published on Friday, Feb 20, 2026 by stackitcloud
published on Friday, Feb 20, 2026 by stackitcloud
Secrets Manager user resource schema. Must have a region specified in the provider configuration.
Example Usage
resource "stackit_secretsmanager_user" "example" {
project_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
instance_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
description = "Example user"
write_enabled = false
}
# Only use the import statement, if you want to import an existing secretsmanager user
import {
to = stackit_secretsmanager_user.import-example
id = "${var.project_id},${var.secret_instance_id},${var.secret_user_id}"
}
Create SecretsmanagerUser Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new SecretsmanagerUser(name: string, args: SecretsmanagerUserArgs, opts?: CustomResourceOptions);@overload
def SecretsmanagerUser(resource_name: str,
args: SecretsmanagerUserArgs,
opts: Optional[ResourceOptions] = None)
@overload
def SecretsmanagerUser(resource_name: str,
opts: Optional[ResourceOptions] = None,
description: Optional[str] = None,
instance_id: Optional[str] = None,
project_id: Optional[str] = None,
write_enabled: Optional[bool] = None)func NewSecretsmanagerUser(ctx *Context, name string, args SecretsmanagerUserArgs, opts ...ResourceOption) (*SecretsmanagerUser, error)public SecretsmanagerUser(string name, SecretsmanagerUserArgs args, CustomResourceOptions? opts = null)
public SecretsmanagerUser(String name, SecretsmanagerUserArgs args)
public SecretsmanagerUser(String name, SecretsmanagerUserArgs args, CustomResourceOptions options)
type: stackit:SecretsmanagerUser
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args SecretsmanagerUserArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SecretsmanagerUserArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SecretsmanagerUserArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SecretsmanagerUserArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SecretsmanagerUserArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var secretsmanagerUserResource = new Stackit.SecretsmanagerUser("secretsmanagerUserResource", new()
{
Description = "string",
InstanceId = "string",
ProjectId = "string",
WriteEnabled = false,
});
example, err := stackit.NewSecretsmanagerUser(ctx, "secretsmanagerUserResource", &stackit.SecretsmanagerUserArgs{
Description: pulumi.String("string"),
InstanceId: pulumi.String("string"),
ProjectId: pulumi.String("string"),
WriteEnabled: pulumi.Bool(false),
})
var secretsmanagerUserResource = new SecretsmanagerUser("secretsmanagerUserResource", SecretsmanagerUserArgs.builder()
.description("string")
.instanceId("string")
.projectId("string")
.writeEnabled(false)
.build());
secretsmanager_user_resource = stackit.SecretsmanagerUser("secretsmanagerUserResource",
description="string",
instance_id="string",
project_id="string",
write_enabled=False)
const secretsmanagerUserResource = new stackit.SecretsmanagerUser("secretsmanagerUserResource", {
description: "string",
instanceId: "string",
projectId: "string",
writeEnabled: false,
});
type: stackit:SecretsmanagerUser
properties:
description: string
instanceId: string
projectId: string
writeEnabled: false
SecretsmanagerUser Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The SecretsmanagerUser resource accepts the following input properties:
- Description string
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- Instance
Id string - ID of the Secrets Manager instance.
- Project
Id string - STACKIT Project ID to which the instance is associated.
- Write
Enabled bool - If true, the user has writeaccess to the secrets engine.
- Description string
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- Instance
Id string - ID of the Secrets Manager instance.
- Project
Id string - STACKIT Project ID to which the instance is associated.
- Write
Enabled bool - If true, the user has writeaccess to the secrets engine.
- description String
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- instance
Id String - ID of the Secrets Manager instance.
- project
Id String - STACKIT Project ID to which the instance is associated.
- write
Enabled Boolean - If true, the user has writeaccess to the secrets engine.
- description string
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- instance
Id string - ID of the Secrets Manager instance.
- project
Id string - STACKIT Project ID to which the instance is associated.
- write
Enabled boolean - If true, the user has writeaccess to the secrets engine.
- description str
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- instance_
id str - ID of the Secrets Manager instance.
- project_
id str - STACKIT Project ID to which the instance is associated.
- write_
enabled bool - If true, the user has writeaccess to the secrets engine.
- description String
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- instance
Id String - ID of the Secrets Manager instance.
- project
Id String - STACKIT Project ID to which the instance is associated.
- write
Enabled Boolean - If true, the user has writeaccess to the secrets engine.
Outputs
All input properties are implicitly available as output properties. Additionally, the SecretsmanagerUser resource produces the following output properties:
Look up Existing SecretsmanagerUser Resource
Get an existing SecretsmanagerUser resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SecretsmanagerUserState, opts?: CustomResourceOptions): SecretsmanagerUser@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
description: Optional[str] = None,
instance_id: Optional[str] = None,
password: Optional[str] = None,
project_id: Optional[str] = None,
user_id: Optional[str] = None,
username: Optional[str] = None,
write_enabled: Optional[bool] = None) -> SecretsmanagerUserfunc GetSecretsmanagerUser(ctx *Context, name string, id IDInput, state *SecretsmanagerUserState, opts ...ResourceOption) (*SecretsmanagerUser, error)public static SecretsmanagerUser Get(string name, Input<string> id, SecretsmanagerUserState? state, CustomResourceOptions? opts = null)public static SecretsmanagerUser get(String name, Output<String> id, SecretsmanagerUserState state, CustomResourceOptions options)resources: _: type: stackit:SecretsmanagerUser get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Description string
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- Instance
Id string - ID of the Secrets Manager instance.
- Password string
- An auto-generated password.
- Project
Id string - STACKIT Project ID to which the instance is associated.
- User
Id string - The user's ID.
- Username string
- An auto-generated user name.
- Write
Enabled bool - If true, the user has writeaccess to the secrets engine.
- Description string
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- Instance
Id string - ID of the Secrets Manager instance.
- Password string
- An auto-generated password.
- Project
Id string - STACKIT Project ID to which the instance is associated.
- User
Id string - The user's ID.
- Username string
- An auto-generated user name.
- Write
Enabled bool - If true, the user has writeaccess to the secrets engine.
- description String
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- instance
Id String - ID of the Secrets Manager instance.
- password String
- An auto-generated password.
- project
Id String - STACKIT Project ID to which the instance is associated.
- user
Id String - The user's ID.
- username String
- An auto-generated user name.
- write
Enabled Boolean - If true, the user has writeaccess to the secrets engine.
- description string
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- instance
Id string - ID of the Secrets Manager instance.
- password string
- An auto-generated password.
- project
Id string - STACKIT Project ID to which the instance is associated.
- user
Id string - The user's ID.
- username string
- An auto-generated user name.
- write
Enabled boolean - If true, the user has writeaccess to the secrets engine.
- description str
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- instance_
id str - ID of the Secrets Manager instance.
- password str
- An auto-generated password.
- project_
id str - STACKIT Project ID to which the instance is associated.
- user_
id str - The user's ID.
- username str
- An auto-generated user name.
- write_
enabled bool - If true, the user has writeaccess to the secrets engine.
- description String
- A user chosen description to differentiate between multiple users. Can't be changed after creation.
- instance
Id String - ID of the Secrets Manager instance.
- password String
- An auto-generated password.
- project
Id String - STACKIT Project ID to which the instance is associated.
- user
Id String - The user's ID.
- username String
- An auto-generated user name.
- write
Enabled Boolean - If true, the user has writeaccess to the secrets engine.
Package Details
- Repository
- stackit stackitcloud/pulumi-stackit
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
stackitTerraform Provider.
published on Friday, Feb 20, 2026 by stackitcloud
