Package com.pulumi.aws.secretsmanager

Class SecretRotationArgs

  • public final class SecretRotationArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • externalSecretRotationMetadatas

        public java.util.Optional<com.pulumi.core.Output<java.util.List<SecretRotationExternalSecretRotationMetadataArgs>>> externalSecretRotationMetadatas()
        Returns:
        Configuration block for metadata required by the external secret partner. Required for managed external secrets. See details below.

      • externalSecretRotationRoleArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> externalSecretRotationRoleArn()
        Returns:
        ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner. Required for managed external secrets.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • rotateImmediately

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> rotateImmediately()
        Returns:
        Whether to rotate the secret immediately or wait until the next scheduled rotation window. The rotation schedule is defined in `rotationRules`. For secrets that use a Lambda rotation function to rotate, if you don't immediately rotate the secret, Secrets Manager tests the rotation configuration by running the testSecret step (https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html) of the Lambda rotation function. The test creates an AWSPENDING version of the secret and then removes it. Defaults to `true`.

      • rotationEnabled

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> rotationEnabled()
        Returns:
        Whether automatic rotation is enabled for the secret. Set to `false` to disable rotation on a secret whose rotation is otherwise managed by AWS (for example, an RDS master user password secret). When `false`, `rotationRules` must be omitted. Defaults to enabled when `rotationRules` is configured. Destroying this resource does not re-enable the automatic rotation that AWS configured.

      • rotationLambdaArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> rotationLambdaArn()
        Returns:
        ARN of the Lambda function that can rotate the secret. Must be supplied if the secret is not managed by AWS.

      • rotationRules

        public java.util.Optional<com.pulumi.core.Output<SecretRotationRotationRulesArgs>> rotationRules()
        Returns:
        Structure that defines the rotation configuration for this secret. Required unless `rotationEnabled` is `false`. Defined below.

      • secretId

        public com.pulumi.core.Output<java.lang.String> secretId()
        Returns:
        Secret to which you want to add a new version. You can specify either the ARN or the friendly name of the secret. The secret must already exist.