1. Pulumi Registry
  2. HashiCorp Vault
  3. API Docs
  4. database
  5. SecretsMount
vault logo
HashiCorp Vault v5.10.0, Mar 21 23

vault.database.SecretsMount

Import

Database secret backend connections can be imported using the path e.g.

 $ pulumi import vault:database/secretsMount:SecretsMount db db

Example Usage

using System.Collections.Generic;
using Pulumi;
using Vault = Pulumi.Vault;

return await Deployment.RunAsync(() => 
{
    var db = new Vault.Database.SecretsMount("db", new()
    {
        Path = "db",
        Mssqls = new[]
        {
            new Vault.Database.Inputs.SecretsMountMssqlArgs
            {
                Name = "db1",
                Username = "sa",
                Password = "super_secret_1",
                ConnectionUrl = "sqlserver://{{username}}:{{password}}@127.0.0.1:1433",
                AllowedRoles = new[]
                {
                    "dev1",
                },
            },
        },
        Postgresqls = new[]
        {
            new Vault.Database.Inputs.SecretsMountPostgresqlArgs
            {
                Name = "db2",
                Username = "postgres",
                Password = "super_secret_2",
                ConnectionUrl = "postgresql://{{username}}:{{password}}@127.0.0.1:5432/postgres",
                VerifyConnection = true,
                AllowedRoles = new[]
                {
                    "dev2",
                },
            },
        },
    });

    var dev1 = new Vault.Database.SecretBackendRole("dev1", new()
    {
        Backend = db.Path,
        DbName = db.Mssqls.Apply(mssqls => mssqls[0]?.Name),
        CreationStatements = new[]
        {
            "CREATE LOGIN [{{name}}] WITH PASSWORD = '{{password}}';",
            "CREATE USER [{{name}}] FOR LOGIN [{{name}}];",
            "GRANT SELECT ON SCHEMA::dbo TO [{{name}}];",
        },
    });

    var dev2 = new Vault.Database.SecretBackendRole("dev2", new()
    {
        Backend = db.Path,
        DbName = db.Postgresqls.Apply(postgresqls => postgresqls[0]?.Name),
        CreationStatements = new[]
        {
            "CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}';",
            "GRANT SELECT ON ALL TABLES IN SCHEMA public TO \"{{name}}\";",
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-vault/sdk/v5/go/vault/database"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		db, err := database.NewSecretsMount(ctx, "db", &database.SecretsMountArgs{
			Path: pulumi.String("db"),
			Mssqls: database.SecretsMountMssqlArray{
				&database.SecretsMountMssqlArgs{
					Name:          pulumi.String("db1"),
					Username:      pulumi.String("sa"),
					Password:      pulumi.String("super_secret_1"),
					ConnectionUrl: pulumi.String("sqlserver://{{username}}:{{password}}@127.0.0.1:1433"),
					AllowedRoles: pulumi.StringArray{
						pulumi.String("dev1"),
					},
				},
			},
			Postgresqls: database.SecretsMountPostgresqlArray{
				&database.SecretsMountPostgresqlArgs{
					Name:             pulumi.String("db2"),
					Username:         pulumi.String("postgres"),
					Password:         pulumi.String("super_secret_2"),
					ConnectionUrl:    pulumi.String("postgresql://{{username}}:{{password}}@127.0.0.1:5432/postgres"),
					VerifyConnection: pulumi.Bool(true),
					AllowedRoles: pulumi.StringArray{
						pulumi.String("dev2"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = database.NewSecretBackendRole(ctx, "dev1", &database.SecretBackendRoleArgs{
			Backend: db.Path,
			DbName: db.Mssqls.ApplyT(func(mssqls []database.SecretsMountMssql) (string, error) {
				return mssqls[0].Name, nil
			}).(pulumi.StringOutput),
			CreationStatements: pulumi.StringArray{
				pulumi.String("CREATE LOGIN [{{name}}] WITH PASSWORD = '{{password}}';"),
				pulumi.String("CREATE USER [{{name}}] FOR LOGIN [{{name}}];"),
				pulumi.String("GRANT SELECT ON SCHEMA::dbo TO [{{name}}];"),
			},
		})
		if err != nil {
			return err
		}
		_, err = database.NewSecretBackendRole(ctx, "dev2", &database.SecretBackendRoleArgs{
			Backend: db.Path,
			DbName: db.Postgresqls.ApplyT(func(postgresqls []database.SecretsMountPostgresql) (string, error) {
				return postgresqls[0].Name, nil
			}).(pulumi.StringOutput),
			CreationStatements: pulumi.StringArray{
				pulumi.String("CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}';"),
				pulumi.String("GRANT SELECT ON ALL TABLES IN SCHEMA public TO \"{{name}}\";"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.database.SecretsMount;
import com.pulumi.vault.database.SecretsMountArgs;
import com.pulumi.vault.database.inputs.SecretsMountMssqlArgs;
import com.pulumi.vault.database.inputs.SecretsMountPostgresqlArgs;
import com.pulumi.vault.database.SecretBackendRole;
import com.pulumi.vault.database.SecretBackendRoleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var db = new SecretsMount("db", SecretsMountArgs.builder()        
            .path("db")
            .mssqls(SecretsMountMssqlArgs.builder()
                .name("db1")
                .username("sa")
                .password("super_secret_1")
                .connectionUrl("sqlserver://{{username}}:{{password}}@127.0.0.1:1433")
                .allowedRoles("dev1")
                .build())
            .postgresqls(SecretsMountPostgresqlArgs.builder()
                .name("db2")
                .username("postgres")
                .password("super_secret_2")
                .connectionUrl("postgresql://{{username}}:{{password}}@127.0.0.1:5432/postgres")
                .verifyConnection(true)
                .allowedRoles("dev2")
                .build())
            .build());

        var dev1 = new SecretBackendRole("dev1", SecretBackendRoleArgs.builder()        
            .backend(db.path())
            .dbName(db.mssqls().applyValue(mssqls -> mssqls[0].name()))
            .creationStatements(            
                "CREATE LOGIN [{{name}}] WITH PASSWORD = '{{password}}';",
                "CREATE USER [{{name}}] FOR LOGIN [{{name}}];",
                "GRANT SELECT ON SCHEMA::dbo TO [{{name}}];")
            .build());

        var dev2 = new SecretBackendRole("dev2", SecretBackendRoleArgs.builder()        
            .backend(db.path())
            .dbName(db.postgresqls().applyValue(postgresqls -> postgresqls[0].name()))
            .creationStatements(            
                "CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}';",
                "GRANT SELECT ON ALL TABLES IN SCHEMA public TO \"{{name}}\";")
            .build());

    }
}

import pulumi
import pulumi_vault as vault

db = vault.database.SecretsMount("db",
    path="db",
    mssqls=[vault.database.SecretsMountMssqlArgs(
        name="db1",
        username="sa",
        password="super_secret_1",
        connection_url="sqlserver://{{username}}:{{password}}@127.0.0.1:1433",
        allowed_roles=["dev1"],
    )],
    postgresqls=[vault.database.SecretsMountPostgresqlArgs(
        name="db2",
        username="postgres",
        password="super_secret_2",
        connection_url="postgresql://{{username}}:{{password}}@127.0.0.1:5432/postgres",
        verify_connection=True,
        allowed_roles=["dev2"],
    )])
dev1 = vault.database.SecretBackendRole("dev1",
    backend=db.path,
    db_name=db.mssqls[0].name,
    creation_statements=[
        "CREATE LOGIN [{{name}}] WITH PASSWORD = '{{password}}';",
        "CREATE USER [{{name}}] FOR LOGIN [{{name}}];",
        "GRANT SELECT ON SCHEMA::dbo TO [{{name}}];",
    ])
dev2 = vault.database.SecretBackendRole("dev2",
    backend=db.path,
    db_name=db.postgresqls[0].name,
    creation_statements=[
        "CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}';",
        "GRANT SELECT ON ALL TABLES IN SCHEMA public TO \"{{name}}\";",
    ])

import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";

