Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. HashiCorp Vault Provider
  4. API Docs
  5. transform
  6. getRewrap
Viewing docs for HashiCorp Vault v7.14.1
published on Tuesday, Oct 27, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-vault

vault.transform.getRewrap

vault logo vault logo
Viewing docs for HashiCorp Vault v7.14.1
published on Tuesday, Oct 27, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-vault

    This data source supports the “/transform/rewrap/{role_name}” Vault endpoint.

    It rewraps a value that was encoded with one FPE transformation by decoding it with the source transformation and re-encoding it with a destination transformation. Both transformations must be FPE transformations.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";

const transform = new vault.Mount("transform", {
    path: "transform",
    type: "transform",
});
const ccn_fpe_src = new vault.transform.Transformation("ccn-fpe-src", {
    path: transform.path,
    name: "ccn-fpe-src",
    type: "fpe",
    template: "builtin/creditcardnumber",
    tweakSource: "internal",
    allowedRoles: ["payments"],
});
const ccn_fpe_dst = new vault.transform.Transformation("ccn-fpe-dst", {
    path: transform.path,
    name: "ccn-fpe-dst",
    type: "fpe",
    template: "builtin/creditcardnumber",
    tweakSource: "internal",
    allowedRoles: ["payments"],
});
const payments = new vault.transform.Role("payments", {
    path: ccn_fpe_src.path,
    name: "payments",
    transformations: [
        "ccn-fpe-src",
        "ccn-fpe-dst",
    ],
});
const encoded = vault.transform.getEncodeOutput({
    path: payments.path,
    roleName: "payments",
    transformation: ccn_fpe_src.name,
    value: "1111-2222-3333-4444",
});
const test = vault.transform.getRewrapOutput({
    path: payments.path,
    roleName: "payments",
    transformation: ccn_fpe_dst.name,
    decodeTransformation: ccn_fpe_src.name,
    value: encoded.encodedValue,
});

    import pulumi
import pulumi_vault as vault

transform = vault.Mount("transform",
    path="transform",
    type="transform")
ccn_fpe_src = vault.transform.Transformation("ccn-fpe-src",
    path=transform.path,
    name="ccn-fpe-src",
    type="fpe",
    template="builtin/creditcardnumber",
    tweak_source="internal",
    allowed_roles=["payments"])
ccn_fpe_dst = vault.transform.Transformation("ccn-fpe-dst",
    path=transform.path,
    name="ccn-fpe-dst",
    type="fpe",
    template="builtin/creditcardnumber",
    tweak_source="internal",
    allowed_roles=["payments"])
payments = vault.transform.Role("payments",
    path=ccn_fpe_src.path,
    name="payments",
    transformations=[
        "ccn-fpe-src",
        "ccn-fpe-dst",
    ])
encoded = vault.transform.get_encode_output(path=payments.path,
    role_name="payments",
    transformation=ccn_fpe_src.name,
    value="1111-2222-3333-4444")
test = vault.transform.get_rewrap_output(path=payments.path,
    role_name="payments",
    transformation=ccn_fpe_dst.name,
    decode_transformation=ccn_fpe_src.name,
    value=encoded.encoded_value)

