secrets(endpoint_type: Optional[str] = None,
                       groups: Optional[str] = None,
                       id: Optional[str] = None,
                       instance_id: Optional[str] = None,
                       match_all_labels: Optional[Sequence[str]] = None,
                       region: Optional[str] = None,
                       search: Optional[str] = None,
                       secret_types: Optional[Sequence[str]] = None,
                       sort: Optional[str] = None,
                       opts: Optional[InvokeOptions] = None) -> GetSmSecretsResult
    def get_sm_secrets_output(endpoint_type: Optional[pulumi.Input[str]] = None,
                       groups: Optional[pulumi.Input[str]] = None,
                       id: Optional[pulumi.Input[str]] = None,
                       instance_id: Optional[pulumi.Input[str]] = None,
                       match_all_labels: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                       region: Optional[pulumi.Input[str]] = None,
                       search: Optional[pulumi.Input[str]] = None,
                       secret_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                       sort: Optional[pulumi.Input[str]] = None,
                       opts: Optional[InvokeOptions] = None) -> Output[GetSmSecretsResult]
    func GetSmSecrets(ctx *Context, args *GetSmSecretsArgs, opts ...InvokeOption) (*GetSmSecretsResult, error)
    func GetSmSecretsOutput(ctx *Context, args *GetSmSecretsOutputArgs, opts ...InvokeOption) GetSmSecretsResultOutput

    > Note: This function is named GetSmSecrets in the Go SDK.

    public static class GetSmSecrets 
    {
        public static Task<GetSmSecretsResult> InvokeAsync(GetSmSecretsArgs args, InvokeOptions? opts = null)
        public static Output<GetSmSecretsResult> Invoke(GetSmSecretsInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetSmSecretsResult> getSmSecrets(GetSmSecretsArgs args, InvokeOptions options)
    public static Output<GetSmSecretsResult> getSmSecrets(GetSmSecretsArgs args, InvokeOptions options)
    
    fn::invoke:
      function: ibm:index/getSmSecrets:getSmSecrets
      arguments:
        # arguments dictionary

    The following arguments are supported:

    InstanceId string
    The GUID of the Secrets Manager instance.
    EndpointType string
    The endpoint type. If not provided the endpoint type is determined by the visibility argument provided in the provider configuration.

    • Constraints: Allowable values are: private, public.
    Groups string
    Filter secrets by groups. You can apply multiple filters by using a comma-separated list of secret group IDs. If you need to filter secrets that are in the default secret group, use the default keyword.
    Id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    MatchAllLabels List<string>
    Filter secrets by a label or a combination of labels (comma-separated list).
    Region string
    The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
    Search string
    Obtain a collection of secrets that contain the specified string in one or more of the fields: id, name, description, labels, secret_type.
    SecretTypes List<string>
    Filter secrets by secret types. You can apply multiple filters by using a comma-separated list of secret types.
    Sort string
    Sort a collection of secrets by the specified field in ascending order. To sort in descending order use the - character.

    • Constraints: Allowable values are: id, created_at, updated_at, expiration_date, secret_type, name.
    InstanceId string
    The GUID of the Secrets Manager instance.
    EndpointType string
    The endpoint type. If not provided the endpoint type is determined by the visibility argument provided in the provider configuration.

    • Constraints: Allowable values are: private, public.
    Groups string
    Filter secrets by groups. You can apply multiple filters by using a comma-separated list of secret group IDs. If you need to filter secrets that are in the default secret group, use the default keyword.
    Id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    MatchAllLabels []string
    Filter secrets by a label or a combination of labels (comma-separated list).
    Region string
    The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
    Search string
    Obtain a collection of secrets that contain the specified string in one or more of the fields: id, name, description, labels, secret_type.
    SecretTypes []string
    Filter secrets by secret types. You can apply multiple filters by using a comma-separated list of secret types.
    Sort string
    Sort a collection of secrets by the specified field in ascending order. To sort in descending order use the - character.

    • Constraints: Allowable values are: id, created_at, updated_at, expiration_date, secret_type, name.
    instanceId String
    The GUID of the Secrets Manager instance.
    endpointType String
    The endpoint type. If not provided the endpoint type is determined by the visibility argument provided in the provider configuration.

    • Constraints: Allowable values are: private, public.
    groups String
    Filter secrets by groups. You can apply multiple filters by using a comma-separated list of secret group IDs. If you need to filter secrets that are in the default secret group, use the default keyword.
    id String
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    matchAllLabels List<String>
    Filter secrets by a label or a combination of labels (comma-separated list).
    region String
    The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
    search String
    Obtain a collection of secrets that contain the specified string in one or more of the fields: id, name, description, labels, secret_type.
    secretTypes List<String>
    Filter secrets by secret types. You can apply multiple filters by using a comma-separated list of secret types.
    sort String
    Sort a collection of secrets by the specified field in ascending order. To sort in descending order use the - character.

    • Constraints: Allowable values are: id, created_at, updated_at, expiration_date, secret_type, name.
    instanceId string
    The GUID of the Secrets Manager instance.
    endpointType string
    The endpoint type. If not provided the endpoint type is determined by the visibility argument provided in the provider configuration.

    • Constraints: Allowable values are: private, public.
    groups string
    Filter secrets by groups. You can apply multiple filters by using a comma-separated list of secret group IDs. If you need to filter secrets that are in the default secret group, use the default keyword.
    id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    matchAllLabels string[]
    Filter secrets by a label or a combination of labels (comma-separated list).
    region string
    The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
    search string
    Obtain a collection of secrets that contain the specified string in one or more of the fields: id, name, description, labels, secret_type.
    secretTypes string[]
    Filter secrets by secret types. You can apply multiple filters by using a comma-separated list of secret types.
    sort string
    Sort a collection of secrets by the specified field in ascending order. To sort in descending order use the - character.

    • Constraints: Allowable values are: id, created_at, updated_at, expiration_date, secret_type, name.
    instance_id str
    The GUID of the Secrets Manager instance.
    endpoint_type str
    The endpoint type. If not provided the endpoint type is determined by the visibility argument provided in the provider configuration.

    • Constraints: Allowable values are: private, public.
    groups str
    Filter secrets by groups. You can apply multiple filters by using a comma-separated list of secret group IDs. If you need to filter secrets that are in the default secret group, use the default keyword.
    id str
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    match_all_labels Sequence[str]
    Filter secrets by a label or a combination of labels (comma-separated list).
    region str
    The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
    search str
    Obtain a collection of secrets that contain the specified string in one or more of the fields: id, name, description, labels, secret_type.
    secret_types Sequence[str]
    Filter secrets by secret types. You can apply multiple filters by using a comma-separated list of secret types.
    sort str
    Sort a collection of secrets by the specified field in ascending order. To sort in descending order use the - character.

    • Constraints: Allowable values are: id, created_at, updated_at, expiration_date, secret_type, name.
    instanceId String
    The GUID of the Secrets Manager instance.
    endpointType String
    The endpoint type. If not provided the endpoint type is determined by the visibility argument provided in the provider configuration.

    • Constraints: Allowable values are: private, public.
    groups String
    Filter secrets by groups. You can apply multiple filters by using a comma-separated list of secret group IDs. If you need to filter secrets that are in the default secret group, use the default keyword.
    id String
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    matchAllLabels List<String>
    Filter secrets by a label or a combination of labels (comma-separated list).
    region String
    The region of the Secrets Manager instance. If not provided defaults to the region defined in the IBM provider configuration.
    search String
    Obtain a collection of secrets that contain the specified string in one or more of the fields: id, name, description, labels, secret_type.
    secretTypes List<String>
    Filter secrets by secret types. You can apply multiple filters by using a comma-separated list of secret types.
    sort String
    Sort a collection of secrets by the specified field in ascending order. To sort in descending order use the - character.

    • Constraints: Allowable values are: id, created_at, updated_at, expiration_date, secret_type, name.

    getSmSecrets Result

    The following output properties are available:

    Id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    InstanceId string
    Region string
    Secrets List<GetSmSecretsSecret>
    (List) A collection of secret metadata. Note that the list of metadata attributes conatains attributes that are common to all types of secrets, as well as attributes that are specific to cetrain secret types. A type specific attribute is included in every secret but the value is empty for secrets of other types. The common attributes are: name, id, description, secret_type, crn, created_by, created_at, updated_at, downloaded, secret_group_id, state, state_description, versions_total.