const db = new vault.database.SecretsMount("db", {
    path: "db",
    mssqls: [{
        name: "db1",
        username: "sa",
        password: "super_secret_1",
        connectionUrl: "sqlserver://{{username}}:{{password}}@127.0.0.1:1433",
        allowedRoles: ["dev1"],
    }],
    postgresqls: [{
        name: "db2",
        username: "postgres",
        password: "super_secret_2",
        connectionUrl: "postgresql://{{username}}:{{password}}@127.0.0.1:5432/postgres",
        verifyConnection: true,
        allowedRoles: ["dev2"],
    }],
});
const dev1 = new vault.database.SecretBackendRole("dev1", {
    backend: db.path,
    dbName: db.mssqls.apply(mssqls => mssqls?[0]?.name),
    creationStatements: [
        "CREATE LOGIN [{{name}}] WITH PASSWORD = '{{password}}';",
        "CREATE USER [{{name}}] FOR LOGIN [{{name}}];",
        "GRANT SELECT ON SCHEMA::dbo TO [{{name}}];",
    ],
});
const dev2 = new vault.database.SecretBackendRole("dev2", {
    backend: db.path,
    dbName: db.postgresqls.apply(postgresqls => postgresqls?[0]?.name),
    creationStatements: [
        "CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}';",
        "GRANT SELECT ON ALL TABLES IN SCHEMA public TO \"{{name}}\";",
    ],
});

resources:
  db:
    type: vault:database:SecretsMount
    properties:
      path: db
      mssqls:
        - name: db1
          username: sa
          password: super_secret_1
          connectionUrl: sqlserver://{{username}}:{{password}}@127.0.0.1:1433
          allowedRoles:
            - dev1
      postgresqls:
        - name: db2
          username: postgres
          password: super_secret_2
          connectionUrl: postgresql://{{username}}:{{password}}@127.0.0.1:5432/postgres
          verifyConnection: true
          allowedRoles:
            - dev2
  dev1:
    type: vault:database:SecretBackendRole
    properties:
      backend: ${db.path}
      dbName: ${db.mssqls[0].name}
      creationStatements:
        - CREATE LOGIN [{{name}}] WITH PASSWORD = '{{password}}';
        - CREATE USER [{{name}}] FOR LOGIN [{{name}}];
        - GRANT SELECT ON SCHEMA::dbo TO [{{name}}];
  dev2:
    type: vault:database:SecretBackendRole
    properties:
      backend: ${db.path}
      dbName: ${db.postgresqls[0].name}
      creationStatements:
        - CREATE ROLE "{{name}}" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}';
        - GRANT SELECT ON ALL TABLES IN SCHEMA public TO "{{name}}";

Create SecretsMount Resource

new SecretsMount(name: string, args: SecretsMountArgs, opts?: CustomResourceOptions);
@overload
def SecretsMount(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 allowed_managed_keys: Optional[Sequence[str]] = None,
                 audit_non_hmac_request_keys: Optional[Sequence[str]] = None,
                 audit_non_hmac_response_keys: Optional[Sequence[str]] = None,
                 cassandras: Optional[Sequence[SecretsMountCassandraArgs]] = None,
                 couchbases: Optional[Sequence[SecretsMountCouchbaseArgs]] = None,
                 default_lease_ttl_seconds: Optional[int] = None,
                 description: Optional[str] = None,
                 elasticsearches: Optional[Sequence[SecretsMountElasticsearchArgs]] = None,
                 external_entropy_access: Optional[bool] = None,
                 hanas: Optional[Sequence[SecretsMountHanaArgs]] = None,
                 influxdbs: Optional[Sequence[SecretsMountInfluxdbArgs]] = None,
                 local: Optional[bool] = None,
                 max_lease_ttl_seconds: Optional[int] = None,
                 mongodbatlas: Optional[Sequence[SecretsMountMongodbatlaArgs]] = None,
                 mongodbs: Optional[Sequence[SecretsMountMongodbArgs]] = None,
                 mssqls: Optional[Sequence[SecretsMountMssqlArgs]] = None,
                 mysql_auroras: Optional[Sequence[SecretsMountMysqlAuroraArgs]] = None,
                 mysql_legacies: Optional[Sequence[SecretsMountMysqlLegacyArgs]] = None,
                 mysql_rds: Optional[Sequence[SecretsMountMysqlRdArgs]] = None,
                 mysqls: Optional[Sequence[SecretsMountMysqlArgs]] = None,
                 namespace: Optional[str] = None,
                 options: Optional[Mapping[str, Any]] = None,
                 oracles: Optional[Sequence[SecretsMountOracleArgs]] = None,
                 path: Optional[str] = None,
                 postgresqls: Optional[Sequence[SecretsMountPostgresqlArgs]] = None,
                 redis: Optional[Sequence[SecretsMountRediArgs]] = None,
                 redis_elasticaches: Optional[Sequence[SecretsMountRedisElasticachArgs]] = None,
                 redshifts: Optional[Sequence[SecretsMountRedshiftArgs]] = None,
                 seal_wrap: Optional[bool] = None,
                 snowflakes: Optional[Sequence[SecretsMountSnowflakeArgs]] = None)
@overload
def SecretsMount(resource_name: str,
                 args: SecretsMountArgs,
                 opts: Optional[ResourceOptions] = None)
func NewSecretsMount(ctx *Context, name string, args SecretsMountArgs, opts ...ResourceOption) (*SecretsMount, error)
public SecretsMount(string name, SecretsMountArgs args, CustomResourceOptions? opts = null)
public SecretsMount(String name, SecretsMountArgs args)
public SecretsMount(String name, SecretsMountArgs args, CustomResourceOptions options)

type: vault:database:SecretsMount
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args SecretsMountArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args SecretsMountArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args SecretsMountArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args SecretsMountArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args SecretsMountArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

SecretsMount Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The SecretsMount resource accepts the following input properties:

Path string

Where the secret backend will be mounted

AllowedManagedKeys List<string>

Set of managed key registry entry names that the mount in question is allowed to access

AuditNonHmacRequestKeys List<string>

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

AuditNonHmacResponseKeys List<string>

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

Cassandras List<SecretsMountCassandraArgs>

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

Couchbases List<SecretsMountCouchbaseArgs>

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

DefaultLeaseTtlSeconds int

Default lease duration for tokens and secrets in seconds

Description string

Human-friendly description of the mount

Elasticsearches List<SecretsMountElasticsearchArgs>

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

ExternalEntropyAccess bool

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

Hanas List<SecretsMountHanaArgs>

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

Influxdbs List<SecretsMountInfluxdbArgs>

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

Local bool

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

MaxLeaseTtlSeconds int

Maximum possible lease duration for tokens and secrets in seconds

Mongodbatlas List<SecretsMountMongodbatlaArgs>

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

Mongodbs List<SecretsMountMongodbArgs>

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

Mssqls List<SecretsMountMssqlArgs>

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

MysqlAuroras List<SecretsMountMysqlAuroraArgs>

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

MysqlLegacies List<SecretsMountMysqlLegacyArgs>

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

MysqlRds List<SecretsMountMysqlRdArgs>

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

Mysqls List<SecretsMountMysqlArgs>

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

Namespace string

Target namespace. (requires Enterprise)

Options Dictionary<string, object>

Specifies mount type specific options that are passed to the backend

Oracles List<SecretsMountOracleArgs>

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

Postgresqls List<SecretsMountPostgresqlArgs>

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

Redis List<SecretsMountRediArgs>

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

RedisElasticaches List<SecretsMountRedisElasticachArgs>

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

Redshifts List<SecretsMountRedshiftArgs>

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

SealWrap bool

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

Snowflakes List<SecretsMountSnowflakeArgs>

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

Path string

Where the secret backend will be mounted

AllowedManagedKeys []string

Set of managed key registry entry names that the mount in question is allowed to access