    package main

import (
	"github.com/pulumi/pulumi-vault/sdk/v7/go/vault"
	"github.com/pulumi/pulumi-vault/sdk/v7/go/vault/transform"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		transform2, err := vault.NewMount(ctx, "transform", &vault.MountArgs{
			Path: pulumi.String("transform"),
			Type: pulumi.String("transform"),
		})
		if err != nil {
			return err
		}
		ccn_fpe_src, err := transform.NewTransformation(ctx, "ccn-fpe-src", &transform.TransformationArgs{
			Path:        transform2.Path,
			Name:        pulumi.String("ccn-fpe-src"),
			Type:        pulumi.String("fpe"),
			Template:    pulumi.String("builtin/creditcardnumber"),
			TweakSource: pulumi.String("internal"),
			AllowedRoles: pulumi.StringArray{
				pulumi.String("payments"),
			},
		})
		if err != nil {
			return err
		}
		ccn_fpe_dst, err := transform.NewTransformation(ctx, "ccn-fpe-dst", &transform.TransformationArgs{
			Path:        transform2.Path,
			Name:        pulumi.String("ccn-fpe-dst"),
			Type:        pulumi.String("fpe"),
			Template:    pulumi.String("builtin/creditcardnumber"),
			TweakSource: pulumi.String("internal"),
			AllowedRoles: pulumi.StringArray{
				pulumi.String("payments"),
			},
		})
		if err != nil {
			return err
		}
		payments, err := transform.NewRole(ctx, "payments", &transform.RoleArgs{
			Path: ccn_fpe_src.Path,
			Name: pulumi.String("payments"),
			Transformations: pulumi.StringArray{
				pulumi.String("ccn-fpe-src"),
				pulumi.String("ccn-fpe-dst"),
			},
		})
		if err != nil {
			return err
		}
		encoded := transform.GetEncodeOutput(ctx, transform.GetEncodeOutputArgs{
			Path:           payments.Path,
			RoleName:       pulumi.String("payments"),
			Transformation: ccn_fpe_src.Name,
			Value:          pulumi.String("1111-2222-3333-4444"),
		}, nil)
		_ = transform.GetRewrapOutput(ctx, transform.GetRewrapOutputArgs{
			Path:                 payments.Path,
			RoleName:             pulumi.String("payments"),
			Transformation:       ccn_fpe_dst.Name,
			DecodeTransformation: ccn_fpe_src.Name,
			Value:                encoded.EncodedValue(),
		}, nil)
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;

return await Deployment.RunAsync(() => 
{
    var transform = new Vault.Mount("transform", new()
    {
        Path = "transform",
        Type = "transform",
    });

    var ccn_fpe_src = new Vault.Transform.Transformation("ccn-fpe-src", new()
    {
        Path = transform.Path,
        Name = "ccn-fpe-src",
        Type = "fpe",
        Template = "builtin/creditcardnumber",
        TweakSource = "internal",
        AllowedRoles = new[]
        {
            "payments",
        },
    });

    var ccn_fpe_dst = new Vault.Transform.Transformation("ccn-fpe-dst", new()
    {
        Path = transform.Path,
        Name = "ccn-fpe-dst",
        Type = "fpe",
        Template = "builtin/creditcardnumber",
        TweakSource = "internal",
        AllowedRoles = new[]
        {
            "payments",
        },
    });

    var payments = new Vault.Transform.Role("payments", new()
    {
        Path = ccn_fpe_src.Path,
        Name = "payments",
        Transformations = new[]
        {
            "ccn-fpe-src",
            "ccn-fpe-dst",
        },
    });

    var encoded = Vault.Transform.GetEncode.Invoke(new()
    {
        Path = payments.Path,
        RoleName = "payments",
        Transformation = ccn_fpe_src.Name,
        Value = "1111-2222-3333-4444",
    });

    var test = Vault.Transform.GetRewrap.Invoke(new()
    {
        Path = payments.Path,
        RoleName = "payments",
        Transformation = ccn_fpe_dst.Name,
        DecodeTransformation = ccn_fpe_src.Name,
        Value = encoded.Apply(getEncodeResult => getEncodeResult.EncodedValue),
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.Mount;
import com.pulumi.vault.MountArgs;
import com.pulumi.vault.transform.Transformation;
import com.pulumi.vault.transform.TransformationArgs;
import com.pulumi.vault.transform.Role;
import com.pulumi.vault.transform.RoleArgs;
import com.pulumi.vault.transform.TransformFunctions;
import com.pulumi.vault.transform.inputs.GetEncodeArgs;
import com.pulumi.vault.transform.inputs.GetRewrapArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var transform = new Mount("transform", MountArgs.builder()
            .path("transform")
            .type("transform")
            .build());

        var ccn_fpe_src = new Transformation("ccn-fpe-src", TransformationArgs.builder()
            .path(transform.path())
            .name("ccn-fpe-src")
            .type("fpe")
            .template("builtin/creditcardnumber")
            .tweakSource("internal")
            .allowedRoles("payments")
            .build());

        var ccn_fpe_dst = new Transformation("ccn-fpe-dst", TransformationArgs.builder()
            .path(transform.path())
            .name("ccn-fpe-dst")
            .type("fpe")
            .template("builtin/creditcardnumber")
            .tweakSource("internal")
            .allowedRoles("payments")
            .build());