    • Constraints: The maximum length is 1000 items. The minimum length is 0 items. Nested scheme for secrets:
    TotalCount double
    EndpointType string
    Groups string
    MatchAllLabels List<string>
    Search string
    SecretTypes List<string>
    Sort string
    Id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    InstanceId string
    Region string
    Secrets []GetSmSecretsSecret
    (List) A collection of secret metadata. Note that the list of metadata attributes conatains attributes that are common to all types of secrets, as well as attributes that are specific to cetrain secret types. A type specific attribute is included in every secret but the value is empty for secrets of other types. The common attributes are: name, id, description, secret_type, crn, created_by, created_at, updated_at, downloaded, secret_group_id, state, state_description, versions_total.

    • Constraints: The maximum length is 1000 items. The minimum length is 0 items. Nested scheme for secrets:
    TotalCount float64
    EndpointType string
    Groups string
    MatchAllLabels []string
    Search string
    SecretTypes []string
    Sort string
    id String
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    instanceId String
    region String
    secrets List<GetSmSecretsSecret>
    (List) A collection of secret metadata. Note that the list of metadata attributes conatains attributes that are common to all types of secrets, as well as attributes that are specific to cetrain secret types. A type specific attribute is included in every secret but the value is empty for secrets of other types. The common attributes are: name, id, description, secret_type, crn, created_by, created_at, updated_at, downloaded, secret_group_id, state, state_description, versions_total.

    • Constraints: The maximum length is 1000 items. The minimum length is 0 items. Nested scheme for secrets:
    totalCount Double
    endpointType String
    groups String
    matchAllLabels List<String>
    search String
    secretTypes List<String>
    sort String
    id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    instanceId string
    region string
    secrets GetSmSecretsSecret[]
    (List) A collection of secret metadata. Note that the list of metadata attributes conatains attributes that are common to all types of secrets, as well as attributes that are specific to cetrain secret types. A type specific attribute is included in every secret but the value is empty for secrets of other types. The common attributes are: name, id, description, secret_type, crn, created_by, created_at, updated_at, downloaded, secret_group_id, state, state_description, versions_total.

    • Constraints: The maximum length is 1000 items. The minimum length is 0 items. Nested scheme for secrets:
    totalCount number
    endpointType string
    groups string
    matchAllLabels string[]
    search string
    secretTypes string[]
    sort string
    id str
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    instance_id str
    region str
    secrets Sequence[GetSmSecretsSecret]
    (List) A collection of secret metadata. Note that the list of metadata attributes conatains attributes that are common to all types of secrets, as well as attributes that are specific to cetrain secret types. A type specific attribute is included in every secret but the value is empty for secrets of other types. The common attributes are: name, id, description, secret_type, crn, created_by, created_at, updated_at, downloaded, secret_group_id, state, state_description, versions_total.

    • Constraints: The maximum length is 1000 items. The minimum length is 0 items. Nested scheme for secrets:
    total_count float
    endpoint_type str
    groups str
    match_all_labels Sequence[str]
    search str
    secret_types Sequence[str]
    sort str
    id String
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    instanceId String
    region String
    secrets List<Property Map>
    (List) A collection of secret metadata. Note that the list of metadata attributes conatains attributes that are common to all types of secrets, as well as attributes that are specific to cetrain secret types. A type specific attribute is included in every secret but the value is empty for secrets of other types. The common attributes are: name, id, description, secret_type, crn, created_by, created_at, updated_at, downloaded, secret_group_id, state, state_description, versions_total.

    • Constraints: The maximum length is 1000 items. The minimum length is 0 items. Nested scheme for secrets:
    totalCount Number
    endpointType String
    groups String
    matchAllLabels List<String>
    search String
    secretTypes List<String>
    sort String

    Supporting Types

    GetSmSecretsSecret

    AccessGroups List<string>
    (List) Access Groups that you can use for an iam_credentials secret.Up to 10 Access Groups can be used for each secret.

    • Constraints: The list items must match regular expression /^AccessGroupId-[a-z0-9-]+[a-z0-9]$/. The maximum length is 10 items. The minimum length is 1 item.
    AltNames List<string>
    (List) With the Subject Alternative Name field, you can specify additional host names to be protected by a single SSL certificate.

    • Constraints: The list items must match regular expression /^(.*?)$/. The maximum length is 99 items. The minimum length is 0 items.
    ApiKeyId string
    (String) The ID of the API key that is generated for this secret.
    BundleCerts bool
    (Boolean) Indicates whether the issued certificate is bundled with intermediate certificates.
    Ca string
    (String) The name that is assigned to the certificate authority configuration.
    CertificateAuthority string
    (String) The intermediate certificate authority that signed this certificate.
    CertificateTemplate string
    (String) The name of the certificate template.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:_?-?\\.?[A-Za-z0-9]+)*$/.
    CommonName string
    (String) The Common Name (AKA CN) represents the server name protected by the SSL certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters. The value must match regular expression /^(\\*\\.)?(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9])\\.?$/.
    CreatedAt string
    (String) The date when a resource was created. The date format follows RFC 3339.
    CreatedBy string
    (String) The unique identifier that is associated with the entity that created the secret.

    • Constraints: The maximum length is 128 characters. The minimum length is 4 characters.
    Crn string
    (String) The CRN role identifier for creating a service-id.
    CustomMetadata Dictionary<string, string>
    (Map) The secret metadata that a user can customize.
    Description string
    (String) The IAM API key description for the generated service credentials.
    Dns string
    (String) The name that is assigned to the DNS provider configuration.
    Downloaded bool
    (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
    ExpirationDate string
    (String) The date a secret is expired. The date format follows RFC 3339.
    Id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    IntermediateIncluded bool
    (Boolean) Indicates whether the certificate was imported with an associated intermediate certificate.
    IssuanceInfos List<GetSmSecretsSecretIssuanceInfo>
    (List) Issuance information that is associated with your certificate. Nested scheme for issuance_info:
    Issuer string
    (String) The distinguished name that identifies the entity that signed and issued the certificate.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    KeyAlgorithm string
    (String) The identifier for the cryptographic algorithm used to generate the public key that is associated with the certificate.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    Labels List<string>
    (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.

    • Constraints: The list items must match regular expression /(.*?)/. The maximum length is 30 items. The minimum length is 0 items.
    LocksTotal double
    (Integer) The number of locks of the secret.

    • Constraints: The maximum value is 1000. The minimum value is 0.
    Name string
    (String) The resource key name of the generated service credentials.
    NextRotationDate string
    (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
    PrivateKeyIncluded bool
    (Boolean) Indicates whether the certificate was imported with an associated private key.
    ReuseApiKey bool
    RevocationTimeRfc3339 string
    (String) The date and time that the certificate was revoked. The date format follows RFC 3339.
    RevocationTimeSeconds double
    (Integer) The timestamp of the certificate revocation.
    Rotations List<GetSmSecretsSecretRotation>
    (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
    SecretGroupId string
    (String) A UUID identifier, or default secret group.

    • Constraints: The maximum length is 36 characters. The minimum length is 7 characters. The value must match regular expression /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/.
    SecretType string
    (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.

    • Constraints: Allowable values are: arbitrary, imported_cert, public_cert, iam_credentials, kv, username_password, private_cert.
    SerialNumber string
    (String) The unique serial number that was assigned to a certificate by the issuing certificate authority.

    • Constraints: The maximum length is 64 characters. The minimum length is 2 characters. The value must match regular expression /[^a-fA-F0-9]/.
    ServiceId string
    (String) The service ID under which the API key (see the api_key field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include the access_groups parameter.