AuditNonHmacRequestKeys []string

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

AuditNonHmacResponseKeys []string

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

Cassandras []SecretsMountCassandraArgs

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

Couchbases []SecretsMountCouchbaseArgs

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

DefaultLeaseTtlSeconds int

Default lease duration for tokens and secrets in seconds

Description string

Human-friendly description of the mount

Elasticsearches []SecretsMountElasticsearchArgs

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

ExternalEntropyAccess bool

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

Hanas []SecretsMountHanaArgs

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

Influxdbs []SecretsMountInfluxdbArgs

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

Local bool

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

MaxLeaseTtlSeconds int

Maximum possible lease duration for tokens and secrets in seconds

Mongodbatlas []SecretsMountMongodbatlaArgs

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

Mongodbs []SecretsMountMongodbArgs

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

Mssqls []SecretsMountMssqlArgs

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

MysqlAuroras []SecretsMountMysqlAuroraArgs

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

MysqlLegacies []SecretsMountMysqlLegacyArgs

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

MysqlRds []SecretsMountMysqlRdArgs

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

Mysqls []SecretsMountMysqlArgs

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

Namespace string

Target namespace. (requires Enterprise)

Options map[string]interface{}

Specifies mount type specific options that are passed to the backend

Oracles []SecretsMountOracleArgs

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

Postgresqls []SecretsMountPostgresqlArgs

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

Redis []SecretsMountRediArgs

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

RedisElasticaches []SecretsMountRedisElasticachArgs

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

Redshifts []SecretsMountRedshiftArgs

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

SealWrap bool

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

Snowflakes []SecretsMountSnowflakeArgs

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

path String

Where the secret backend will be mounted

allowedManagedKeys List<String>

Set of managed key registry entry names that the mount in question is allowed to access

auditNonHmacRequestKeys List<String>

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys List<String>

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandras List<SecretsMountCassandraArgs>

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

couchbases List<SecretsMountCouchbaseArgs>

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

defaultLeaseTtlSeconds Integer

Default lease duration for tokens and secrets in seconds

description String

Human-friendly description of the mount

elasticsearches List<SecretsMountElasticsearchArgs>

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

externalEntropyAccess Boolean

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

hanas List<SecretsMountHanaArgs>

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

influxdbs List<SecretsMountInfluxdbArgs>

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

local Boolean

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

maxLeaseTtlSeconds Integer

Maximum possible lease duration for tokens and secrets in seconds

mongodbatlas List<SecretsMountMongodbatlaArgs>

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

mongodbs List<SecretsMountMongodbArgs>

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

mssqls List<SecretsMountMssqlArgs>

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

mysqlAuroras List<SecretsMountMysqlAuroraArgs>

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

mysqlLegacies List<SecretsMountMysqlLegacyArgs>

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

mysqlRds List<SecretsMountMysqlRdArgs>

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

mysqls List<SecretsMountMysqlArgs>

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

namespace String

Target namespace. (requires Enterprise)

options Map<String,Object>

Specifies mount type specific options that are passed to the backend

oracles List<SecretsMountOracleArgs>

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

postgresqls List<SecretsMountPostgresqlArgs>

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

redis List<SecretsMountRediArgs>

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

redisElasticaches List<SecretsMountRedisElasticachArgs>

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

redshifts List<SecretsMountRedshiftArgs>

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

sealWrap Boolean

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

snowflakes List<SecretsMountSnowflakeArgs>

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

path string

Where the secret backend will be mounted

allowedManagedKeys string[]

Set of managed key registry entry names that the mount in question is allowed to access

auditNonHmacRequestKeys string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandras SecretsMountCassandraArgs[]

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

couchbases SecretsMountCouchbaseArgs[]

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

defaultLeaseTtlSeconds number

Default lease duration for tokens and secrets in seconds

description string

Human-friendly description of the mount

elasticsearches SecretsMountElasticsearchArgs[]

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

externalEntropyAccess boolean

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

hanas SecretsMountHanaArgs[]

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

influxdbs SecretsMountInfluxdbArgs[]

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

local boolean

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

maxLeaseTtlSeconds number

Maximum possible lease duration for tokens and secrets in seconds

mongodbatlas SecretsMountMongodbatlaArgs[]

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

mongodbs SecretsMountMongodbArgs[]

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

mssqls SecretsMountMssqlArgs[]

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

mysqlAuroras SecretsMountMysqlAuroraArgs[]

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

mysqlLegacies SecretsMountMysqlLegacyArgs[]

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

mysqlRds SecretsMountMysqlRdArgs[]

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

mysqls SecretsMountMysqlArgs[]

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

namespace string

Target namespace. (requires Enterprise)

options {[key: string]: any}

Specifies mount type specific options that are passed to the backend

oracles SecretsMountOracleArgs[]

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

postgresqls SecretsMountPostgresqlArgs[]

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

redis SecretsMountRediArgs[]

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

redisElasticaches SecretsMountRedisElasticachArgs[]

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

redshifts SecretsMountRedshiftArgs[]

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

sealWrap boolean

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

snowflakes SecretsMountSnowflakeArgs[]

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

path str

Where the secret backend will be mounted

allowed_managed_keys Sequence[str]

Set of managed key registry entry names that the mount in question is allowed to access

audit_non_hmac_request_keys Sequence[str]

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

audit_non_hmac_response_keys Sequence[str]

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandras Sequence[SecretsMountCassandraArgs]

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

couchbases Sequence[SecretsMountCouchbaseArgs]

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

default_lease_ttl_seconds int

Default lease duration for tokens and secrets in seconds

description str

Human-friendly description of the mount

elasticsearches Sequence[SecretsMountElasticsearchArgs]

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

external_entropy_access bool

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

hanas Sequence[SecretsMountHanaArgs]

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

influxdbs Sequence[SecretsMountInfluxdbArgs]

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

local bool

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

max_lease_ttl_seconds int

Maximum possible lease duration for tokens and secrets in seconds

mongodbatlas Sequence[SecretsMountMongodbatlaArgs]

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

mongodbs Sequence[SecretsMountMongodbArgs]

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

mssqls Sequence[SecretsMountMssqlArgs]

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

mysql_auroras Sequence[SecretsMountMysqlAuroraArgs]

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

mysql_legacies Sequence[SecretsMountMysqlLegacyArgs]

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

mysql_rds Sequence[SecretsMountMysqlRdArgs]

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

mysqls Sequence[SecretsMountMysqlArgs]

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

namespace str

Target namespace. (requires Enterprise)

options Mapping[str, Any]

Specifies mount type specific options that are passed to the backend

oracles Sequence[SecretsMountOracleArgs]

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

postgresqls Sequence[SecretsMountPostgresqlArgs]

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

redis Sequence[SecretsMountRediArgs]

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

redis_elasticaches Sequence[SecretsMountRedisElasticachArgs]

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

redshifts Sequence[SecretsMountRedshiftArgs]

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

seal_wrap bool

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

snowflakes Sequence[SecretsMountSnowflakeArgs]

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

path String

Where the secret backend will be mounted

allowedManagedKeys List<String>

Set of managed key registry entry names that the mount in question is allowed to access

auditNonHmacRequestKeys List<String>

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys List<String>

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandras List<Property Map>

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

couchbases List<Property Map>

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

defaultLeaseTtlSeconds Number

Default lease duration for tokens and secrets in seconds

description String

Human-friendly description of the mount

elasticsearches List<Property Map>

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

externalEntropyAccess Boolean

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

hanas List<Property Map>

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

influxdbs List<Property Map>

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

local Boolean

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

maxLeaseTtlSeconds Number

Maximum possible lease duration for tokens and secrets in seconds

mongodbatlas List<Property Map>

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

mongodbs List<Property Map>

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

mssqls List<Property Map>

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

mysqlAuroras List<Property Map>

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

mysqlLegacies List<Property Map>

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

mysqlRds List<Property Map>

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

mysqls List<Property Map>

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

namespace String

Target namespace. (requires Enterprise)

options Map<Any>

Specifies mount type specific options that are passed to the backend

oracles List<Property Map>

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

postgresqls List<Property Map>

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

redis List<Property Map>

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

redisElasticaches List<Property Map>

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

redshifts List<Property Map>

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

sealWrap Boolean

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

snowflakes List<Property Map>

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

Outputs

All input properties are implicitly available as output properties. Additionally, the SecretsMount resource produces the following output properties:

Accessor string

Accessor of the mount

EngineCount int

The total number of database secrets engines configured.

Id string

The provider-assigned unique ID for this managed resource.

Accessor string

Accessor of the mount

EngineCount int

The total number of database secrets engines configured.