        var payments = new Role("payments", RoleArgs.builder()
            .path(ccn_fpe_src.path())
            .name("payments")
            .transformations(            
                "ccn-fpe-src",
                "ccn-fpe-dst")
            .build());

        final var encoded = TransformFunctions.getEncode(GetEncodeArgs.builder()
            .path(payments.path())
            .roleName("payments")
            .transformation(ccn_fpe_src.name())
            .value("1111-2222-3333-4444")
            .build());

        final var test = TransformFunctions.getRewrap(GetRewrapArgs.builder()
            .path(payments.path())
            .roleName("payments")
            .transformation(ccn_fpe_dst.name())
            .decodeTransformation(ccn_fpe_src.name())
            .value(encoded.applyValue(_encoded -> _encoded.encodedValue()))
            .build());

    }
}

    resources:
  transform:
    type: vault:Mount
    properties:
      path: transform
      type: transform
  ccn-fpe-src:
    type: vault:transform:Transformation
    properties:
      path: ${transform.path}
      name: ccn-fpe-src
      type: fpe
      template: builtin/creditcardnumber
      tweakSource: internal
      allowedRoles:
        - payments
  ccn-fpe-dst:
    type: vault:transform:Transformation
    properties:
      path: ${transform.path}
      name: ccn-fpe-dst
      type: fpe
      template: builtin/creditcardnumber
      tweakSource: internal
      allowedRoles:
        - payments
  payments:
    type: vault:transform:Role
    properties:
      path: ${["ccn-fpe-src"].path}
      name: payments
      transformations:
        - ccn-fpe-src
        - ccn-fpe-dst
variables:
  encoded:
    fn::invoke:
      function: vault:transform:getEncode
      arguments:
        path: ${payments.path}
        roleName: payments
        transformation: ${["ccn-fpe-src"].name}
        value: 1111-2222-3333-4444
  test:
    fn::invoke:
      function: vault:transform:getRewrap
      arguments:
        path: ${payments.path}
        roleName: payments
        transformation: ${["ccn-fpe-dst"].name}
        decodeTransformation: ${["ccn-fpe-src"].name}
        value: ${encoded.encodedValue}

    terraform {
  required_providers {
    vault = {
      source = "pulumi/vault"
    }
  }
}

data "vault_transform_encode" "encoded" {
  path           = vault_transform_role.payments.path
  role_name      = "payments"
  transformation = vault_transform_transformation.ccn-fpe-src.name
  value          = "1111-2222-3333-4444"
}
data "vault_transform_rewrap" "test" {
  path                  = vault_transform_role.payments.path
  role_name             = "payments"
  transformation        = vault_transform_transformation.ccn-fpe-dst.name
  decode_transformation = vault_transform_transformation.ccn-fpe-src.name
  value                 = data.vault_transform_encode.encoded.encoded_value
}

resource "vault_mount" "transform" {
  lifecycle {
    create_before_destroy = true
  }
  path = "transform"
  type = "transform"
}
resource "vault_transform_transformation" "ccn-fpe-src" {
  lifecycle {
    create_before_destroy = true
  }
  path          = vault_mount.transform.path
  name          = "ccn-fpe-src"
  type          = "fpe"
  template      = "builtin/creditcardnumber"
  tweak_source  = "internal"
  allowed_roles = ["payments"]
}
resource "vault_transform_transformation" "ccn-fpe-dst" {
  lifecycle {
    create_before_destroy = true
  }
  path          = vault_mount.transform.path
  name          = "ccn-fpe-dst"
  type          = "fpe"
  template      = "builtin/creditcardnumber"
  tweak_source  = "internal"
  allowed_roles = ["payments"]
}
resource "vault_transform_role" "payments" {
  lifecycle {
    create_before_destroy = true
  }
  path            = vault_transform_transformation.ccn-fpe-src.path
  name            = "payments"
  transformations = ["ccn-fpe-src", "ccn-fpe-dst"]
}