    • Constraints: The maximum length is 50 characters. The minimum length is 40 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/.
    ServiceIdIsStatic bool
    (Boolean) Indicates whether an iam_credentials secret was created with a static service ID.If it is set to true, the service ID for the secret was provided by the user at secret creation. If it is set to false, the service ID was generated by Secrets Manager.
    SigningAlgorithm string
    (String) The identifier for the cryptographic algorithm that was used by the issuing certificate authority to sign a certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters.
    SourceServices List<GetSmSecretsSecretSourceService>
    (List) The properties required for creating the service credentials for the specified source service instance. Nested scheme for source_service:
    State double
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    StateDescription string
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    Ttl string
    (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For iam_credentials secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as 120m or 24h.Minimum duration is 1 minute. Maximum is 90 days.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /^[0-9]+[s,m,h,d]{0,1}$/.
    UpdatedAt string
    (String) The date when a resource was recently modified. The date format follows RFC 3339.
    Validities List<GetSmSecretsSecretValidity>
    (List) The date and time that the certificate validity period begins and ends. Nested scheme for validity:
    VersionsTotal double
    (Integer) The number of versions of the secret.

    • Constraints: The maximum value is 50. The minimum value is 0.
    AccessGroups []string
    (List) Access Groups that you can use for an iam_credentials secret.Up to 10 Access Groups can be used for each secret.

    • Constraints: The list items must match regular expression /^AccessGroupId-[a-z0-9-]+[a-z0-9]$/. The maximum length is 10 items. The minimum length is 1 item.
    AltNames []string
    (List) With the Subject Alternative Name field, you can specify additional host names to be protected by a single SSL certificate.

    • Constraints: The list items must match regular expression /^(.*?)$/. The maximum length is 99 items. The minimum length is 0 items.
    ApiKeyId string
    (String) The ID of the API key that is generated for this secret.
    BundleCerts bool
    (Boolean) Indicates whether the issued certificate is bundled with intermediate certificates.
    Ca string
    (String) The name that is assigned to the certificate authority configuration.
    CertificateAuthority string
    (String) The intermediate certificate authority that signed this certificate.
    CertificateTemplate string
    (String) The name of the certificate template.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:_?-?\\.?[A-Za-z0-9]+)*$/.
    CommonName string
    (String) The Common Name (AKA CN) represents the server name protected by the SSL certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters. The value must match regular expression /^(\\*\\.)?(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9])\\.?$/.
    CreatedAt string
    (String) The date when a resource was created. The date format follows RFC 3339.
    CreatedBy string
    (String) The unique identifier that is associated with the entity that created the secret.

    • Constraints: The maximum length is 128 characters. The minimum length is 4 characters.
    Crn string
    (String) The CRN role identifier for creating a service-id.
    CustomMetadata map[string]string
    (Map) The secret metadata that a user can customize.
    Description string
    (String) The IAM API key description for the generated service credentials.
    Dns string
    (String) The name that is assigned to the DNS provider configuration.
    Downloaded bool
    (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
    ExpirationDate string
    (String) The date a secret is expired. The date format follows RFC 3339.
    Id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    IntermediateIncluded bool
    (Boolean) Indicates whether the certificate was imported with an associated intermediate certificate.
    IssuanceInfos []GetSmSecretsSecretIssuanceInfo
    (List) Issuance information that is associated with your certificate. Nested scheme for issuance_info:
    Issuer string
    (String) The distinguished name that identifies the entity that signed and issued the certificate.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    KeyAlgorithm string
    (String) The identifier for the cryptographic algorithm used to generate the public key that is associated with the certificate.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    Labels []string
    (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.

    • Constraints: The list items must match regular expression /(.*?)/. The maximum length is 30 items. The minimum length is 0 items.
    LocksTotal float64
    (Integer) The number of locks of the secret.

    • Constraints: The maximum value is 1000. The minimum value is 0.
    Name string
    (String) The resource key name of the generated service credentials.
    NextRotationDate string
    (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
    PrivateKeyIncluded bool
    (Boolean) Indicates whether the certificate was imported with an associated private key.
    ReuseApiKey bool
    RevocationTimeRfc3339 string
    (String) The date and time that the certificate was revoked. The date format follows RFC 3339.
    RevocationTimeSeconds float64
    (Integer) The timestamp of the certificate revocation.
    Rotations []GetSmSecretsSecretRotation
    (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
    SecretGroupId string
    (String) A UUID identifier, or default secret group.

    • Constraints: The maximum length is 36 characters. The minimum length is 7 characters. The value must match regular expression /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/.
    SecretType string
    (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.

    • Constraints: Allowable values are: arbitrary, imported_cert, public_cert, iam_credentials, kv, username_password, private_cert.
    SerialNumber string
    (String) The unique serial number that was assigned to a certificate by the issuing certificate authority.

    • Constraints: The maximum length is 64 characters. The minimum length is 2 characters. The value must match regular expression /[^a-fA-F0-9]/.
    ServiceId string
    (String) The service ID under which the API key (see the api_key field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include the access_groups parameter.

    • Constraints: The maximum length is 50 characters. The minimum length is 40 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/.
    ServiceIdIsStatic bool
    (Boolean) Indicates whether an iam_credentials secret was created with a static service ID.If it is set to true, the service ID for the secret was provided by the user at secret creation. If it is set to false, the service ID was generated by Secrets Manager.
    SigningAlgorithm string
    (String) The identifier for the cryptographic algorithm that was used by the issuing certificate authority to sign a certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters.
    SourceServices []GetSmSecretsSecretSourceService
    (List) The properties required for creating the service credentials for the specified source service instance. Nested scheme for source_service:
    State float64
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    StateDescription string
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    Ttl string
    (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For iam_credentials secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as 120m or 24h.Minimum duration is 1 minute. Maximum is 90 days.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /^[0-9]+[s,m,h,d]{0,1}$/.
    UpdatedAt string
    (String) The date when a resource was recently modified. The date format follows RFC 3339.
    Validities []GetSmSecretsSecretValidity
    (List) The date and time that the certificate validity period begins and ends. Nested scheme for validity:
    VersionsTotal float64
    (Integer) The number of versions of the secret.

    • Constraints: The maximum value is 50. The minimum value is 0.
    accessGroups List<String>
    (List) Access Groups that you can use for an iam_credentials secret.Up to 10 Access Groups can be used for each secret.

    • Constraints: The list items must match regular expression /^AccessGroupId-[a-z0-9-]+[a-z0-9]$/. The maximum length is 10 items. The minimum length is 1 item.
    altNames List<String>
    (List) With the Subject Alternative Name field, you can specify additional host names to be protected by a single SSL certificate.

    • Constraints: The list items must match regular expression /^(.*?)$/. The maximum length is 99 items. The minimum length is 0 items.
    apiKeyId String
    (String) The ID of the API key that is generated for this secret.
    bundleCerts Boolean
    (Boolean) Indicates whether the issued certificate is bundled with intermediate certificates.
    ca String
    (String) The name that is assigned to the certificate authority configuration.
    certificateAuthority String
    (String) The intermediate certificate authority that signed this certificate.
    certificateTemplate String
    (String) The name of the certificate template.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:_?-?\\.?[A-Za-z0-9]+)*$/.
    commonName String
    (String) The Common Name (AKA CN) represents the server name protected by the SSL certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters. The value must match regular expression /^(\\*\\.)?(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9])\\.?$/.
    createdAt String
    (String) The date when a resource was created. The date format follows RFC 3339.
    createdBy String
    (String) The unique identifier that is associated with the entity that created the secret.

    • Constraints: The maximum length is 128 characters. The minimum length is 4 characters.
    crn String
    (String) The CRN role identifier for creating a service-id.
    customMetadata Map<String,String>
    (Map) The secret metadata that a user can customize.
    description String
    (String) The IAM API key description for the generated service credentials.
    dns String
    (String) The name that is assigned to the DNS provider configuration.
    downloaded Boolean
    (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
    expirationDate String
    (String) The date a secret is expired. The date format follows RFC 3339.
    id String
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    intermediateIncluded Boolean
    (Boolean) Indicates whether the certificate was imported with an associated intermediate certificate.
    issuanceInfos List<GetSmSecretsSecretIssuanceInfo>
    (List) Issuance information that is associated with your certificate. Nested scheme for issuance_info:
    issuer String
    (String) The distinguished name that identifies the entity that signed and issued the certificate.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    keyAlgorithm String
    (String) The identifier for the cryptographic algorithm used to generate the public key that is associated with the certificate.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    labels List<String>
    (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.