Id string

The provider-assigned unique ID for this managed resource.

accessor String

Accessor of the mount

engineCount Integer

The total number of database secrets engines configured.

id String

The provider-assigned unique ID for this managed resource.

accessor string

Accessor of the mount

engineCount number

The total number of database secrets engines configured.

id string

The provider-assigned unique ID for this managed resource.

accessor str

Accessor of the mount

engine_count int

The total number of database secrets engines configured.

id str

The provider-assigned unique ID for this managed resource.

accessor String

Accessor of the mount

engineCount Number

The total number of database secrets engines configured.

id String

The provider-assigned unique ID for this managed resource.

Look up Existing SecretsMount Resource

Get an existing SecretsMount resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SecretsMountState, opts?: CustomResourceOptions): SecretsMount
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        accessor: Optional[str] = None,
        allowed_managed_keys: Optional[Sequence[str]] = None,
        audit_non_hmac_request_keys: Optional[Sequence[str]] = None,
        audit_non_hmac_response_keys: Optional[Sequence[str]] = None,
        cassandras: Optional[Sequence[SecretsMountCassandraArgs]] = None,
        couchbases: Optional[Sequence[SecretsMountCouchbaseArgs]] = None,
        default_lease_ttl_seconds: Optional[int] = None,
        description: Optional[str] = None,
        elasticsearches: Optional[Sequence[SecretsMountElasticsearchArgs]] = None,
        engine_count: Optional[int] = None,
        external_entropy_access: Optional[bool] = None,
        hanas: Optional[Sequence[SecretsMountHanaArgs]] = None,
        influxdbs: Optional[Sequence[SecretsMountInfluxdbArgs]] = None,
        local: Optional[bool] = None,
        max_lease_ttl_seconds: Optional[int] = None,
        mongodbatlas: Optional[Sequence[SecretsMountMongodbatlaArgs]] = None,
        mongodbs: Optional[Sequence[SecretsMountMongodbArgs]] = None,
        mssqls: Optional[Sequence[SecretsMountMssqlArgs]] = None,
        mysql_auroras: Optional[Sequence[SecretsMountMysqlAuroraArgs]] = None,
        mysql_legacies: Optional[Sequence[SecretsMountMysqlLegacyArgs]] = None,
        mysql_rds: Optional[Sequence[SecretsMountMysqlRdArgs]] = None,
        mysqls: Optional[Sequence[SecretsMountMysqlArgs]] = None,
        namespace: Optional[str] = None,
        options: Optional[Mapping[str, Any]] = None,
        oracles: Optional[Sequence[SecretsMountOracleArgs]] = None,
        path: Optional[str] = None,
        postgresqls: Optional[Sequence[SecretsMountPostgresqlArgs]] = None,
        redis: Optional[Sequence[SecretsMountRediArgs]] = None,
        redis_elasticaches: Optional[Sequence[SecretsMountRedisElasticachArgs]] = None,
        redshifts: Optional[Sequence[SecretsMountRedshiftArgs]] = None,
        seal_wrap: Optional[bool] = None,
        snowflakes: Optional[Sequence[SecretsMountSnowflakeArgs]] = None) -> SecretsMount
func GetSecretsMount(ctx *Context, name string, id IDInput, state *SecretsMountState, opts ...ResourceOption) (*SecretsMount, error)
public static SecretsMount Get(string name, Input<string> id, SecretsMountState? state, CustomResourceOptions? opts = null)
public static SecretsMount get(String name, Output<String> id, SecretsMountState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Accessor string

Accessor of the mount

AllowedManagedKeys List<string>

Set of managed key registry entry names that the mount in question is allowed to access

AuditNonHmacRequestKeys List<string>

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

AuditNonHmacResponseKeys List<string>

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

Cassandras List<SecretsMountCassandraArgs>

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

Couchbases List<SecretsMountCouchbaseArgs>

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

DefaultLeaseTtlSeconds int

Default lease duration for tokens and secrets in seconds

Description string

Human-friendly description of the mount

Elasticsearches List<SecretsMountElasticsearchArgs>

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

EngineCount int

The total number of database secrets engines configured.

ExternalEntropyAccess bool

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

Hanas List<SecretsMountHanaArgs>

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

Influxdbs List<SecretsMountInfluxdbArgs>

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

Local bool

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

MaxLeaseTtlSeconds int

Maximum possible lease duration for tokens and secrets in seconds

Mongodbatlas List<SecretsMountMongodbatlaArgs>

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

Mongodbs List<SecretsMountMongodbArgs>

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

Mssqls List<SecretsMountMssqlArgs>

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

MysqlAuroras List<SecretsMountMysqlAuroraArgs>

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

MysqlLegacies List<SecretsMountMysqlLegacyArgs>

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

MysqlRds List<SecretsMountMysqlRdArgs>

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

Mysqls List<SecretsMountMysqlArgs>

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

Namespace string

Target namespace. (requires Enterprise)

Options Dictionary<string, object>

Specifies mount type specific options that are passed to the backend

Oracles List<SecretsMountOracleArgs>

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

Path string

Where the secret backend will be mounted

Postgresqls List<SecretsMountPostgresqlArgs>

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

Redis List<SecretsMountRediArgs>

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

RedisElasticaches List<SecretsMountRedisElasticachArgs>

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

Redshifts List<SecretsMountRedshiftArgs>

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

SealWrap bool

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

Snowflakes List<SecretsMountSnowflakeArgs>

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

Accessor string

Accessor of the mount

AllowedManagedKeys []string

Set of managed key registry entry names that the mount in question is allowed to access

AuditNonHmacRequestKeys []string

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

AuditNonHmacResponseKeys []string

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

Cassandras []SecretsMountCassandraArgs

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

Couchbases []SecretsMountCouchbaseArgs

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

DefaultLeaseTtlSeconds int

Default lease duration for tokens and secrets in seconds

Description string

Human-friendly description of the mount

Elasticsearches []SecretsMountElasticsearchArgs

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

EngineCount int

The total number of database secrets engines configured.

ExternalEntropyAccess bool

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

Hanas []SecretsMountHanaArgs

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

Influxdbs []SecretsMountInfluxdbArgs

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

Local bool

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

MaxLeaseTtlSeconds int

Maximum possible lease duration for tokens and secrets in seconds

Mongodbatlas []SecretsMountMongodbatlaArgs

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

Mongodbs []SecretsMountMongodbArgs

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

Mssqls []SecretsMountMssqlArgs

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

MysqlAuroras []SecretsMountMysqlAuroraArgs

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

MysqlLegacies []SecretsMountMysqlLegacyArgs

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

MysqlRds []SecretsMountMysqlRdArgs

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

Mysqls []SecretsMountMysqlArgs

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

Namespace string

Target namespace. (requires Enterprise)

Options map[string]interface{}

Specifies mount type specific options that are passed to the backend

Oracles []SecretsMountOracleArgs

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

Path string

Where the secret backend will be mounted

Postgresqls []SecretsMountPostgresqlArgs

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

Redis []SecretsMountRediArgs

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

RedisElasticaches []SecretsMountRedisElasticachArgs

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

Redshifts []SecretsMountRedshiftArgs

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

SealWrap bool

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

Snowflakes []SecretsMountSnowflakeArgs

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

accessor String

Accessor of the mount

allowedManagedKeys List<String>

Set of managed key registry entry names that the mount in question is allowed to access

auditNonHmacRequestKeys List<String>

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys List<String>

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandras List<SecretsMountCassandraArgs>

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

couchbases List<SecretsMountCouchbaseArgs>

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

defaultLeaseTtlSeconds Integer

Default lease duration for tokens and secrets in seconds

description String

Human-friendly description of the mount

elasticsearches List<SecretsMountElasticsearchArgs>

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

engineCount Integer

The total number of database secrets engines configured.

