Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. StrongDM
  3. API Docs
  4. getSecretEngine
StrongDM v1.27.0 published on Sunday, Apr 20, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-sdm

sdm.getSecretEngine

Explore with Pulumi AI

sdm logo
StrongDM v1.27.0 published on Sunday, Apr 20, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-sdm

    A SecretEngine is managing secrets in SecretStores.

    Using getSecretEngine

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getSecretEngine(args: GetSecretEngineArgs, opts?: InvokeOptions): Promise<GetSecretEngineResult>
function getSecretEngineOutput(args: GetSecretEngineOutputArgs, opts?: InvokeOptions): Output<GetSecretEngineResult>
    def get_secret_engine(binddn: Optional[str] = None,
                      bindpass: Optional[str] = None,
                      certificate: Optional[str] = None,
                      connection_timeout: Optional[int] = None,
                      do_not_validate_timestamps: Optional[bool] = None,
                      id: Optional[str] = None,
                      insecure_tls: Optional[bool] = None,
                      key_rotation_interval_days: Optional[int] = None,
                      name: Optional[str] = None,
                      request_timeout: Optional[int] = None,
                      secret_store_id: Optional[str] = None,
                      secret_store_root_path: Optional[str] = None,
                      start_tls: Optional[bool] = None,
                      tags: Optional[Mapping[str, str]] = None,
                      type: Optional[str] = None,
                      upndomain: Optional[str] = None,
                      url: Optional[str] = None,
                      userdn: Optional[str] = None,
                      opts: Optional[InvokeOptions] = None) -> GetSecretEngineResult
def get_secret_engine_output(binddn: Optional[pulumi.Input[str]] = None,
                      bindpass: Optional[pulumi.Input[str]] = None,
                      certificate: Optional[pulumi.Input[str]] = None,
                      connection_timeout: Optional[pulumi.Input[int]] = None,
                      do_not_validate_timestamps: Optional[pulumi.Input[bool]] = None,
                      id: Optional[pulumi.Input[str]] = None,
                      insecure_tls: Optional[pulumi.Input[bool]] = None,
                      key_rotation_interval_days: Optional[pulumi.Input[int]] = None,
                      name: Optional[pulumi.Input[str]] = None,
                      request_timeout: Optional[pulumi.Input[int]] = None,
                      secret_store_id: Optional[pulumi.Input[str]] = None,
                      secret_store_root_path: Optional[pulumi.Input[str]] = None,
                      start_tls: Optional[pulumi.Input[bool]] = None,
                      tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                      type: Optional[pulumi.Input[str]] = None,
                      upndomain: Optional[pulumi.Input[str]] = None,
                      url: Optional[pulumi.Input[str]] = None,
                      userdn: Optional[pulumi.Input[str]] = None,
                      opts: Optional[InvokeOptions] = None) -> Output[GetSecretEngineResult]
    func LookupSecretEngine(ctx *Context, args *LookupSecretEngineArgs, opts ...InvokeOption) (*LookupSecretEngineResult, error)
func LookupSecretEngineOutput(ctx *Context, args *LookupSecretEngineOutputArgs, opts ...InvokeOption) LookupSecretEngineResultOutput

    > Note: This function is named LookupSecretEngine in the Go SDK.

    public static class GetSecretEngine 
{
    public static Task<GetSecretEngineResult> InvokeAsync(GetSecretEngineArgs args, InvokeOptions? opts = null)
    public static Output<GetSecretEngineResult> Invoke(GetSecretEngineInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetSecretEngineResult> getSecretEngine(GetSecretEngineArgs args, InvokeOptions options)
public static Output<GetSecretEngineResult> getSecretEngine(GetSecretEngineArgs args, InvokeOptions options)