    • Constraints: The list items must match regular expression /(.*?)/. The maximum length is 30 items. The minimum length is 0 items.
    locksTotal Double
    (Integer) The number of locks of the secret.

    • Constraints: The maximum value is 1000. The minimum value is 0.
    name String
    (String) The resource key name of the generated service credentials.
    nextRotationDate String
    (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
    privateKeyIncluded Boolean
    (Boolean) Indicates whether the certificate was imported with an associated private key.
    reuseApiKey Boolean
    revocationTimeRfc3339 String
    (String) The date and time that the certificate was revoked. The date format follows RFC 3339.
    revocationTimeSeconds Double
    (Integer) The timestamp of the certificate revocation.
    rotations List<GetSmSecretsSecretRotation>
    (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
    secretGroupId String
    (String) A UUID identifier, or default secret group.

    • Constraints: The maximum length is 36 characters. The minimum length is 7 characters. The value must match regular expression /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/.
    secretType String
    (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.

    • Constraints: Allowable values are: arbitrary, imported_cert, public_cert, iam_credentials, kv, username_password, private_cert.
    serialNumber String
    (String) The unique serial number that was assigned to a certificate by the issuing certificate authority.

    • Constraints: The maximum length is 64 characters. The minimum length is 2 characters. The value must match regular expression /[^a-fA-F0-9]/.
    serviceId String
    (String) The service ID under which the API key (see the api_key field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include the access_groups parameter.

    • Constraints: The maximum length is 50 characters. The minimum length is 40 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/.
    serviceIdIsStatic Boolean
    (Boolean) Indicates whether an iam_credentials secret was created with a static service ID.If it is set to true, the service ID for the secret was provided by the user at secret creation. If it is set to false, the service ID was generated by Secrets Manager.
    signingAlgorithm String
    (String) The identifier for the cryptographic algorithm that was used by the issuing certificate authority to sign a certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters.
    sourceServices List<GetSmSecretsSecretSourceService>
    (List) The properties required for creating the service credentials for the specified source service instance. Nested scheme for source_service:
    state Double
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    stateDescription String
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    ttl String
    (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For iam_credentials secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as 120m or 24h.Minimum duration is 1 minute. Maximum is 90 days.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /^[0-9]+[s,m,h,d]{0,1}$/.
    updatedAt String
    (String) The date when a resource was recently modified. The date format follows RFC 3339.
    validities List<GetSmSecretsSecretValidity>
    (List) The date and time that the certificate validity period begins and ends. Nested scheme for validity:
    versionsTotal Double
    (Integer) The number of versions of the secret.

    • Constraints: The maximum value is 50. The minimum value is 0.
    accessGroups string[]
    (List) Access Groups that you can use for an iam_credentials secret.Up to 10 Access Groups can be used for each secret.

    • Constraints: The list items must match regular expression /^AccessGroupId-[a-z0-9-]+[a-z0-9]$/. The maximum length is 10 items. The minimum length is 1 item.
    altNames string[]
    (List) With the Subject Alternative Name field, you can specify additional host names to be protected by a single SSL certificate.

    • Constraints: The list items must match regular expression /^(.*?)$/. The maximum length is 99 items. The minimum length is 0 items.
    apiKeyId string
    (String) The ID of the API key that is generated for this secret.
    bundleCerts boolean
    (Boolean) Indicates whether the issued certificate is bundled with intermediate certificates.
    ca string
    (String) The name that is assigned to the certificate authority configuration.
    certificateAuthority string
    (String) The intermediate certificate authority that signed this certificate.
    certificateTemplate string
    (String) The name of the certificate template.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:_?-?\\.?[A-Za-z0-9]+)*$/.
    commonName string
    (String) The Common Name (AKA CN) represents the server name protected by the SSL certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters. The value must match regular expression /^(\\*\\.)?(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9])\\.?$/.
    createdAt string
    (String) The date when a resource was created. The date format follows RFC 3339.
    createdBy string
    (String) The unique identifier that is associated with the entity that created the secret.

    • Constraints: The maximum length is 128 characters. The minimum length is 4 characters.
    crn string
    (String) The CRN role identifier for creating a service-id.
    customMetadata {[key: string]: string}
    (Map) The secret metadata that a user can customize.
    description string
    (String) The IAM API key description for the generated service credentials.
    dns string
    (String) The name that is assigned to the DNS provider configuration.
    downloaded boolean
    (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
    expirationDate string
    (String) The date a secret is expired. The date format follows RFC 3339.
    id string
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    intermediateIncluded boolean
    (Boolean) Indicates whether the certificate was imported with an associated intermediate certificate.
    issuanceInfos GetSmSecretsSecretIssuanceInfo[]
    (List) Issuance information that is associated with your certificate. Nested scheme for issuance_info:
    issuer string
    (String) The distinguished name that identifies the entity that signed and issued the certificate.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    keyAlgorithm string
    (String) The identifier for the cryptographic algorithm used to generate the public key that is associated with the certificate.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    labels string[]
    (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.

    • Constraints: The list items must match regular expression /(.*?)/. The maximum length is 30 items. The minimum length is 0 items.
    locksTotal number
    (Integer) The number of locks of the secret.

    • Constraints: The maximum value is 1000. The minimum value is 0.
    name string
    (String) The resource key name of the generated service credentials.
    nextRotationDate string
    (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
    privateKeyIncluded boolean
    (Boolean) Indicates whether the certificate was imported with an associated private key.
    reuseApiKey boolean
    revocationTimeRfc3339 string
    (String) The date and time that the certificate was revoked. The date format follows RFC 3339.
    revocationTimeSeconds number
    (Integer) The timestamp of the certificate revocation.
    rotations GetSmSecretsSecretRotation[]
    (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
    secretGroupId string
    (String) A UUID identifier, or default secret group.

    • Constraints: The maximum length is 36 characters. The minimum length is 7 characters. The value must match regular expression /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/.
    secretType string
    (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.

    • Constraints: Allowable values are: arbitrary, imported_cert, public_cert, iam_credentials, kv, username_password, private_cert.
    serialNumber string
    (String) The unique serial number that was assigned to a certificate by the issuing certificate authority.

    • Constraints: The maximum length is 64 characters. The minimum length is 2 characters. The value must match regular expression /[^a-fA-F0-9]/.
    serviceId string
    (String) The service ID under which the API key (see the api_key field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include the access_groups parameter.

    • Constraints: The maximum length is 50 characters. The minimum length is 40 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/.
    serviceIdIsStatic boolean
    (Boolean) Indicates whether an iam_credentials secret was created with a static service ID.If it is set to true, the service ID for the secret was provided by the user at secret creation. If it is set to false, the service ID was generated by Secrets Manager.
    signingAlgorithm string
    (String) The identifier for the cryptographic algorithm that was used by the issuing certificate authority to sign a certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters.
    sourceServices GetSmSecretsSecretSourceService[]
    (List) The properties required for creating the service credentials for the specified source service instance. Nested scheme for source_service:
    state number
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    stateDescription string
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    ttl string
    (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For iam_credentials secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as 120m or 24h.Minimum duration is 1 minute. Maximum is 90 days.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /^[0-9]+[s,m,h,d]{0,1}$/.
    updatedAt string
    (String) The date when a resource was recently modified. The date format follows RFC 3339.
    validities GetSmSecretsSecretValidity[]
    (List) The date and time that the certificate validity period begins and ends. Nested scheme for validity:
    versionsTotal number
    (Integer) The number of versions of the secret.

    • Constraints: The maximum value is 50. The minimum value is 0.
    access_groups Sequence[str]
    (List) Access Groups that you can use for an iam_credentials secret.Up to 10 Access Groups can be used for each secret.

    • Constraints: The list items must match regular expression /^AccessGroupId-[a-z0-9-]+[a-z0-9]$/. The maximum length is 10 items. The minimum length is 1 item.
    alt_names Sequence[str]
    (List) With the Subject Alternative Name field, you can specify additional host names to be protected by a single SSL certificate.