    Using getRewrap

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getRewrap(args: GetRewrapArgs, opts?: InvokeOptions): Promise<GetRewrapResult>
function getRewrapOutput(args: GetRewrapOutputArgs, opts?: InvokeOutputOptions): Output<GetRewrapResult>
    def get_rewrap(batch_inputs: Optional[Sequence[Mapping[str, str]]] = None,
               decode_transformation: Optional[str] = None,
               decode_tweak: Optional[str] = None,
               encoded_value: Optional[str] = None,
               namespace: Optional[str] = None,
               path: Optional[str] = None,
               role_name: Optional[str] = None,
               transformation: Optional[str] = None,
               tweak: Optional[str] = None,
               value: Optional[str] = None,
               opts: Optional[InvokeOptions] = None) -> GetRewrapResult
def get_rewrap_output(batch_inputs: pulumi.Input[Optional[Sequence[pulumi.Input[Mapping[str, pulumi.Input[str]]]]]] = None,
               decode_transformation: pulumi.Input[Optional[str]] = None,
               decode_tweak: pulumi.Input[Optional[str]] = None,
               encoded_value: pulumi.Input[Optional[str]] = None,
               namespace: pulumi.Input[Optional[str]] = None,
               path: pulumi.Input[Optional[str]] = None,
               role_name: pulumi.Input[Optional[str]] = None,
               transformation: pulumi.Input[Optional[str]] = None,
               tweak: pulumi.Input[Optional[str]] = None,
               value: pulumi.Input[Optional[str]] = None,
               opts: Optional[InvokeOutputOptions] = None) -> Output[GetRewrapResult]
    func GetRewrap(ctx *Context, args *GetRewrapArgs, opts ...InvokeOption) (*GetRewrapResult, error)
func GetRewrapOutput(ctx *Context, args *GetRewrapOutputArgs, opts ...InvokeOption) GetRewrapResultOutput

    > Note: This function is named GetRewrap in the Go SDK.

    public static class GetRewrap 
{
    public static Task<GetRewrapResult> InvokeAsync(GetRewrapArgs args, InvokeOptions? opts = null)
    public static Output<GetRewrapResult> Invoke(GetRewrapInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetRewrapResult> Invoke(GetRewrapInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetRewrapResult> getRewrap(GetRewrapArgs args, InvokeOptions options)
public static Output<GetRewrapResult> getRewrap(GetRewrapArgs args, InvokeOptions options)
public static Output<GetRewrapResult> getRewrap(GetRewrapArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: vault:transform/getRewrap:getRewrap
  arguments:
    # arguments dictionary
    data "vault_transform_get_rewrap" "name" {
    # arguments
}

    The following arguments are supported:

    Path string
    Path to where the back-end is mounted within Vault.
    RoleName string
    The name of the role.
    BatchInputs List<ImmutableDictionary<string, string>>
    Specifies a list of items to be rewrapped in a single batch. If this parameter is set, the top-level parameters value, transformation, decodeTransformation, tweak, and decodeTweak will be ignored. Each batch item within the list can specify these parameters instead.
    DecodeTransformation string
    The source FPE transformation used to decode the value before re-encoding it.
    DecodeTweak string
    The tweak value to use for decoding the source value. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    EncodedValue string
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    Namespace string
    The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    Transformation string
    The destination FPE transformation to use for re-encoding the value. If no value is provided and the role contains a single transformation, this value will be inferred from the role.
    Tweak string
    The tweak value to use for re-encoding. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    Value string
    The value to rewrap. Ignored when batchInput is set.
    Path string
    Path to where the back-end is mounted within Vault.
    RoleName string
    The name of the role.
    BatchInputs []map[string]string
    Specifies a list of items to be rewrapped in a single batch. If this parameter is set, the top-level parameters value, transformation, decodeTransformation, tweak, and decodeTweak will be ignored. Each batch item within the list can specify these parameters instead.
    DecodeTransformation string
    The source FPE transformation used to decode the value before re-encoding it.
    DecodeTweak string
    The tweak value to use for decoding the source value. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    EncodedValue string
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    Namespace string
    The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    Transformation string
    The destination FPE transformation to use for re-encoding the value. If no value is provided and the role contains a single transformation, this value will be inferred from the role.
    Tweak string
    The tweak value to use for re-encoding. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    Value string
    The value to rewrap. Ignored when batchInput is set.
    path string
    Path to where the back-end is mounted within Vault.
    role_name string
    The name of the role.
    batch_inputs list(map(string))
    Specifies a list of items to be rewrapped in a single batch. If this parameter is set, the top-level parameters value, transformation, decodeTransformation, tweak, and decodeTweak will be ignored. Each batch item within the list can specify these parameters instead.
    decode_transformation string
    The source FPE transformation used to decode the value before re-encoding it.
    decode_tweak string
    The tweak value to use for decoding the source value. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    encoded_value string
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    namespace string
    The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    transformation string
    The destination FPE transformation to use for re-encoding the value. If no value is provided and the role contains a single transformation, this value will be inferred from the role.
    tweak string
    The tweak value to use for re-encoding. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    value string
    The value to rewrap. Ignored when batchInput is set.
    path String
    Path to where the back-end is mounted within Vault.
    roleName String
    The name of the role.
    batchInputs List<Map<String,String>>
    Specifies a list of items to be rewrapped in a single batch. If this parameter is set, the top-level parameters value, transformation, decodeTransformation, tweak, and decodeTweak will be ignored. Each batch item within the list can specify these parameters instead.
    decodeTransformation String
    The source FPE transformation used to decode the value before re-encoding it.
    decodeTweak String
    The tweak value to use for decoding the source value. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    encodedValue String
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    namespace String
    The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    transformation String
    The destination FPE transformation to use for re-encoding the value. If no value is provided and the role contains a single transformation, this value will be inferred from the role.
    tweak String
    The tweak value to use for re-encoding. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    value String
    The value to rewrap. Ignored when batchInput is set.
    path string
    Path to where the back-end is mounted within Vault.
    roleName string
    The name of the role.
    batchInputs {[key: string]: string}[]
    Specifies a list of items to be rewrapped in a single batch. If this parameter is set, the top-level parameters value, transformation, decodeTransformation, tweak, and decodeTweak will be ignored. Each batch item within the list can specify these parameters instead.
    decodeTransformation string
    The source FPE transformation used to decode the value before re-encoding it.
    decodeTweak string
    The tweak value to use for decoding the source value. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    encodedValue string
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    namespace string
    The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    transformation string
    The destination FPE transformation to use for re-encoding the value. If no value is provided and the role contains a single transformation, this value will be inferred from the role.
    tweak string
    The tweak value to use for re-encoding. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    value string
    The value to rewrap. Ignored when batchInput is set.
    path str
    Path to where the back-end is mounted within Vault.
    role_name str
    The name of the role.
    batch_inputs Sequence[Mapping[str, str]]
    Specifies a list of items to be rewrapped in a single batch. If this parameter is set, the top-level parameters value, transformation, decodeTransformation, tweak, and decodeTweak will be ignored. Each batch item within the list can specify these parameters instead.
    decode_transformation str
    The source FPE transformation used to decode the value before re-encoding it.
    decode_tweak str
    The tweak value to use for decoding the source value. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    encoded_value str
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    namespace str
    The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    transformation str
    The destination FPE transformation to use for re-encoding the value. If no value is provided and the role contains a single transformation, this value will be inferred from the role.
    tweak str
    The tweak value to use for re-encoding. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    value str
    The value to rewrap. Ignored when batchInput is set.
    path String
    Path to where the back-end is mounted within Vault.
    roleName String
    The name of the role.
    batchInputs List<Map<String>>
    Specifies a list of items to be rewrapped in a single batch. If this parameter is set, the top-level parameters value, transformation, decodeTransformation, tweak, and decodeTweak will be ignored. Each batch item within the list can specify these parameters instead.
    decodeTransformation String
    The source FPE transformation used to decode the value before re-encoding it.
    decodeTweak String
    The tweak value to use for decoding the source value. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    encodedValue String
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    namespace String
    The namespace of the target resource. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.
    transformation String
    The destination FPE transformation to use for re-encoding the value. If no value is provided and the role contains a single transformation, this value will be inferred from the role.
    tweak String
    The tweak value to use for re-encoding. Only applicable for FPE transformations with a supplied tweak source. Ignored when batchInput is set.
    value String
    The value to rewrap. Ignored when batchInput is set.