externalEntropyAccess Boolean

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

hanas List<SecretsMountHanaArgs>

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

influxdbs List<SecretsMountInfluxdbArgs>

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

local Boolean

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

maxLeaseTtlSeconds Integer

Maximum possible lease duration for tokens and secrets in seconds

mongodbatlas List<SecretsMountMongodbatlaArgs>

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

mongodbs List<SecretsMountMongodbArgs>

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

mssqls List<SecretsMountMssqlArgs>

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

mysqlAuroras List<SecretsMountMysqlAuroraArgs>

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

mysqlLegacies List<SecretsMountMysqlLegacyArgs>

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

mysqlRds List<SecretsMountMysqlRdArgs>

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

mysqls List<SecretsMountMysqlArgs>

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

namespace String

Target namespace. (requires Enterprise)

options Map<String,Object>

Specifies mount type specific options that are passed to the backend

oracles List<SecretsMountOracleArgs>

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

path String

Where the secret backend will be mounted

postgresqls List<SecretsMountPostgresqlArgs>

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

redis List<SecretsMountRediArgs>

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

redisElasticaches List<SecretsMountRedisElasticachArgs>

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

redshifts List<SecretsMountRedshiftArgs>

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

sealWrap Boolean

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

snowflakes List<SecretsMountSnowflakeArgs>

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

accessor string

Accessor of the mount

allowedManagedKeys string[]

Set of managed key registry entry names that the mount in question is allowed to access

auditNonHmacRequestKeys string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys string[]

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandras SecretsMountCassandraArgs[]

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

couchbases SecretsMountCouchbaseArgs[]

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

defaultLeaseTtlSeconds number

Default lease duration for tokens and secrets in seconds

description string

Human-friendly description of the mount

elasticsearches SecretsMountElasticsearchArgs[]

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

engineCount number

The total number of database secrets engines configured.

externalEntropyAccess boolean

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

hanas SecretsMountHanaArgs[]

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

influxdbs SecretsMountInfluxdbArgs[]

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

local boolean

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

maxLeaseTtlSeconds number

Maximum possible lease duration for tokens and secrets in seconds

mongodbatlas SecretsMountMongodbatlaArgs[]

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

mongodbs SecretsMountMongodbArgs[]

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

mssqls SecretsMountMssqlArgs[]

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

mysqlAuroras SecretsMountMysqlAuroraArgs[]

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

mysqlLegacies SecretsMountMysqlLegacyArgs[]

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

mysqlRds SecretsMountMysqlRdArgs[]

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

mysqls SecretsMountMysqlArgs[]

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

namespace string

Target namespace. (requires Enterprise)

options {[key: string]: any}

Specifies mount type specific options that are passed to the backend

oracles SecretsMountOracleArgs[]

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

path string

Where the secret backend will be mounted

postgresqls SecretsMountPostgresqlArgs[]

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

redis SecretsMountRediArgs[]

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

redisElasticaches SecretsMountRedisElasticachArgs[]

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

redshifts SecretsMountRedshiftArgs[]

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

sealWrap boolean

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

snowflakes SecretsMountSnowflakeArgs[]

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

accessor str

Accessor of the mount

allowed_managed_keys Sequence[str]

Set of managed key registry entry names that the mount in question is allowed to access

audit_non_hmac_request_keys Sequence[str]

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

audit_non_hmac_response_keys Sequence[str]

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandras Sequence[SecretsMountCassandraArgs]

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

couchbases Sequence[SecretsMountCouchbaseArgs]

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

default_lease_ttl_seconds int

Default lease duration for tokens and secrets in seconds

description str

Human-friendly description of the mount

elasticsearches Sequence[SecretsMountElasticsearchArgs]

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

engine_count int

The total number of database secrets engines configured.

external_entropy_access bool

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

hanas Sequence[SecretsMountHanaArgs]

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

influxdbs Sequence[SecretsMountInfluxdbArgs]

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

local bool

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

max_lease_ttl_seconds int

Maximum possible lease duration for tokens and secrets in seconds

mongodbatlas Sequence[SecretsMountMongodbatlaArgs]

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

mongodbs Sequence[SecretsMountMongodbArgs]

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

mssqls Sequence[SecretsMountMssqlArgs]

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

mysql_auroras Sequence[SecretsMountMysqlAuroraArgs]

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

mysql_legacies Sequence[SecretsMountMysqlLegacyArgs]

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

mysql_rds Sequence[SecretsMountMysqlRdArgs]

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

mysqls Sequence[SecretsMountMysqlArgs]

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

namespace str

Target namespace. (requires Enterprise)

options Mapping[str, Any]

Specifies mount type specific options that are passed to the backend

oracles Sequence[SecretsMountOracleArgs]

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

path str

Where the secret backend will be mounted

postgresqls Sequence[SecretsMountPostgresqlArgs]

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

redis Sequence[SecretsMountRediArgs]

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

redis_elasticaches Sequence[SecretsMountRedisElasticachArgs]

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

redshifts Sequence[SecretsMountRedshiftArgs]

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

seal_wrap bool

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

snowflakes Sequence[SecretsMountSnowflakeArgs]

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

accessor String

Accessor of the mount

allowedManagedKeys List<String>

Set of managed key registry entry names that the mount in question is allowed to access

auditNonHmacRequestKeys List<String>

Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.

auditNonHmacResponseKeys List<String>

Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.

cassandras List<Property Map>

A nested block containing configuration options for Cassandra connections.
See Configuration Options for more info

couchbases List<Property Map>

A nested block containing configuration options for Couchbase connections.
See Configuration Options for more info

defaultLeaseTtlSeconds Number

Default lease duration for tokens and secrets in seconds

description String

Human-friendly description of the mount

elasticsearches List<Property Map>

A nested block containing configuration options for Elasticsearch connections.
See Configuration Options for more info

engineCount Number

The total number of database secrets engines configured.

externalEntropyAccess Boolean

Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source

hanas List<Property Map>

A nested block containing configuration options for SAP HanaDB connections.
See Configuration Options for more info

influxdbs List<Property Map>

A nested block containing configuration options for InfluxDB connections.
See Configuration Options for more info

local Boolean

Boolean flag that can be explicitly set to true to enforce local mount in HA environment

maxLeaseTtlSeconds Number

Maximum possible lease duration for tokens and secrets in seconds

mongodbatlas List<Property Map>

A nested block containing configuration options for MongoDB Atlas connections.
See Configuration Options for more info

mongodbs List<Property Map>

A nested block containing configuration options for MongoDB connections.
See Configuration Options for more info

mssqls List<Property Map>

A nested block containing configuration options for MSSQL connections.
See Configuration Options for more info

mysqlAuroras List<Property Map>

A nested block containing configuration options for Aurora MySQL connections.
See Configuration Options for more info

mysqlLegacies List<Property Map>

A nested block containing configuration options for legacy MySQL connections.
See Configuration Options for more info

mysqlRds List<Property Map>

A nested block containing configuration options for RDS MySQL connections.
See Configuration Options for more info

mysqls List<Property Map>

A nested block containing configuration options for MySQL connections.
See Configuration Options for more info

namespace String

Target namespace. (requires Enterprise)

options Map<Any>

Specifies mount type specific options that are passed to the backend

oracles List<Property Map>

A nested block containing configuration options for Oracle connections.
See Configuration Options for more info

path String

Where the secret backend will be mounted

postgresqls List<Property Map>

A nested block containing configuration options for PostgreSQL connections.
See Configuration Options for more info

redis List<Property Map>

A nested block containing configuration options for Redis connections.
See Configuration Options for more info

redisElasticaches List<Property Map>

A nested block containing configuration options for Redis ElastiCache connections.
See Configuration Options for more info

redshifts List<Property Map>

A nested block containing configuration options for AWS Redshift connections.
See Configuration Options for more info

sealWrap Boolean

Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability

snowflakes List<Property Map>

A nested block containing configuration options for Snowflake connections.
See Configuration Options for more info

Supporting Types

SecretsMountCassandra

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectTimeout int

The number of seconds to use as a connection timeout.

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

Hosts List<string>

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

InsecureTls bool

Whether to skip verification of the server certificate when using TLS.

Password string

The password to be used in the connection.

PemBundle string

Concatenated PEM blocks configuring the certificate chain.

PemJson string

A JSON structure configuring the certificate chain.

PluginName string

Specifies the name of the plugin to use.

Port int

The default port to connect to if no port is specified as part of the host.

ProtocolVersion int

The CQL protocol version to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Tls bool

Whether to use TLS when connecting to Redis.

Username string

The username to be used in the connection (the account admin level).

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectTimeout int

The number of seconds to use as a connection timeout.

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

Hosts []string

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

InsecureTls bool

Whether to skip verification of the server certificate when using TLS.

Password string

The password to be used in the connection.