    • Constraints: The list items must match regular expression /^(.*?)$/. The maximum length is 99 items. The minimum length is 0 items.
    api_key_id str
    (String) The ID of the API key that is generated for this secret.
    bundle_certs bool
    (Boolean) Indicates whether the issued certificate is bundled with intermediate certificates.
    ca str
    (String) The name that is assigned to the certificate authority configuration.
    certificate_authority str
    (String) The intermediate certificate authority that signed this certificate.
    certificate_template str
    (String) The name of the certificate template.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:_?-?\\.?[A-Za-z0-9]+)*$/.
    common_name str
    (String) The Common Name (AKA CN) represents the server name protected by the SSL certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters. The value must match regular expression /^(\\*\\.)?(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9])\\.?$/.
    created_at str
    (String) The date when a resource was created. The date format follows RFC 3339.
    created_by str
    (String) The unique identifier that is associated with the entity that created the secret.

    • Constraints: The maximum length is 128 characters. The minimum length is 4 characters.
    crn str
    (String) The CRN role identifier for creating a service-id.
    custom_metadata Mapping[str, str]
    (Map) The secret metadata that a user can customize.
    description str
    (String) The IAM API key description for the generated service credentials.
    dns str
    (String) The name that is assigned to the DNS provider configuration.
    downloaded bool
    (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
    expiration_date str
    (String) The date a secret is expired. The date format follows RFC 3339.
    id str
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    intermediate_included bool
    (Boolean) Indicates whether the certificate was imported with an associated intermediate certificate.
    issuance_infos Sequence[GetSmSecretsSecretIssuanceInfo]
    (List) Issuance information that is associated with your certificate. Nested scheme for issuance_info:
    issuer str
    (String) The distinguished name that identifies the entity that signed and issued the certificate.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    key_algorithm str
    (String) The identifier for the cryptographic algorithm used to generate the public key that is associated with the certificate.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    labels Sequence[str]
    (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.

    • Constraints: The list items must match regular expression /(.*?)/. The maximum length is 30 items. The minimum length is 0 items.
    locks_total float
    (Integer) The number of locks of the secret.

    • Constraints: The maximum value is 1000. The minimum value is 0.
    name str
    (String) The resource key name of the generated service credentials.
    next_rotation_date str
    (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
    private_key_included bool
    (Boolean) Indicates whether the certificate was imported with an associated private key.
    reuse_api_key bool
    revocation_time_rfc3339 str
    (String) The date and time that the certificate was revoked. The date format follows RFC 3339.
    revocation_time_seconds float
    (Integer) The timestamp of the certificate revocation.
    rotations Sequence[GetSmSecretsSecretRotation]
    (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
    secret_group_id str
    (String) A UUID identifier, or default secret group.

    • Constraints: The maximum length is 36 characters. The minimum length is 7 characters. The value must match regular expression /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/.
    secret_type str
    (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.

    • Constraints: Allowable values are: arbitrary, imported_cert, public_cert, iam_credentials, kv, username_password, private_cert.
    serial_number str
    (String) The unique serial number that was assigned to a certificate by the issuing certificate authority.

    • Constraints: The maximum length is 64 characters. The minimum length is 2 characters. The value must match regular expression /[^a-fA-F0-9]/.
    service_id str
    (String) The service ID under which the API key (see the api_key field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include the access_groups parameter.

    • Constraints: The maximum length is 50 characters. The minimum length is 40 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/.
    service_id_is_static bool
    (Boolean) Indicates whether an iam_credentials secret was created with a static service ID.If it is set to true, the service ID for the secret was provided by the user at secret creation. If it is set to false, the service ID was generated by Secrets Manager.
    signing_algorithm str
    (String) The identifier for the cryptographic algorithm that was used by the issuing certificate authority to sign a certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters.
    source_services Sequence[GetSmSecretsSecretSourceService]
    (List) The properties required for creating the service credentials for the specified source service instance. Nested scheme for source_service:
    state float
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    state_description str
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    ttl str
    (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For iam_credentials secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as 120m or 24h.Minimum duration is 1 minute. Maximum is 90 days.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /^[0-9]+[s,m,h,d]{0,1}$/.
    updated_at str
    (String) The date when a resource was recently modified. The date format follows RFC 3339.
    validities Sequence[GetSmSecretsSecretValidity]
    (List) The date and time that the certificate validity period begins and ends. Nested scheme for validity:
    versions_total float
    (Integer) The number of versions of the secret.

    • Constraints: The maximum value is 50. The minimum value is 0.
    accessGroups List<String>
    (List) Access Groups that you can use for an iam_credentials secret.Up to 10 Access Groups can be used for each secret.

    • Constraints: The list items must match regular expression /^AccessGroupId-[a-z0-9-]+[a-z0-9]$/. The maximum length is 10 items. The minimum length is 1 item.
    altNames List<String>
    (List) With the Subject Alternative Name field, you can specify additional host names to be protected by a single SSL certificate.

    • Constraints: The list items must match regular expression /^(.*?)$/. The maximum length is 99 items. The minimum length is 0 items.
    apiKeyId String
    (String) The ID of the API key that is generated for this secret.
    bundleCerts Boolean
    (Boolean) Indicates whether the issued certificate is bundled with intermediate certificates.
    ca String
    (String) The name that is assigned to the certificate authority configuration.
    certificateAuthority String
    (String) The intermediate certificate authority that signed this certificate.
    certificateTemplate String
    (String) The name of the certificate template.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:_?-?\\.?[A-Za-z0-9]+)*$/.
    commonName String
    (String) The Common Name (AKA CN) represents the server name protected by the SSL certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters. The value must match regular expression /^(\\*\\.)?(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\\-]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\\-]*[A-Za-z0-9])\\.?$/.
    createdAt String
    (String) The date when a resource was created. The date format follows RFC 3339.
    createdBy String
    (String) The unique identifier that is associated with the entity that created the secret.

    • Constraints: The maximum length is 128 characters. The minimum length is 4 characters.
    crn String
    (String) The CRN role identifier for creating a service-id.
    customMetadata Map<String>
    (Map) The secret metadata that a user can customize.
    description String
    (String) The IAM API key description for the generated service credentials.
    dns String
    (String) The name that is assigned to the DNS provider configuration.
    downloaded Boolean
    (Boolean) Indicates whether the secret data that is associated with a secret version was retrieved in a call to the service API.
    expirationDate String
    (String) The date a secret is expired. The date format follows RFC 3339.
    id String
    (String) A UUID identifier.

    • Constraints: The maximum length is 36 characters. The minimum length is 36 characters. The value must match regular expression /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/.
    intermediateIncluded Boolean
    (Boolean) Indicates whether the certificate was imported with an associated intermediate certificate.
    issuanceInfos List<Property Map>
    (List) Issuance information that is associated with your certificate. Nested scheme for issuance_info:
    issuer String
    (String) The distinguished name that identifies the entity that signed and issued the certificate.

    • Constraints: The maximum length is 128 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    keyAlgorithm String
    (String) The identifier for the cryptographic algorithm used to generate the public key that is associated with the certificate.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /(.*?)/.
    labels List<String>
    (List) Labels that you can use to search for secrets in your instance.Up to 30 labels can be created.

    • Constraints: The list items must match regular expression /(.*?)/. The maximum length is 30 items. The minimum length is 0 items.
    locksTotal Number
    (Integer) The number of locks of the secret.

    • Constraints: The maximum value is 1000. The minimum value is 0.
    name String
    (String) The resource key name of the generated service credentials.
    nextRotationDate String
    (String) The date that the secret is scheduled for automatic rotation.The service automatically creates a new version of the secret on its next rotation date. This field exists only for secrets that have an existing rotation policy.
    privateKeyIncluded Boolean
    (Boolean) Indicates whether the certificate was imported with an associated private key.
    reuseApiKey Boolean
    revocationTimeRfc3339 String
    (String) The date and time that the certificate was revoked. The date format follows RFC 3339.
    revocationTimeSeconds Number
    (Integer) The timestamp of the certificate revocation.
    rotations List<Property Map>
    (List) Determines whether Secrets Manager rotates your secrets automatically. Nested scheme for rotation:
    secretGroupId String
    (String) A UUID identifier, or default secret group.