    fn::invoke:
  function: sdm:index/getSecretEngine:getSecretEngine
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    Bindpass string
    Password to use along with binddn when performing user search.
    Certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    ConnectionTimeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    DoNotValidateTimestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    Id string
    Unique identifier of the Secret Engine.
    InsecureTls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    KeyRotationIntervalDays int
    An interval of public/private key rotation for secret engine in days
    Name string
    Unique human-readable name of the Secret Engine.
    RequestTimeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    SecretStoreId string
    Backing secret store identifier
    SecretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    StartTls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    Type string
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    Upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    Url string
    The LDAP server to connect to.
    Userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    Binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    Bindpass string
    Password to use along with binddn when performing user search.
    Certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    ConnectionTimeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    DoNotValidateTimestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    Id string
    Unique identifier of the Secret Engine.
    InsecureTls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    KeyRotationIntervalDays int
    An interval of public/private key rotation for secret engine in days
    Name string
    Unique human-readable name of the Secret Engine.
    RequestTimeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    SecretStoreId string
    Backing secret store identifier
    SecretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    StartTls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    Tags map[string]string
    Tags is a map of key, value pairs.
    Type string
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    Upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    Url string
    The LDAP server to connect to.
    Userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    binddn String
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass String
    Password to use along with binddn when performing user search.
    certificate String
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout Integer
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps Boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id String
    Unique identifier of the Secret Engine.
    insecureTls Boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays Integer
    An interval of public/private key rotation for secret engine in days
    name String
    Unique human-readable name of the Secret Engine.
    requestTimeout Integer
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId String
    Backing secret store identifier
    secretStoreRootPath String
    Backing Secret Store root path where managed secrets are going to be stored
    startTls Boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Map<String,String>
    Tags is a map of key, value pairs.
    type String
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    upndomain String
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url String
    The LDAP server to connect to.
    userdn String
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass string
    Password to use along with binddn when performing user search.
    certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout number
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id string
    Unique identifier of the Secret Engine.
    insecureTls boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays number
    An interval of public/private key rotation for secret engine in days
    name string
    Unique human-readable name of the Secret Engine.
    requestTimeout number
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId string
    Backing secret store identifier
    secretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    startTls boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    type string
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url string
    The LDAP server to connect to.
    userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    binddn str
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass str
    Password to use along with binddn when performing user search.
    certificate str
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connection_timeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    do_not_validate_timestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id str
    Unique identifier of the Secret Engine.
    insecure_tls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    key_rotation_interval_days int
    An interval of public/private key rotation for secret engine in days
    name str
    Unique human-readable name of the Secret Engine.
    request_timeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secret_store_id str
    Backing secret store identifier
    secret_store_root_path str
    Backing Secret Store root path where managed secrets are going to be stored
    start_tls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    type str
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    upndomain str
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url str
    The LDAP server to connect to.
    userdn str
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    binddn String
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass String
    Password to use along with binddn when performing user search.
    certificate String
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout Number
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps Boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id String
    Unique identifier of the Secret Engine.
    insecureTls Boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays Number
    An interval of public/private key rotation for secret engine in days
    name String
    Unique human-readable name of the Secret Engine.
    requestTimeout Number
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId String
    Backing secret store identifier
    secretStoreRootPath String
    Backing Secret Store root path where managed secrets are going to be stored
    startTls Boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Map<String>
    Tags is a map of key, value pairs.
    type String
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    upndomain String
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url String
    The LDAP server to connect to.
    userdn String
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com

    getSecretEngine Result

    The following output properties are available:

    Ids List<string>
    a list of strings of ids of data sources that match the given arguments.
    SecretEngines List<PiersKarsenbarg.Sdm.Outputs.GetSecretEngineSecretEngine>
    A single element list containing a map, where each key lists one of the following objects:

    • active_directory:
    Binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    Bindpass string
    Password to use along with binddn when performing user search.
    Certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    ConnectionTimeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    DoNotValidateTimestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    Id string
    Unique identifier of the Secret Engine.
    InsecureTls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    KeyRotationIntervalDays int
    An interval of public/private key rotation for secret engine in days
    Name string
    Unique human-readable name of the Secret Engine.
    RequestTimeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    SecretStoreId string
    Backing secret store identifier
    SecretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    StartTls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    Type string
    Upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    Url string
    The LDAP server to connect to.
    Userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com

    • key_value:
    Ids []string
    a list of strings of ids of data sources that match the given arguments.
    SecretEngines []GetSecretEngineSecretEngine
    A single element list containing a map, where each key lists one of the following objects:

    • active_directory:
    Binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    Bindpass string
    Password to use along with binddn when performing user search.
    Certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    ConnectionTimeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    DoNotValidateTimestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    Id string
    Unique identifier of the Secret Engine.
    InsecureTls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    KeyRotationIntervalDays int
    An interval of public/private key rotation for secret engine in days
    Name string
    Unique human-readable name of the Secret Engine.
    RequestTimeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    SecretStoreId string
    Backing secret store identifier
    SecretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    StartTls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    Tags map[string]string
    Tags is a map of key, value pairs.
    Type string
    Upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    Url string
    The LDAP server to connect to.
    Userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com