PemBundle string

Concatenated PEM blocks configuring the certificate chain.

PemJson string

A JSON structure configuring the certificate chain.

PluginName string

Specifies the name of the plugin to use.

Port int

The default port to connect to if no port is specified as part of the host.

ProtocolVersion int

The CQL protocol version to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Tls bool

Whether to use TLS when connecting to Redis.

Username string

The username to be used in the connection (the account admin level).

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectTimeout Integer

The number of seconds to use as a connection timeout.

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

hosts List<String>

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

insecureTls Boolean

Whether to skip verification of the server certificate when using TLS.

password String

The password to be used in the connection.

pemBundle String

Concatenated PEM blocks configuring the certificate chain.

pemJson String

A JSON structure configuring the certificate chain.

pluginName String

Specifies the name of the plugin to use.

port Integer

The default port to connect to if no port is specified as part of the host.

protocolVersion Integer

The CQL protocol version to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tls Boolean

Whether to use TLS when connecting to Redis.

username String

The username to be used in the connection (the account admin level).

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectTimeout number

The number of seconds to use as a connection timeout.

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

hosts string[]

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

insecureTls boolean

Whether to skip verification of the server certificate when using TLS.

password string

The password to be used in the connection.

pemBundle string

Concatenated PEM blocks configuring the certificate chain.

pemJson string

A JSON structure configuring the certificate chain.

pluginName string

Specifies the name of the plugin to use.

port number

The default port to connect to if no port is specified as part of the host.

protocolVersion number

The CQL protocol version to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

tls boolean

Whether to use TLS when connecting to Redis.

username string

The username to be used in the connection (the account admin level).

verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connect_timeout int

The number of seconds to use as a connection timeout.

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

hosts Sequence[str]

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

insecure_tls bool

Whether to skip verification of the server certificate when using TLS.

password str

The password to be used in the connection.

pem_bundle str

Concatenated PEM blocks configuring the certificate chain.

pem_json str

A JSON structure configuring the certificate chain.

plugin_name str

Specifies the name of the plugin to use.

port int

The default port to connect to if no port is specified as part of the host.

protocol_version int

The CQL protocol version to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

tls bool

Whether to use TLS when connecting to Redis.

username str

The username to be used in the connection (the account admin level).

verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectTimeout Number

The number of seconds to use as a connection timeout.

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

hosts List<String>

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

insecureTls Boolean

Whether to skip verification of the server certificate when using TLS.

password String

The password to be used in the connection.

pemBundle String

Concatenated PEM blocks configuring the certificate chain.

pemJson String

A JSON structure configuring the certificate chain.

pluginName String

Specifies the name of the plugin to use.

port Number

The default port to connect to if no port is specified as part of the host.

protocolVersion Number

The CQL protocol version to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tls Boolean

Whether to use TLS when connecting to Redis.

username String

The username to be used in the connection (the account admin level).

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountCouchbase

Hosts List<string>

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

Name string
Password string

The password to be used in the connection.

Username string

The username to be used in the connection (the account admin level).

AllowedRoles List<string>

A list of roles that are allowed to use this connection.

Base64Pem string

Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded.

BucketName string

Required for Couchbase versions prior to 6.5.0. This is only used to verify vault's connection to the server.

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

InsecureTls bool

Whether to skip verification of the server certificate when using TLS.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Tls bool

Whether to use TLS when connecting to Redis.

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Hosts []string

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

Name string
Password string

The password to be used in the connection.

Username string

The username to be used in the connection (the account admin level).

AllowedRoles []string

A list of roles that are allowed to use this connection.

Base64Pem string

Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded.

BucketName string

Required for Couchbase versions prior to 6.5.0. This is only used to verify vault's connection to the server.

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

InsecureTls bool

Whether to skip verification of the server certificate when using TLS.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Tls bool

Whether to use TLS when connecting to Redis.

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

hosts List<String>

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

name String
password String

The password to be used in the connection.

username String

The username to be used in the connection (the account admin level).

allowedRoles List<String>

A list of roles that are allowed to use this connection.

base64Pem String

Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded.

bucketName String

Required for Couchbase versions prior to 6.5.0. This is only used to verify vault's connection to the server.

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls Boolean

Whether to skip verification of the server certificate when using TLS.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tls Boolean

Whether to use TLS when connecting to Redis.

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

hosts string[]

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

name string
password string

The password to be used in the connection.

username string

The username to be used in the connection (the account admin level).

allowedRoles string[]

A list of roles that are allowed to use this connection.

base64Pem string

Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded.

bucketName string

Required for Couchbase versions prior to 6.5.0. This is only used to verify vault's connection to the server.

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls boolean

Whether to skip verification of the server certificate when using TLS.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

tls boolean

Whether to use TLS when connecting to Redis.

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

hosts Sequence[str]

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

name str
password str

The password to be used in the connection.

username str

The username to be used in the connection (the account admin level).

allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

base64_pem str

Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded.

bucket_name str

Required for Couchbase versions prior to 6.5.0. This is only used to verify vault's connection to the server.

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecure_tls bool

Whether to skip verification of the server certificate when using TLS.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

tls bool

Whether to use TLS when connecting to Redis.

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

hosts List<String>

A set of Couchbase URIs to connect to. Must use couchbases:// scheme if tls is true.

name String
password String

The password to be used in the connection.

username String

The username to be used in the connection (the account admin level).

allowedRoles List<String>

A list of roles that are allowed to use this connection.

base64Pem String

Required if tls is true. Specifies the certificate authority of the Couchbase server, as a PEM certificate that has been base64 encoded.

bucketName String

Required for Couchbase versions prior to 6.5.0. This is only used to verify vault's connection to the server.

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls Boolean

Whether to skip verification of the server certificate when using TLS.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tls Boolean

Whether to use TLS when connecting to Redis.

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountElasticsearch

Name string
Password string

The password to be used in the connection.

Url string

The configuration endpoint for the ElastiCache cluster to connect to.

Username string

The username to be used in the connection (the account admin level).

AllowedRoles List<string>

A list of roles that are allowed to use this connection.

CaCert string

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

CaPath string

The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.

ClientCert string

The path to the certificate for the Elasticsearch client to present for communication.

ClientKey string

The path to the key for the Elasticsearch client to use for communication.

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

Insecure bool

Whether to disable certificate verification.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

TlsServerName string

This, if set, is used to set the SNI host when connecting via TLS.

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
Password string

The password to be used in the connection.

Url string

The configuration endpoint for the ElastiCache cluster to connect to.

Username string

The username to be used in the connection (the account admin level).

AllowedRoles []string

A list of roles that are allowed to use this connection.

CaCert string

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

CaPath string

The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.

ClientCert string

The path to the certificate for the Elasticsearch client to present for communication.

ClientKey string

The path to the key for the Elasticsearch client to use for communication.

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

Insecure bool

Whether to disable certificate verification.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

TlsServerName string

This, if set, is used to set the SNI host when connecting via TLS.

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
password String

The password to be used in the connection.

url String

The configuration endpoint for the ElastiCache cluster to connect to.

username String

The username to be used in the connection (the account admin level).

allowedRoles List<String>

A list of roles that are allowed to use this connection.

caCert String

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

caPath String

The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.

clientCert String

The path to the certificate for the Elasticsearch client to present for communication.

clientKey String

The path to the key for the Elasticsearch client to use for communication.

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecure Boolean

Whether to disable certificate verification.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tlsServerName String

This, if set, is used to set the SNI host when connecting via TLS.

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
password string

The password to be used in the connection.

url string

The configuration endpoint for the ElastiCache cluster to connect to.

username string

The username to be used in the connection (the account admin level).

allowedRoles string[]

A list of roles that are allowed to use this connection.

caCert string

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

caPath string

The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.

clientCert string

The path to the certificate for the Elasticsearch client to present for communication.

clientKey string

The path to the key for the Elasticsearch client to use for communication.

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecure boolean

Whether to disable certificate verification.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

tlsServerName string

This, if set, is used to set the SNI host when connecting via TLS.

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
password str

The password to be used in the connection.

url str

The configuration endpoint for the ElastiCache cluster to connect to.

username str

The username to be used in the connection (the account admin level).

allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

ca_cert str

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

ca_path str

The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.

client_cert str

The path to the certificate for the Elasticsearch client to present for communication.

client_key str

The path to the key for the Elasticsearch client to use for communication.