    • Constraints: The maximum length is 36 characters. The minimum length is 7 characters. The value must match regular expression /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|default)$/.
    secretType String
    (String) The secret type. Supported types are arbitrary, certificates (imported, public, and private), IAM credentials, key-value, and user credentials.

    • Constraints: Allowable values are: arbitrary, imported_cert, public_cert, iam_credentials, kv, username_password, private_cert.
    serialNumber String
    (String) The unique serial number that was assigned to a certificate by the issuing certificate authority.

    • Constraints: The maximum length is 64 characters. The minimum length is 2 characters. The value must match regular expression /[^a-fA-F0-9]/.
    serviceId String
    (String) The service ID under which the API key (see the api_key field) is created.If you omit this parameter, Secrets Manager generates a new service ID for your secret at its creation and adds it to the access groups that you assign.Optionally, you can use this field to provide your own service ID if you prefer to manage its access directly or retain the service ID after your secret expires, is rotated, or deleted. If you provide a service ID, do not include the access_groups parameter.

    • Constraints: The maximum length is 50 characters. The minimum length is 40 characters. The value must match regular expression /^[A-Za-z0-9][A-Za-z0-9]*(?:-?[A-Za-z0-9]+)*$/.
    serviceIdIsStatic Boolean
    (Boolean) Indicates whether an iam_credentials secret was created with a static service ID.If it is set to true, the service ID for the secret was provided by the user at secret creation. If it is set to false, the service ID was generated by Secrets Manager.
    signingAlgorithm String
    (String) The identifier for the cryptographic algorithm that was used by the issuing certificate authority to sign a certificate.

    • Constraints: The maximum length is 64 characters. The minimum length is 4 characters.
    sourceServices List<Property Map>
    (List) The properties required for creating the service credentials for the specified source service instance. Nested scheme for source_service:
    state Number
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    stateDescription String
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    ttl String
    (String) The time-to-live (TTL) or lease duration to assign to generated credentials.For iam_credentials secrets, the TTL defines for how long each generated API key remains valid. The value can be either an integer that specifies the number of seconds, or the string representation of a duration, such as 120m or 24h.Minimum duration is 1 minute. Maximum is 90 days.

    • Constraints: The maximum length is 10 characters. The minimum length is 2 characters. The value must match regular expression /^[0-9]+[s,m,h,d]{0,1}$/.
    updatedAt String
    (String) The date when a resource was recently modified. The date format follows RFC 3339.
    validities List<Property Map>
    (List) The date and time that the certificate validity period begins and ends. Nested scheme for validity:
    versionsTotal Number
    (Integer) The number of versions of the secret.

    • Constraints: The maximum value is 50. The minimum value is 0.

    GetSmSecretsSecretIssuanceInfo

    AutoRotated bool
    (Boolean) Indicates whether the issued certificate is configured with an automatic rotation policy.
    Challenges List<GetSmSecretsSecretIssuanceInfoChallenge>
    (List) The set of challenges. It is returned only when ordering public certificates by using manual DNS configuration.

    • Constraints: The maximum length is 100 items. The minimum length is 1 item. Nested scheme for challenges:
    DnsChallengeValidationTime string
    (String) The date that a user requests to validate DNS challenges for certificates that are ordered with a manual DNS provider. The date format follows RFC 3339.
    ErrorCode string
    (String) A code that identifies an issuance error.This field, along with error_message, is returned when Secrets Manager successfully processes your request, but the certificate authority is unable to issue a certificate.
    ErrorMessage string
    (String) A human-readable message that provides details about the issuance error.
    OrderedOn string
    (String) The date when the certificate is ordered. The date format follows RFC 3339.
    State double
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    StateDescription string
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    AutoRotated bool
    (Boolean) Indicates whether the issued certificate is configured with an automatic rotation policy.
    Challenges []GetSmSecretsSecretIssuanceInfoChallenge
    (List) The set of challenges. It is returned only when ordering public certificates by using manual DNS configuration.

    • Constraints: The maximum length is 100 items. The minimum length is 1 item. Nested scheme for challenges:
    DnsChallengeValidationTime string
    (String) The date that a user requests to validate DNS challenges for certificates that are ordered with a manual DNS provider. The date format follows RFC 3339.
    ErrorCode string
    (String) A code that identifies an issuance error.This field, along with error_message, is returned when Secrets Manager successfully processes your request, but the certificate authority is unable to issue a certificate.
    ErrorMessage string
    (String) A human-readable message that provides details about the issuance error.
    OrderedOn string
    (String) The date when the certificate is ordered. The date format follows RFC 3339.
    State float64
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    StateDescription string
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    autoRotated Boolean
    (Boolean) Indicates whether the issued certificate is configured with an automatic rotation policy.
    challenges List<GetSmSecretsSecretIssuanceInfoChallenge>
    (List) The set of challenges. It is returned only when ordering public certificates by using manual DNS configuration.

    • Constraints: The maximum length is 100 items. The minimum length is 1 item. Nested scheme for challenges:
    dnsChallengeValidationTime String
    (String) The date that a user requests to validate DNS challenges for certificates that are ordered with a manual DNS provider. The date format follows RFC 3339.
    errorCode String
    (String) A code that identifies an issuance error.This field, along with error_message, is returned when Secrets Manager successfully processes your request, but the certificate authority is unable to issue a certificate.
    errorMessage String
    (String) A human-readable message that provides details about the issuance error.
    orderedOn String
    (String) The date when the certificate is ordered. The date format follows RFC 3339.
    state Double
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    stateDescription String
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    autoRotated boolean
    (Boolean) Indicates whether the issued certificate is configured with an automatic rotation policy.
    challenges GetSmSecretsSecretIssuanceInfoChallenge[]
    (List) The set of challenges. It is returned only when ordering public certificates by using manual DNS configuration.

    • Constraints: The maximum length is 100 items. The minimum length is 1 item. Nested scheme for challenges:
    dnsChallengeValidationTime string
    (String) The date that a user requests to validate DNS challenges for certificates that are ordered with a manual DNS provider. The date format follows RFC 3339.
    errorCode string
    (String) A code that identifies an issuance error.This field, along with error_message, is returned when Secrets Manager successfully processes your request, but the certificate authority is unable to issue a certificate.
    errorMessage string
    (String) A human-readable message that provides details about the issuance error.
    orderedOn string
    (String) The date when the certificate is ordered. The date format follows RFC 3339.
    state number
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    stateDescription string
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    auto_rotated bool
    (Boolean) Indicates whether the issued certificate is configured with an automatic rotation policy.
    challenges Sequence[GetSmSecretsSecretIssuanceInfoChallenge]
    (List) The set of challenges. It is returned only when ordering public certificates by using manual DNS configuration.

    • Constraints: The maximum length is 100 items. The minimum length is 1 item. Nested scheme for challenges:
    dns_challenge_validation_time str
    (String) The date that a user requests to validate DNS challenges for certificates that are ordered with a manual DNS provider. The date format follows RFC 3339.
    error_code str
    (String) A code that identifies an issuance error.This field, along with error_message, is returned when Secrets Manager successfully processes your request, but the certificate authority is unable to issue a certificate.
    error_message str
    (String) A human-readable message that provides details about the issuance error.
    ordered_on str
    (String) The date when the certificate is ordered. The date format follows RFC 3339.
    state float
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    state_description str
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.
    autoRotated Boolean
    (Boolean) Indicates whether the issued certificate is configured with an automatic rotation policy.
    challenges List<Property Map>
    (List) The set of challenges. It is returned only when ordering public certificates by using manual DNS configuration.

    • Constraints: The maximum length is 100 items. The minimum length is 1 item. Nested scheme for challenges:
    dnsChallengeValidationTime String
    (String) The date that a user requests to validate DNS challenges for certificates that are ordered with a manual DNS provider. The date format follows RFC 3339.
    errorCode String
    (String) A code that identifies an issuance error.This field, along with error_message, is returned when Secrets Manager successfully processes your request, but the certificate authority is unable to issue a certificate.
    errorMessage String
    (String) A human-readable message that provides details about the issuance error.
    orderedOn String
    (String) The date when the certificate is ordered. The date format follows RFC 3339.
    state Number
    (Integer) The secret state that is based on NIST SP 800-57. States are integers and correspond to the Pre-activation = 0, Active = 1, Suspended = 2, Deactivated = 3, and Destroyed = 5 values.