    • key_value:
    ids List<String>
    a list of strings of ids of data sources that match the given arguments.
    secretEngines List<GetSecretEngineSecretEngine>
    A single element list containing a map, where each key lists one of the following objects:

    • active_directory:
    binddn String
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass String
    Password to use along with binddn when performing user search.
    certificate String
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout Integer
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps Boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id String
    Unique identifier of the Secret Engine.
    insecureTls Boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays Integer
    An interval of public/private key rotation for secret engine in days
    name String
    Unique human-readable name of the Secret Engine.
    requestTimeout Integer
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId String
    Backing secret store identifier
    secretStoreRootPath String
    Backing Secret Store root path where managed secrets are going to be stored
    startTls Boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Map<String,String>
    Tags is a map of key, value pairs.
    type String
    upndomain String
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url String
    The LDAP server to connect to.
    userdn String
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com

    • key_value:
    ids string[]
    a list of strings of ids of data sources that match the given arguments.
    secretEngines GetSecretEngineSecretEngine[]
    A single element list containing a map, where each key lists one of the following objects:

    • active_directory:
    binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass string
    Password to use along with binddn when performing user search.
    certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout number
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id string
    Unique identifier of the Secret Engine.
    insecureTls boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays number
    An interval of public/private key rotation for secret engine in days
    name string
    Unique human-readable name of the Secret Engine.
    requestTimeout number
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId string
    Backing secret store identifier
    secretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    startTls boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    type string
    upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url string
    The LDAP server to connect to.
    userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com

    • key_value:
    ids Sequence[str]
    a list of strings of ids of data sources that match the given arguments.
    secret_engines Sequence[GetSecretEngineSecretEngine]
    A single element list containing a map, where each key lists one of the following objects:

    • active_directory:
    binddn str
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass str
    Password to use along with binddn when performing user search.
    certificate str
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connection_timeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    do_not_validate_timestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id str
    Unique identifier of the Secret Engine.
    insecure_tls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    key_rotation_interval_days int
    An interval of public/private key rotation for secret engine in days
    name str
    Unique human-readable name of the Secret Engine.
    request_timeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secret_store_id str
    Backing secret store identifier
    secret_store_root_path str
    Backing Secret Store root path where managed secrets are going to be stored
    start_tls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    type str
    upndomain str
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url str
    The LDAP server to connect to.
    userdn str
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com

    • key_value:
    ids List<String>
    a list of strings of ids of data sources that match the given arguments.
    secretEngines List<Property Map>
    A single element list containing a map, where each key lists one of the following objects:

    • active_directory:
    binddn String
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass String
    Password to use along with binddn when performing user search.
    certificate String
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout Number
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps Boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id String
    Unique identifier of the Secret Engine.
    insecureTls Boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays Number
    An interval of public/private key rotation for secret engine in days
    name String
    Unique human-readable name of the Secret Engine.
    requestTimeout Number
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId String
    Backing secret store identifier
    secretStoreRootPath String
    Backing Secret Store root path where managed secrets are going to be stored
    startTls Boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Map<String>
    Tags is a map of key, value pairs.
    type String
    upndomain String
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url String
    The LDAP server to connect to.
    userdn String
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com

    • key_value:

    Supporting Types

    GetSecretEngineSecretEngine

    GetSecretEngineSecretEngineActiveDirectory

    PublicKey string
    Public key linked with a secret engine
    AfterReadTtl string
    The default time-to-live duration of the password after it's read. Once the ttl has passed, a password will be rotated.
    Binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    Bindpass string
    Password to use along with binddn when performing user search.
    Certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    ConnectionTimeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    DoNotValidateTimestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    Id string
    Unique identifier of the Secret Engine.
    InsecureTls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    KeyRotationIntervalDays int
    An interval of public/private key rotation for secret engine in days
    MaxBackoffDuration string
    The maximum retry duration in case of automatic failure. On failed ttl rotation attempt it will be retried in an increasing intervals until it reaches max_backoff_duration
    Name string
    Unique human-readable name of the Secret Engine.
    RequestTimeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    SecretStoreId string
    Backing secret store identifier
    SecretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    StartTls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    Ttl string
    The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
    Upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    Url string
    The LDAP server to connect to.
    Userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    PublicKey string
    Public key linked with a secret engine
    AfterReadTtl string
    The default time-to-live duration of the password after it's read. Once the ttl has passed, a password will be rotated.
    Binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    Bindpass string
    Password to use along with binddn when performing user search.
    Certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    ConnectionTimeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    DoNotValidateTimestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    Id string
    Unique identifier of the Secret Engine.
    InsecureTls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    KeyRotationIntervalDays int
    An interval of public/private key rotation for secret engine in days
    MaxBackoffDuration string
    The maximum retry duration in case of automatic failure. On failed ttl rotation attempt it will be retried in an increasing intervals until it reaches max_backoff_duration
    Name string
    Unique human-readable name of the Secret Engine.
    RequestTimeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    SecretStoreId string
    Backing secret store identifier
    SecretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    StartTls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    Tags map[string]string
    Tags is a map of key, value pairs.
    Ttl string
    The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
    Upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    Url string
    The LDAP server to connect to.
    Userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    publicKey String
    Public key linked with a secret engine
    afterReadTtl String
    The default time-to-live duration of the password after it's read. Once the ttl has passed, a password will be rotated.
    binddn String
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass String
    Password to use along with binddn when performing user search.
    certificate String
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout Integer
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps Boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id String
    Unique identifier of the Secret Engine.
    insecureTls Boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays Integer
    An interval of public/private key rotation for secret engine in days
    maxBackoffDuration String
    The maximum retry duration in case of automatic failure. On failed ttl rotation attempt it will be retried in an increasing intervals until it reaches max_backoff_duration
    name String
    Unique human-readable name of the Secret Engine.
    requestTimeout Integer
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId String
    Backing secret store identifier
    secretStoreRootPath String
    Backing Secret Store root path where managed secrets are going to be stored
    startTls Boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Map<String,String>
    Tags is a map of key, value pairs.
    ttl String
    The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
    upndomain String
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url String
    The LDAP server to connect to.
    userdn String
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    publicKey string
    Public key linked with a secret engine
    afterReadTtl string
    The default time-to-live duration of the password after it's read. Once the ttl has passed, a password will be rotated.
    binddn string
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass string
    Password to use along with binddn when performing user search.
    certificate string
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout number
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id string
    Unique identifier of the Secret Engine.
    insecureTls boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays number
    An interval of public/private key rotation for secret engine in days
    maxBackoffDuration string
    The maximum retry duration in case of automatic failure. On failed ttl rotation attempt it will be retried in an increasing intervals until it reaches max_backoff_duration
    name string
    Unique human-readable name of the Secret Engine.
    requestTimeout number
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId string
    Backing secret store identifier
    secretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    startTls boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    ttl string
    The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
    upndomain string
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url string
    The LDAP server to connect to.
    userdn string
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    public_key str
    Public key linked with a secret engine
    after_read_ttl str
    The default time-to-live duration of the password after it's read. Once the ttl has passed, a password will be rotated.
    binddn str
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass str
    Password to use along with binddn when performing user search.
    certificate str
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connection_timeout int
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    do_not_validate_timestamps bool
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id str
    Unique identifier of the Secret Engine.
    insecure_tls bool
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    key_rotation_interval_days int
    An interval of public/private key rotation for secret engine in days
    max_backoff_duration str
    The maximum retry duration in case of automatic failure. On failed ttl rotation attempt it will be retried in an increasing intervals until it reaches max_backoff_duration
    name str
    Unique human-readable name of the Secret Engine.
    request_timeout int
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secret_store_id str
    Backing secret store identifier
    secret_store_root_path str
    Backing Secret Store root path where managed secrets are going to be stored
    start_tls bool
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    ttl str
    The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
    upndomain str
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url str
    The LDAP server to connect to.
    userdn str
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com
    publicKey String
    Public key linked with a secret engine
    afterReadTtl String
    The default time-to-live duration of the password after it's read. Once the ttl has passed, a password will be rotated.
    binddn String
    Distinguished name of object to bind when performing user and group search. Example: cn=vault,ou=Users,dc=example,dc=com
    bindpass String
    Password to use along with binddn when performing user search.
    certificate String
    CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
    connectionTimeout Number
    Timeout, in seconds, when attempting to connect to the LDAP server before trying the next URL in the configuration.
    doNotValidateTimestamps Boolean
    If set to true this will prevent password change timestamp validation in Active Directory when validating credentials
    id String
    Unique identifier of the Secret Engine.
    insecureTls Boolean
    If true, skips LDAP server SSL certificate verification - insecure, use with caution!
    keyRotationIntervalDays Number
    An interval of public/private key rotation for secret engine in days
    maxBackoffDuration String
    The maximum retry duration in case of automatic failure. On failed ttl rotation attempt it will be retried in an increasing intervals until it reaches max_backoff_duration
    name String
    Unique human-readable name of the Secret Engine.
    requestTimeout Number
    Timeout, in seconds, for the connection when making requests against the server before returning back an error.
    secretStoreId String
    Backing secret store identifier
    secretStoreRootPath String
    Backing Secret Store root path where managed secrets are going to be stored
    startTls Boolean
    If true, issues a StartTLS command after establishing an unencrypted connection.
    tags Map<String>
    Tags is a map of key, value pairs.
    ttl String
    The default password time-to-live duration. Once the ttl has passed, a password will be rotated the next time it's requested.
    upndomain String
    The domain (userPrincipalDomain) used to construct a UPN string for authentication.
    url String
    The LDAP server to connect to.
    userdn String
    Base DN under which to perform user search. Example: ou=Users,dc=example,dc=com

    GetSecretEngineSecretEngineKeyValue

    PublicKey string
    Public key linked with a secret engine
    Id string
    Unique identifier of the Secret Engine.
    KeyRotationIntervalDays int
    An interval of public/private key rotation for secret engine in days
    Name string
    Unique human-readable name of the Secret Engine.
    SecretStoreId string
    Backing secret store identifier
    SecretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    PublicKey string
    Public key linked with a secret engine
    Id string
    Unique identifier of the Secret Engine.
    KeyRotationIntervalDays int
    An interval of public/private key rotation for secret engine in days
    Name string
    Unique human-readable name of the Secret Engine.
    SecretStoreId string
    Backing secret store identifier
    SecretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    Tags map[string]string
    Tags is a map of key, value pairs.
    publicKey String
    Public key linked with a secret engine
    id String
    Unique identifier of the Secret Engine.
    keyRotationIntervalDays Integer
    An interval of public/private key rotation for secret engine in days
    name String
    Unique human-readable name of the Secret Engine.
    secretStoreId String
    Backing secret store identifier
    secretStoreRootPath String
    Backing Secret Store root path where managed secrets are going to be stored
    tags Map<String,String>
    Tags is a map of key, value pairs.
    publicKey string
    Public key linked with a secret engine
    id string
    Unique identifier of the Secret Engine.
    keyRotationIntervalDays number
    An interval of public/private key rotation for secret engine in days
    name string
    Unique human-readable name of the Secret Engine.
    secretStoreId string
    Backing secret store identifier
    secretStoreRootPath string
    Backing Secret Store root path where managed secrets are going to be stored
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    public_key str
    Public key linked with a secret engine
    id str
    Unique identifier of the Secret Engine.
    key_rotation_interval_days int
    An interval of public/private key rotation for secret engine in days
    name str
    Unique human-readable name of the Secret Engine.
    secret_store_id str
    Backing secret store identifier
    secret_store_root_path str
    Backing Secret Store root path where managed secrets are going to be stored
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    publicKey String
    Public key linked with a secret engine
    id String
    Unique identifier of the Secret Engine.
    keyRotationIntervalDays Number
    An interval of public/private key rotation for secret engine in days
    name String
    Unique human-readable name of the Secret Engine.
    secretStoreId String
    Backing secret store identifier
    secretStoreRootPath String
    Backing Secret Store root path where managed secrets are going to be stored
    tags Map<String>
    Tags is a map of key, value pairs.

    Package Details

    Repository
    sdm pierskarsenbarg/pulumi-sdm
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sdm Terraform Provider.
    sdm logo
    StrongDM v1.27.0 published on Sunday, Apr 20, 2025 by Piers Karsenbarg
    pierskarsenbarg/pulumi-sdm