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecure bool

Whether to disable certificate verification.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

tls_server_name str

This, if set, is used to set the SNI host when connecting via TLS.

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
password String

The password to be used in the connection.

url String

The configuration endpoint for the ElastiCache cluster to connect to.

username String

The username to be used in the connection (the account admin level).

allowedRoles List<String>

A list of roles that are allowed to use this connection.

caCert String

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

caPath String

The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.

clientCert String

The path to the certificate for the Elasticsearch client to present for communication.

clientKey String

The path to the key for the Elasticsearch client to use for communication.

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecure Boolean

Whether to disable certificate verification.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tlsServerName String

This, if set, is used to set the SNI host when connecting via TLS.

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountHana

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

DisableEscaping bool

Disable special character escaping in username and password.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

DisableEscaping bool

Disable special character escaping in username and password.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping Boolean

Disable special character escaping in username and password.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping boolean

Disable special character escaping in username and password.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disable_escaping bool

Disable special character escaping in username and password.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping Boolean

Disable special character escaping in username and password.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountInfluxdb

Host string

The host to connect to.

Name string
Password string

The password to be used in the connection.

Username string

The username to be used in the connection (the account admin level).

AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectTimeout int

The number of seconds to use as a connection timeout.

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

InsecureTls bool

Whether to skip verification of the server certificate when using TLS.

PemBundle string

Concatenated PEM blocks configuring the certificate chain.

PemJson string

A JSON structure configuring the certificate chain.

PluginName string

Specifies the name of the plugin to use.

Port int

The default port to connect to if no port is specified as part of the host.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Tls bool

Whether to use TLS when connecting to Redis.

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Host string

The host to connect to.

Name string
Password string

The password to be used in the connection.

Username string

The username to be used in the connection (the account admin level).

AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectTimeout int

The number of seconds to use as a connection timeout.

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

InsecureTls bool

Whether to skip verification of the server certificate when using TLS.

PemBundle string

Concatenated PEM blocks configuring the certificate chain.

PemJson string

A JSON structure configuring the certificate chain.

PluginName string

Specifies the name of the plugin to use.

Port int

The default port to connect to if no port is specified as part of the host.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Tls bool

Whether to use TLS when connecting to Redis.

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

host String

The host to connect to.

name String
password String

The password to be used in the connection.

username String

The username to be used in the connection (the account admin level).

allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectTimeout Integer

The number of seconds to use as a connection timeout.

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls Boolean

Whether to skip verification of the server certificate when using TLS.

pemBundle String

Concatenated PEM blocks configuring the certificate chain.

pemJson String

A JSON structure configuring the certificate chain.

pluginName String

Specifies the name of the plugin to use.

port Integer

The default port to connect to if no port is specified as part of the host.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tls Boolean

Whether to use TLS when connecting to Redis.

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

host string

The host to connect to.

name string
password string

The password to be used in the connection.

username string

The username to be used in the connection (the account admin level).

allowedRoles string[]

A list of roles that are allowed to use this connection.

connectTimeout number

The number of seconds to use as a connection timeout.

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls boolean

Whether to skip verification of the server certificate when using TLS.

pemBundle string

Concatenated PEM blocks configuring the certificate chain.

pemJson string

A JSON structure configuring the certificate chain.

pluginName string

Specifies the name of the plugin to use.

port number

The default port to connect to if no port is specified as part of the host.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

tls boolean

Whether to use TLS when connecting to Redis.

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

host str

The host to connect to.

name str
password str

The password to be used in the connection.

username str

The username to be used in the connection (the account admin level).

allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connect_timeout int

The number of seconds to use as a connection timeout.

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecure_tls bool

Whether to skip verification of the server certificate when using TLS.

pem_bundle str

Concatenated PEM blocks configuring the certificate chain.

pem_json str

A JSON structure configuring the certificate chain.

plugin_name str

Specifies the name of the plugin to use.

port int

The default port to connect to if no port is specified as part of the host.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

tls bool

Whether to use TLS when connecting to Redis.

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

host String

The host to connect to.

name String
password String

The password to be used in the connection.

username String

The username to be used in the connection (the account admin level).

allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectTimeout Number

The number of seconds to use as a connection timeout.

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls Boolean

Whether to skip verification of the server certificate when using TLS.

pemBundle String

Concatenated PEM blocks configuring the certificate chain.

pemJson String

A JSON structure configuring the certificate chain.

pluginName String

Specifies the name of the plugin to use.

port Number

The default port to connect to if no port is specified as part of the host.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tls Boolean

Whether to use TLS when connecting to Redis.

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountMongodb

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountMongodbatla

Name string
PrivateKey string

The Private Programmatic API Key used to connect with MongoDB Atlas API.

ProjectId string

The Project ID the Database User should be created within.

PublicKey string

The Public Programmatic API Key used to authenticate with the MongoDB Atlas API.

AllowedRoles List<string>

A list of roles that are allowed to use this connection.

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
PrivateKey string

The Private Programmatic API Key used to connect with MongoDB Atlas API.

ProjectId string

The Project ID the Database User should be created within.

PublicKey string

The Public Programmatic API Key used to authenticate with the MongoDB Atlas API.

AllowedRoles []string

A list of roles that are allowed to use this connection.

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
privateKey String

The Private Programmatic API Key used to connect with MongoDB Atlas API.

projectId String

The Project ID the Database User should be created within.

publicKey String

The Public Programmatic API Key used to authenticate with the MongoDB Atlas API.

allowedRoles List<String>

A list of roles that are allowed to use this connection.

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
privateKey string

The Private Programmatic API Key used to connect with MongoDB Atlas API.

projectId string

The Project ID the Database User should be created within.

publicKey string

The Public Programmatic API Key used to authenticate with the MongoDB Atlas API.

allowedRoles string[]

A list of roles that are allowed to use this connection.

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
private_key str

The Private Programmatic API Key used to connect with MongoDB Atlas API.

project_id str

The Project ID the Database User should be created within.

public_key str

The Public Programmatic API Key used to authenticate with the MongoDB Atlas API.

allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
privateKey String

The Private Programmatic API Key used to connect with MongoDB Atlas API.

projectId String

The Project ID the Database User should be created within.

publicKey String

The Public Programmatic API Key used to authenticate with the MongoDB Atlas API.

allowedRoles List<String>

A list of roles that are allowed to use this connection.

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountMssql

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

ContainedDb bool

For Vault v1.9+. Set to true when the target is a Contained Database, e.g. AzureSQL. See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

DisableEscaping bool

Disable special character escaping in username and password.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

ContainedDb bool

For Vault v1.9+. Set to true when the target is a Contained Database, e.g. AzureSQL. See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

DisableEscaping bool

Disable special character escaping in username and password.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

containedDb Boolean

For Vault v1.9+. Set to true when the target is a Contained Database, e.g. AzureSQL. See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping Boolean

Disable special character escaping in username and password.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

containedDb boolean

For Vault v1.9+. Set to true when the target is a Contained Database, e.g. AzureSQL. See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping boolean

Disable special character escaping in username and password.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

contained_db bool

For Vault v1.9+. Set to true when the target is a Contained Database, e.g. AzureSQL. See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disable_escaping bool

Disable special character escaping in username and password.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

containedDb Boolean

For Vault v1.9+. Set to true when the target is a Contained Database, e.g. AzureSQL. See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping Boolean

Disable special character escaping in username and password.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountMysql

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

TlsCa string

x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.

TlsCertificateKey string

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

TlsCa string

x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.

TlsCertificateKey string

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tlsCa String

x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.

tlsCertificateKey String

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

tlsCa string

x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.

tlsCertificateKey string

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

tls_ca str

x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.

tls_certificate_key str

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tlsCa String

x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.

tlsCertificateKey String

x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountMysqlAurora

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountMysqlLegacy

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountMysqlRd

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountOracle

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountPostgresql

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

DisableEscaping bool

Disable special character escaping in username and password.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

DisableEscaping bool

Disable special character escaping in username and password.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping Boolean

Disable special character escaping in username and password.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping boolean

Disable special character escaping in username and password.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disable_escaping bool

Disable special character escaping in username and password.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping Boolean

Disable special character escaping in username and password.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountRedi

Host string

The host to connect to.

Name string
Password string

The password to be used in the connection.

Username string

The username to be used in the connection (the account admin level).

AllowedRoles List<string>

A list of roles that are allowed to use this connection.

CaCert string

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

InsecureTls bool

Whether to skip verification of the server certificate when using TLS.

PluginName string

Specifies the name of the plugin to use.

Port int

The default port to connect to if no port is specified as part of the host.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Tls bool

Whether to use TLS when connecting to Redis.

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Host string

The host to connect to.

Name string
Password string

The password to be used in the connection.

Username string

The username to be used in the connection (the account admin level).

AllowedRoles []string

A list of roles that are allowed to use this connection.

CaCert string

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

InsecureTls bool

Whether to skip verification of the server certificate when using TLS.

PluginName string

Specifies the name of the plugin to use.

Port int

The default port to connect to if no port is specified as part of the host.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Tls bool

Whether to use TLS when connecting to Redis.

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

host String

The host to connect to.

name String
password String

The password to be used in the connection.

username String

The username to be used in the connection (the account admin level).

allowedRoles List<String>

A list of roles that are allowed to use this connection.

caCert String

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls Boolean

Whether to skip verification of the server certificate when using TLS.

pluginName String

Specifies the name of the plugin to use.

port Integer

The default port to connect to if no port is specified as part of the host.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tls Boolean

Whether to use TLS when connecting to Redis.

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

host string

The host to connect to.

name string
password string

The password to be used in the connection.

username string

The username to be used in the connection (the account admin level).

allowedRoles string[]

A list of roles that are allowed to use this connection.

caCert string

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls boolean

Whether to skip verification of the server certificate when using TLS.

pluginName string

Specifies the name of the plugin to use.

port number

The default port to connect to if no port is specified as part of the host.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

tls boolean

Whether to use TLS when connecting to Redis.

verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

host str

The host to connect to.

name str
password str

The password to be used in the connection.

username str

The username to be used in the connection (the account admin level).

allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

ca_cert str

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecure_tls bool

Whether to skip verification of the server certificate when using TLS.

plugin_name str

Specifies the name of the plugin to use.

port int

The default port to connect to if no port is specified as part of the host.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

tls bool

Whether to use TLS when connecting to Redis.

verify_connection bool

Whether the connection should be verified on initial configuration or not.

host String

The host to connect to.

name String
password String

The password to be used in the connection.

username String

The username to be used in the connection (the account admin level).

allowedRoles List<String>

A list of roles that are allowed to use this connection.

caCert String

The contents of a PEM-encoded CA cert file to use to verify the Redis server's identity.

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

insecureTls Boolean

Whether to skip verification of the server certificate when using TLS.

pluginName String

Specifies the name of the plugin to use.

port Number

The default port to connect to if no port is specified as part of the host.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

tls Boolean

Whether to use TLS when connecting to Redis.

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountRedisElasticach

Name string
Url string

The configuration endpoint for the ElastiCache cluster to connect to.

AllowedRoles List<string>

A list of roles that are allowed to use this connection.

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

Region string

The AWS region where the ElastiCache cluster is hosted. If omitted the plugin tries to infer the region from the environment.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
Url string

The configuration endpoint for the ElastiCache cluster to connect to.

AllowedRoles []string

A list of roles that are allowed to use this connection.

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

Region string

The AWS region where the ElastiCache cluster is hosted. If omitted the plugin tries to infer the region from the environment.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
url String

The configuration endpoint for the ElastiCache cluster to connect to.

allowedRoles List<String>

A list of roles that are allowed to use this connection.

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

region String

The AWS region where the ElastiCache cluster is hosted. If omitted the plugin tries to infer the region from the environment.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
url string

The configuration endpoint for the ElastiCache cluster to connect to.

allowedRoles string[]

A list of roles that are allowed to use this connection.

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

region string

The AWS region where the ElastiCache cluster is hosted. If omitted the plugin tries to infer the region from the environment.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
url str

The configuration endpoint for the ElastiCache cluster to connect to.

allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

region str

The AWS region where the ElastiCache cluster is hosted. If omitted the plugin tries to infer the region from the environment.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
url String

The configuration endpoint for the ElastiCache cluster to connect to.

allowedRoles List<String>

A list of roles that are allowed to use this connection.

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

region String

The AWS region where the ElastiCache cluster is hosted. If omitted the plugin tries to infer the region from the environment.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountRedshift

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

DisableEscaping bool

Disable special character escaping in username and password.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

DisableEscaping bool

Disable special character escaping in username and password.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping Boolean

Disable special character escaping in username and password.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping boolean

Disable special character escaping in username and password.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disable_escaping bool

Disable special character escaping in username and password.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

disableEscaping Boolean

Disable special character escaping in username and password.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

SecretsMountSnowflake

Name string
AllowedRoles List<string>

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data Dictionary<string, object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements List<string>

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

Name string
AllowedRoles []string

A list of roles that are allowed to use this connection.

ConnectionUrl string

A URL containing connection information.
See Vault docs

Data map[string]interface{}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

MaxConnectionLifetime int

The maximum number of seconds to keep a connection alive for.

MaxIdleConnections int

The maximum number of idle connections to maintain.

MaxOpenConnections int

The maximum number of open connections to use.

Password string

The password to be used in the connection.

PluginName string

Specifies the name of the plugin to use.

RootRotationStatements []string

A list of database statements to be executed to rotate the root user's credentials.

Username string

The username to be used in the connection (the account admin level).

UsernameTemplate string
  • Template describing how dynamic usernames are generated.
VerifyConnection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<String,Object>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Integer

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Integer

The maximum number of idle connections to maintain.

maxOpenConnections Integer

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

name string
allowedRoles string[]

A list of roles that are allowed to use this connection.

connectionUrl string

A URL containing connection information.
See Vault docs

data {[key: string]: any}

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections number

The maximum number of idle connections to maintain.

maxOpenConnections number

The maximum number of open connections to use.

password string

The password to be used in the connection.

pluginName string

Specifies the name of the plugin to use.

rootRotationStatements string[]

A list of database statements to be executed to rotate the root user's credentials.

username string

The username to be used in the connection (the account admin level).

usernameTemplate string
  • Template describing how dynamic usernames are generated.
verifyConnection boolean

Whether the connection should be verified on initial configuration or not.

name str
allowed_roles Sequence[str]

A list of roles that are allowed to use this connection.

connection_url str

A URL containing connection information.
See Vault docs

data Mapping[str, Any]

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

max_connection_lifetime int

The maximum number of seconds to keep a connection alive for.

max_idle_connections int

The maximum number of idle connections to maintain.

max_open_connections int

The maximum number of open connections to use.

password str

The password to be used in the connection.

plugin_name str

Specifies the name of the plugin to use.

root_rotation_statements Sequence[str]

A list of database statements to be executed to rotate the root user's credentials.

username str

The username to be used in the connection (the account admin level).

username_template str
  • Template describing how dynamic usernames are generated.
verify_connection bool

Whether the connection should be verified on initial configuration or not.

name String
allowedRoles List<String>

A list of roles that are allowed to use this connection.

connectionUrl String

A URL containing connection information.
See Vault docs

data Map<Any>

A map of sensitive data to pass to the endpoint. Useful for templated connection strings.

maxConnectionLifetime Number

The maximum number of seconds to keep a connection alive for.

maxIdleConnections Number

The maximum number of idle connections to maintain.

maxOpenConnections Number

The maximum number of open connections to use.

password String

The password to be used in the connection.

pluginName String

Specifies the name of the plugin to use.

rootRotationStatements List<String>

A list of database statements to be executed to rotate the root user's credentials.

username String

The username to be used in the connection (the account admin level).

usernameTemplate String
  • Template describing how dynamic usernames are generated.
verifyConnection Boolean

Whether the connection should be verified on initial configuration or not.

Package Details

Repository
Vault pulumi/pulumi-vault
License
Apache-2.0
Notes

This Pulumi package is based on the vault Terraform Provider.