    • Constraints: Allowable values are: 0, 1, 2, 3, 5.
    stateDescription String
    (String) A text representation of the secret state.

    • Constraints: Allowable values are: pre_activation, active, suspended, deactivated, destroyed.

    GetSmSecretsSecretIssuanceInfoChallenge

    Domain string
    (String) The challenge domain.
    Expiration string
    (String) The challenge expiration date. The date format follows RFC 3339.
    Status string
    (String) The challenge status.
    TxtRecordName string
    (String) The TXT record name.
    TxtRecordValue string
    (String) The TXT record value.
    Domain string
    (String) The challenge domain.
    Expiration string
    (String) The challenge expiration date. The date format follows RFC 3339.
    Status string
    (String) The challenge status.
    TxtRecordName string
    (String) The TXT record name.
    TxtRecordValue string
    (String) The TXT record value.
    domain String
    (String) The challenge domain.
    expiration String
    (String) The challenge expiration date. The date format follows RFC 3339.
    status String
    (String) The challenge status.
    txtRecordName String
    (String) The TXT record name.
    txtRecordValue String
    (String) The TXT record value.
    domain string
    (String) The challenge domain.
    expiration string
    (String) The challenge expiration date. The date format follows RFC 3339.
    status string
    (String) The challenge status.
    txtRecordName string
    (String) The TXT record name.
    txtRecordValue string
    (String) The TXT record value.
    domain str
    (String) The challenge domain.
    expiration str
    (String) The challenge expiration date. The date format follows RFC 3339.
    status str
    (String) The challenge status.
    txt_record_name str
    (String) The TXT record name.
    txt_record_value str
    (String) The TXT record value.
    domain String
    (String) The challenge domain.
    expiration String
    (String) The challenge expiration date. The date format follows RFC 3339.
    status String
    (String) The challenge status.
    txtRecordName String
    (String) The TXT record name.
    txtRecordValue String
    (String) The TXT record value.

    GetSmSecretsSecretRotation

    AutoRotate bool
    (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is false. If auto_rotate is set to true the service rotates your secret based on the defined interval.
    Interval double
    (Integer) The length of the secret rotation time interval.

    • Constraints: The minimum value is 1.
    RotateKeys bool
    (Boolean) Determines whether Secrets Manager rotates the private key for your public certificate automatically.Default is false. If it is set to true, the service generates and stores a new private key for your rotated certificate.
    Unit string
    (String) The units for the secret rotation time interval.

    • Constraints: Allowable values are: day, month.
    AutoRotate bool
    (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is false. If auto_rotate is set to true the service rotates your secret based on the defined interval.
    Interval float64
    (Integer) The length of the secret rotation time interval.

    • Constraints: The minimum value is 1.
    RotateKeys bool
    (Boolean) Determines whether Secrets Manager rotates the private key for your public certificate automatically.Default is false. If it is set to true, the service generates and stores a new private key for your rotated certificate.
    Unit string
    (String) The units for the secret rotation time interval.

    • Constraints: Allowable values are: day, month.
    autoRotate Boolean
    (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is false. If auto_rotate is set to true the service rotates your secret based on the defined interval.
    interval Double
    (Integer) The length of the secret rotation time interval.

    • Constraints: The minimum value is 1.
    rotateKeys Boolean
    (Boolean) Determines whether Secrets Manager rotates the private key for your public certificate automatically.Default is false. If it is set to true, the service generates and stores a new private key for your rotated certificate.
    unit String
    (String) The units for the secret rotation time interval.

    • Constraints: Allowable values are: day, month.
    autoRotate boolean
    (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is false. If auto_rotate is set to true the service rotates your secret based on the defined interval.
    interval number
    (Integer) The length of the secret rotation time interval.

    • Constraints: The minimum value is 1.
    rotateKeys boolean
    (Boolean) Determines whether Secrets Manager rotates the private key for your public certificate automatically.Default is false. If it is set to true, the service generates and stores a new private key for your rotated certificate.
    unit string
    (String) The units for the secret rotation time interval.

    • Constraints: Allowable values are: day, month.
    auto_rotate bool
    (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is false. If auto_rotate is set to true the service rotates your secret based on the defined interval.
    interval float
    (Integer) The length of the secret rotation time interval.

    • Constraints: The minimum value is 1.
    rotate_keys bool
    (Boolean) Determines whether Secrets Manager rotates the private key for your public certificate automatically.Default is false. If it is set to true, the service generates and stores a new private key for your rotated certificate.
    unit str
    (String) The units for the secret rotation time interval.

    • Constraints: Allowable values are: day, month.
    autoRotate Boolean
    (Boolean) Determines whether Secrets Manager rotates your secret automatically.Default is false. If auto_rotate is set to true the service rotates your secret based on the defined interval.
    interval Number
    (Integer) The length of the secret rotation time interval.

    • Constraints: The minimum value is 1.
    rotateKeys Boolean
    (Boolean) Determines whether Secrets Manager rotates the private key for your public certificate automatically.Default is false. If it is set to true, the service generates and stores a new private key for your rotated certificate.
    unit String
    (String) The units for the secret rotation time interval.

    • Constraints: Allowable values are: day, month.

    GetSmSecretsSecretSourceService

    Iams List<GetSmSecretsSecretSourceServiceIam>
    (List) The source service IAM data is returned in case IAM credentials where created for this secret. Nested scheme for iam:
    Instances List<GetSmSecretsSecretSourceServiceInstance>
    (List) The source service instance identifier. Nested scheme for instance:
    Parameters Dictionary<string, string>
    (Map) The collection of parameters for the service credentials target.
    ResourceKeys List<GetSmSecretsSecretSourceServiceResourceKey>
    (List) The source service resource key data of the generated service credentials. Nested scheme for resource_key:
    Roles List<GetSmSecretsSecretSourceServiceRole>
    (List) The service-specific custom role object. Nested scheme for role:
    Iams []GetSmSecretsSecretSourceServiceIam
    (List) The source service IAM data is returned in case IAM credentials where created for this secret. Nested scheme for iam:
    Instances []GetSmSecretsSecretSourceServiceInstance
    (List) The source service instance identifier. Nested scheme for instance:
    Parameters map[string]string
    (Map) The collection of parameters for the service credentials target.
    ResourceKeys []GetSmSecretsSecretSourceServiceResourceKey
    (List) The source service resource key data of the generated service credentials. Nested scheme for resource_key:
    Roles []GetSmSecretsSecretSourceServiceRole
    (List) The service-specific custom role object. Nested scheme for role:
    iams List<GetSmSecretsSecretSourceServiceIam>
    (List) The source service IAM data is returned in case IAM credentials where created for this secret. Nested scheme for iam:
    instances List<GetSmSecretsSecretSourceServiceInstance>
    (List) The source service instance identifier. Nested scheme for instance:
    parameters Map<String,String>
    (Map) The collection of parameters for the service credentials target.
    resourceKeys List<GetSmSecretsSecretSourceServiceResourceKey>
    (List) The source service resource key data of the generated service credentials. Nested scheme for resource_key:
    roles List<GetSmSecretsSecretSourceServiceRole>
    (List) The service-specific custom role object. Nested scheme for role:
    iams GetSmSecretsSecretSourceServiceIam[]
    (List) The source service IAM data is returned in case IAM credentials where created for this secret. Nested scheme for iam:
    instances GetSmSecretsSecretSourceServiceInstance[]
    (List) The source service instance identifier. Nested scheme for instance:
    parameters {[key: string]: string}
    (Map) The collection of parameters for the service credentials target.
    resourceKeys GetSmSecretsSecretSourceServiceResourceKey[]
    (List) The source service resource key data of the generated service credentials. Nested scheme for resource_key:
    roles GetSmSecretsSecretSourceServiceRole[]
    (List) The service-specific custom role object. Nested scheme for role:
    iams Sequence[GetSmSecretsSecretSourceServiceIam]
    (List) The source service IAM data is returned in case IAM credentials where created for this secret. Nested scheme for iam:
    instances Sequence[GetSmSecretsSecretSourceServiceInstance]
    (List) The source service instance identifier. Nested scheme for instance:
    parameters Mapping[str, str]
    (Map) The collection of parameters for the service credentials target.
    resource_keys Sequence[GetSmSecretsSecretSourceServiceResourceKey]
    (List) The source service resource key data of the generated service credentials. Nested scheme for resource_key:
    roles Sequence[GetSmSecretsSecretSourceServiceRole]
    (List) The service-specific custom role object. Nested scheme for role:
    iams List<Property Map>
    (List) The source service IAM data is returned in case IAM credentials where created for this secret. Nested scheme for iam:
    instances List<Property Map>
    (List) The source service instance identifier. Nested scheme for instance:
    parameters Map<String>
    (Map) The collection of parameters for the service credentials target.
    resourceKeys List<Property Map>
    (List) The source service resource key data of the generated service credentials. Nested scheme for resource_key:
    roles List<Property Map>
    (List) The service-specific custom role object. Nested scheme for role:

    GetSmSecretsSecretSourceServiceIam

    Apikeys List<GetSmSecretsSecretSourceServiceIamApikey>
    (String) The IAM apikey metadata for the IAM credentials that were generated. Nested scheme for apikey:
    Roles List<GetSmSecretsSecretSourceServiceIamRole>
    (List) The service-specific custom role object. Nested scheme for role:
    Serviceids List<GetSmSecretsSecretSourceServiceIamServiceid>
    (String) The IAM serviceid for the generated service credentials. Nested scheme for serviceid:
    Apikeys []GetSmSecretsSecretSourceServiceIamApikey
    (String) The IAM apikey metadata for the IAM credentials that were generated. Nested scheme for apikey:
    Roles []GetSmSecretsSecretSourceServiceIamRole
    (List) The service-specific custom role object. Nested scheme for role:
    Serviceids []GetSmSecretsSecretSourceServiceIamServiceid
    (String) The IAM serviceid for the generated service credentials. Nested scheme for serviceid:
    apikeys List<GetSmSecretsSecretSourceServiceIamApikey>
    (String) The IAM apikey metadata for the IAM credentials that were generated. Nested scheme for apikey:
    roles List<GetSmSecretsSecretSourceServiceIamRole>
    (List) The service-specific custom role object. Nested scheme for role:
    serviceids List<GetSmSecretsSecretSourceServiceIamServiceid>
    (String) The IAM serviceid for the generated service credentials. Nested scheme for serviceid:
    apikeys GetSmSecretsSecretSourceServiceIamApikey[]
    (String) The IAM apikey metadata for the IAM credentials that were generated. Nested scheme for apikey:
    roles GetSmSecretsSecretSourceServiceIamRole[]
    (List) The service-specific custom role object. Nested scheme for role:
    serviceids GetSmSecretsSecretSourceServiceIamServiceid[]
    (String) The IAM serviceid for the generated service credentials. Nested scheme for serviceid:
    apikeys Sequence[GetSmSecretsSecretSourceServiceIamApikey]
    (String) The IAM apikey metadata for the IAM credentials that were generated. Nested scheme for apikey:
    roles Sequence[GetSmSecretsSecretSourceServiceIamRole]
    (List) The service-specific custom role object. Nested scheme for role:
    serviceids Sequence[GetSmSecretsSecretSourceServiceIamServiceid]
    (String) The IAM serviceid for the generated service credentials. Nested scheme for serviceid:
    apikeys List<Property Map>
    (String) The IAM apikey metadata for the IAM credentials that were generated. Nested scheme for apikey:
    roles List<Property Map>
    (List) The service-specific custom role object. Nested scheme for role:
    serviceids List<Property Map>
    (String) The IAM serviceid for the generated service credentials. Nested scheme for serviceid:

    GetSmSecretsSecretSourceServiceIamApikey

    Description string
    (String) The IAM API key description for the generated service credentials.
    Name string
    (String) The resource key name of the generated service credentials.
    Description string
    (String) The IAM API key description for the generated service credentials.
    Name string
    (String) The resource key name of the generated service credentials.
    description String
    (String) The IAM API key description for the generated service credentials.
    name String
    (String) The resource key name of the generated service credentials.
    description string
    (String) The IAM API key description for the generated service credentials.
    name string
    (String) The resource key name of the generated service credentials.
    description str
    (String) The IAM API key description for the generated service credentials.
    name str
    (String) The resource key name of the generated service credentials.
    description String
    (String) The IAM API key description for the generated service credentials.
    name String
    (String) The resource key name of the generated service credentials.

    GetSmSecretsSecretSourceServiceIamRole

    Crn string
    (String) The CRN role identifier for creating a service-id.
    Crn string
    (String) The CRN role identifier for creating a service-id.
    crn String
    (String) The CRN role identifier for creating a service-id.
    crn string
    (String) The CRN role identifier for creating a service-id.
    crn str
    (String) The CRN role identifier for creating a service-id.
    crn String
    (String) The CRN role identifier for creating a service-id.

    GetSmSecretsSecretSourceServiceIamServiceid

    Crn string
    (String) The CRN role identifier for creating a service-id.
    Crn string
    (String) The CRN role identifier for creating a service-id.
    crn String
    (String) The CRN role identifier for creating a service-id.
    crn string
    (String) The CRN role identifier for creating a service-id.
    crn str
    (String) The CRN role identifier for creating a service-id.
    crn String
    (String) The CRN role identifier for creating a service-id.

    GetSmSecretsSecretSourceServiceInstance

    Crn string
    (String) The CRN role identifier for creating a service-id.
    Crn string
    (String) The CRN role identifier for creating a service-id.
    crn String
    (String) The CRN role identifier for creating a service-id.
    crn string
    (String) The CRN role identifier for creating a service-id.
    crn str
    (String) The CRN role identifier for creating a service-id.
    crn String
    (String) The CRN role identifier for creating a service-id.

    GetSmSecretsSecretSourceServiceResourceKey

    Crn string
    (String) The CRN role identifier for creating a service-id.
    Name string
    (String) The resource key name of the generated service credentials.
    Crn string
    (String) The CRN role identifier for creating a service-id.
    Name string
    (String) The resource key name of the generated service credentials.
    crn String
    (String) The CRN role identifier for creating a service-id.
    name String
    (String) The resource key name of the generated service credentials.
    crn string
    (String) The CRN role identifier for creating a service-id.
    name string
    (String) The resource key name of the generated service credentials.
    crn str
    (String) The CRN role identifier for creating a service-id.
    name str
    (String) The resource key name of the generated service credentials.
    crn String
    (String) The CRN role identifier for creating a service-id.
    name String
    (String) The resource key name of the generated service credentials.

    GetSmSecretsSecretSourceServiceRole

    Crn string
    (String) The CRN role identifier for creating a service-id.
    Crn string
    (String) The CRN role identifier for creating a service-id.
    crn String
    (String) The CRN role identifier for creating a service-id.
    crn string
    (String) The CRN role identifier for creating a service-id.
    crn str
    (String) The CRN role identifier for creating a service-id.
    crn String
    (String) The CRN role identifier for creating a service-id.

    GetSmSecretsSecretValidity

    NotAfter string
    (String) The date-time format follows RFC 3339.
    NotBefore string
    (String) The date-time format follows RFC 3339.
    NotAfter string
    (String) The date-time format follows RFC 3339.
    NotBefore string
    (String) The date-time format follows RFC 3339.
    notAfter String
    (String) The date-time format follows RFC 3339.
    notBefore String
    (String) The date-time format follows RFC 3339.
    notAfter string
    (String) The date-time format follows RFC 3339.
    notBefore string
    (String) The date-time format follows RFC 3339.
    not_after str
    (String) The date-time format follows RFC 3339.
    not_before str
    (String) The date-time format follows RFC 3339.
    notAfter String
    (String) The date-time format follows RFC 3339.
    notBefore String
    (String) The date-time format follows RFC 3339.

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    ibm logo
    ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud