Package com.pulumi.aws.secretsmanager

Class SecretRotationArgs.Builder

  • Enclosing class:
    SecretRotationArgs
    public static final class SecretRotationArgs.Builder
extends java.lang.Object

    • Method Detail

      • externalSecretRotationMetadatas

        public SecretRotationArgs.Builder externalSecretRotationMetadatas​(@Nullable
                                                                  com.pulumi.core.Output<java.util.List<SecretRotationExternalSecretRotationMetadataArgs>> externalSecretRotationMetadatas)
        Parameters:
        externalSecretRotationMetadatas - Configuration block for metadata required by the external secret partner. Required for managed external secrets. See details below.
        Returns:
        builder

      • externalSecretRotationMetadatas

        public SecretRotationArgs.Builder externalSecretRotationMetadatas​(java.util.List<SecretRotationExternalSecretRotationMetadataArgs> externalSecretRotationMetadatas)
        Parameters:
        externalSecretRotationMetadatas - Configuration block for metadata required by the external secret partner. Required for managed external secrets. See details below.
        Returns:
        builder

      • externalSecretRotationMetadatas

        public SecretRotationArgs.Builder externalSecretRotationMetadatas​(SecretRotationExternalSecretRotationMetadataArgs... externalSecretRotationMetadatas)
        Parameters:
        externalSecretRotationMetadatas - Configuration block for metadata required by the external secret partner. Required for managed external secrets. See details below.
        Returns:
        builder

      • externalSecretRotationRoleArn

        public SecretRotationArgs.Builder externalSecretRotationRoleArn​(@Nullable
                                                                com.pulumi.core.Output<java.lang.String> externalSecretRotationRoleArn)
        Parameters:
        externalSecretRotationRoleArn - ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner. Required for managed external secrets.
        Returns:
        builder

      • externalSecretRotationRoleArn

        public SecretRotationArgs.Builder externalSecretRotationRoleArn​(java.lang.String externalSecretRotationRoleArn)
        Parameters:
        externalSecretRotationRoleArn - ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner. Required for managed external secrets.
        Returns:
        builder

      • region

        public SecretRotationArgs.Builder region​(@Nullable
                                         com.pulumi.core.Output<java.lang.String> region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • region

        public SecretRotationArgs.Builder region​(java.lang.String region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • rotateImmediately

        public SecretRotationArgs.Builder rotateImmediately​(@Nullable
                                                    com.pulumi.core.Output<java.lang.Boolean> rotateImmediately)
        Parameters:
        rotateImmediately - Whether to rotate the secret immediately or wait until the next scheduled rotation window. The rotation schedule is defined in `rotationRules`. For secrets that use a Lambda rotation function to rotate, if you don't immediately rotate the secret, Secrets Manager tests the rotation configuration by running the testSecret step (https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html) of the Lambda rotation function. The test creates an AWSPENDING version of the secret and then removes it. Defaults to `true`.
        Returns:
        builder

      • rotateImmediately

        public SecretRotationArgs.Builder rotateImmediately​(java.lang.Boolean rotateImmediately)
        Parameters:
        rotateImmediately - Whether to rotate the secret immediately or wait until the next scheduled rotation window. The rotation schedule is defined in `rotationRules`. For secrets that use a Lambda rotation function to rotate, if you don't immediately rotate the secret, Secrets Manager tests the rotation configuration by running the testSecret step (https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html) of the Lambda rotation function. The test creates an AWSPENDING version of the secret and then removes it. Defaults to `true`.
        Returns:
        builder

      • rotationEnabled

        public SecretRotationArgs.Builder rotationEnabled​(@Nullable
                                                  com.pulumi.core.Output<java.lang.Boolean> rotationEnabled)
        Parameters:
        rotationEnabled - Whether automatic rotation is enabled for the secret. Set to `false` to disable rotation on a secret whose rotation is otherwise managed by AWS (for example, an RDS master user password secret). When `false`, `rotationRules` must be omitted. Defaults to enabled when `rotationRules` is configured. Destroying this resource does not re-enable the automatic rotation that AWS configured.
        Returns:
        builder

      • rotationEnabled

        public SecretRotationArgs.Builder rotationEnabled​(java.lang.Boolean rotationEnabled)
        Parameters:
        rotationEnabled - Whether automatic rotation is enabled for the secret. Set to `false` to disable rotation on a secret whose rotation is otherwise managed by AWS (for example, an RDS master user password secret). When `false`, `rotationRules` must be omitted. Defaults to enabled when `rotationRules` is configured. Destroying this resource does not re-enable the automatic rotation that AWS configured.
        Returns:
        builder

      • rotationLambdaArn

        public SecretRotationArgs.Builder rotationLambdaArn​(@Nullable
                                                    com.pulumi.core.Output<java.lang.String> rotationLambdaArn)
        Parameters:
        rotationLambdaArn - ARN of the Lambda function that can rotate the secret. Must be supplied if the secret is not managed by AWS.
        Returns:
        builder

      • rotationLambdaArn

        public SecretRotationArgs.Builder rotationLambdaArn​(java.lang.String rotationLambdaArn)
        Parameters:
        rotationLambdaArn - ARN of the Lambda function that can rotate the secret. Must be supplied if the secret is not managed by AWS.
        Returns:
        builder

      • rotationRules

        public SecretRotationArgs.Builder rotationRules​(@Nullable
                                                com.pulumi.core.Output<SecretRotationRotationRulesArgs> rotationRules)
        Parameters:
        rotationRules - Structure that defines the rotation configuration for this secret. Required unless `rotationEnabled` is `false`. Defined below.
        Returns:
        builder

      • rotationRules

        public SecretRotationArgs.Builder rotationRules​(SecretRotationRotationRulesArgs rotationRules)
        Parameters:
        rotationRules - Structure that defines the rotation configuration for this secret. Required unless `rotationEnabled` is `false`. Defined below.
        Returns:
        builder

      • secretId

        public SecretRotationArgs.Builder secretId​(com.pulumi.core.Output<java.lang.String> secretId)
        Parameters:
        secretId - Secret to which you want to add a new version. You can specify either the ARN or the friendly name of the secret. The secret must already exist.
        Returns:
        builder

      • secretId

        public SecretRotationArgs.Builder secretId​(java.lang.String secretId)
        Parameters:
        secretId - Secret to which you want to add a new version. You can specify either the ARN or the friendly name of the secret. The secret must already exist.
        Returns:
        builder