    getRewrap Result

    The following output properties are available:

    BatchResults List<ImmutableDictionary<string, string>>
    The results of rewrapping a batch of items. Only populated when batchInput is set. Each element is a map containing encodedValue and, if applicable, tweak.
    EncodedValue string
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    Id string
    The provider-assigned unique ID for this managed resource.
    Path string
    RoleName string
    Tweak string
    The tweak value used or generated during re-encoding. Only populated when the destination transformation uses a generated or internal tweak source.
    BatchInputs List<ImmutableDictionary<string, string>>
    DecodeTransformation string
    DecodeTweak string
    Namespace string
    Transformation string
    Value string
    BatchResults []map[string]string
    The results of rewrapping a batch of items. Only populated when batchInput is set. Each element is a map containing encodedValue and, if applicable, tweak.
    EncodedValue string
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    Id string
    The provider-assigned unique ID for this managed resource.
    Path string
    RoleName string
    Tweak string
    The tweak value used or generated during re-encoding. Only populated when the destination transformation uses a generated or internal tweak source.
    BatchInputs []map[string]string
    DecodeTransformation string
    DecodeTweak string
    Namespace string
    Transformation string
    Value string
    batch_results list(map(string))
    The results of rewrapping a batch of items. Only populated when batchInput is set. Each element is a map containing encodedValue and, if applicable, tweak.
    encoded_value string
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    id string
    The provider-assigned unique ID for this managed resource.
    path string
    role_name string
    tweak string
    The tweak value used or generated during re-encoding. Only populated when the destination transformation uses a generated or internal tweak source.
    batch_inputs list(map(string))
    decode_transformation string
    decode_tweak string
    namespace string
    transformation string
    value string
    batchResults List<Map<String,String>>
    The results of rewrapping a batch of items. Only populated when batchInput is set. Each element is a map containing encodedValue and, if applicable, tweak.
    encodedValue String
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    id String
    The provider-assigned unique ID for this managed resource.
    path String
    roleName String
    tweak String
    The tweak value used or generated during re-encoding. Only populated when the destination transformation uses a generated or internal tweak source.
    batchInputs List<Map<String,String>>
    decodeTransformation String
    decodeTweak String
    namespace String
    transformation String
    value String
    batchResults {[key: string]: string}[]
    The results of rewrapping a batch of items. Only populated when batchInput is set. Each element is a map containing encodedValue and, if applicable, tweak.
    encodedValue string
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    id string
    The provider-assigned unique ID for this managed resource.
    path string
    roleName string
    tweak string
    The tweak value used or generated during re-encoding. Only populated when the destination transformation uses a generated or internal tweak source.
    batchInputs {[key: string]: string}[]
    decodeTransformation string
    decodeTweak string
    namespace string
    transformation string
    value string
    batch_results Sequence[Mapping[str, str]]
    The results of rewrapping a batch of items. Only populated when batchInput is set. Each element is a map containing encodedValue and, if applicable, tweak.
    encoded_value str
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    id str
    The provider-assigned unique ID for this managed resource.
    path str
    role_name str
    tweak str
    The tweak value used or generated during re-encoding. Only populated when the destination transformation uses a generated or internal tweak source.
    batch_inputs Sequence[Mapping[str, str]]
    decode_transformation str
    decode_tweak str
    namespace str
    transformation str
    value str
    batchResults List<Map<String>>
    The results of rewrapping a batch of items. Only populated when batchInput is set. Each element is a map containing encodedValue and, if applicable, tweak.
    encodedValue String
    The result of rewrapping a value. Only populated for single-value requests (when batchInput is not set).
    id String
    The provider-assigned unique ID for this managed resource.
    path String
    roleName String
    tweak String
    The tweak value used or generated during re-encoding. Only populated when the destination transformation uses a generated or internal tweak source.
    batchInputs List<Map<String>>
    decodeTransformation String
    decodeTweak String
    namespace String
    transformation String
    value String

    Package Details

    Repository
    Vault pulumi/pulumi-vault
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the vault Terraform Provider.
    vault logo vault logo
    Viewing docs for HashiCorp Vault v7.14.1
    published on Tuesday, Oct 27, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-vault

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial