| providerType |
String |
|
[optional] |
| apiId |
String |
API ID to rotate (relevant only for rotator-type=api-key) |
[optional] |
| apiKey |
String |
API key to rotate (relevant only for rotator-type=api-key) |
[optional] |
| applicationId |
String |
ApplicationId (used in azure) |
[optional] |
| authenticationCredentials |
String |
The credentials to connect with use-user-creds/use-target-creds |
[optional] [default to 'use-user-creds'] |
| autoRotate |
String |
Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false] |
[optional] |
| awsRegion |
String |
Aws Region (relevant only for aws) |
[optional] [default to 'us-east-2'] |
| customPayload |
String |
Secret payload to be sent with rotation request (relevant only for rotator-type=custom) |
[optional] |
| deleteProtection |
String |
Protection from accidental deletion of this object [true/false] |
[optional] |
| description |
String |
Description of the object |
[optional] |
| gcpKey |
String |
Base64-encoded service account private key text |
[optional] |
| gcpServiceAccountEmail |
String |
The email of the gcp service account to rotate |
[optional] |
| gcpServiceAccountKeyId |
String |
The key id of the gcp service account to rotate |
[optional] |
| graceRotation |
String |
Create a new access key without deleting the old key from AWS for backup (relevant only for AWS) [true/false] |
[optional] |
| hostProvider |
String |
Host provider type [explicit/target], Default Host provider is explicit, Relevant only for SRA items. |
[optional] |
| json |
Boolean |
Set output format to JSON |
[optional] [default to false] |
| key |
String |
The name of a key that used to encrypt the secret value (if empty, the account default protectionKey key will be used) |
[optional] |
| lockDuringSraSession |
String |
Lock this secret for read/update while an SRA session is active |
[optional] |
| metadata |
String |
Deprecated - use description |
[optional] |
| name |
String |
Secret name |
|
| passwordLength |
String |
The length of the password to be generated |
[optional] |
| rotateAfterDisconnect |
String |
StringOrBool accepts JSON strings, booleans, and numbers for backward compatibility with older SDK versions that send boolean values for rotate-after-disconnect. |
[optional] |
| rotatedPassword |
String |
rotated-username password (relevant only for rotator-type=password) |
[optional] |
| rotatedUsername |
String |
username to be rotated, if selected use-self-creds at rotator-creds-type, this username will try to rotate it's own password, if use-target-creds is selected, target credentials will be use to rotate the rotated-password (relevant only for rotator-type=password) |
[optional] |
| rotationHour |
Number |
The Hour of the rotation in UTC. Default rotation-hour is 14:00 |
[optional] |
| rotationInterval |
String |
The number of days to wait between every automatic key rotation (1-365) |
[optional] |
| rotatorCredsType |
String |
|
[optional] |
| rotatorCustomCmd |
String |
Custom rotation command (relevant only for ssh target) |
[optional] |
| rotatorType |
String |
Rotator Type |
|
| samePassword |
String |
Rotate same password for each host from the Linked Target (relevant only for Linked Target) |
[optional] |
| secureAccessAllowExternalUser |
Boolean |
Allow providing external user for a domain users (relevant only for rdp) |
[optional] [default to false] |
| secureAccessAwsAccountId |
String |
The AWS account id (relevant only for aws) |
[optional] |
| secureAccessAwsNativeCli |
Boolean |
The AWS native cli |
[optional] |
| secureAccessBastionIssuer |
String |
Deprecated. use secure-access-certificate-issuer |
[optional] |
| secureAccessCertificateIssuer |
String |
Path to the SSH Certificate Issuer for your Akeyless Secure Access |
[optional] |
| secureAccessDbName |
String |
The DB name (relevant only for DB Dynamic-Secret) |
[optional] |
| secureAccessDbSchema |
String |
The db schema (relevant only for mssql or postgresql) |
[optional] |
| secureAccessDisableConcurrentConnections |
Boolean |
Enable this flag to prevent simultaneous use of the same secret |
[optional] |
| secureAccessEnable |
String |
Enable/Disable secure remote access [true/false] |
[optional] |
| secureAccessEnforceHostsRestriction |
Boolean |
Enforce connections only to allowed SRA hosts |
[optional] |
| secureAccessHost |
[String] |
Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers) |
[optional] |
| secureAccessRdpDomain |
String |
Required when the Dynamic Secret is used for a domain user (relevant only for RDP Dynamic-Secret) |
[optional] |
| secureAccessRdpUser |
String |
Override the RDP Domain username (relevant only for rdp) |
[optional] |
| secureAccessUrl |
String |
Destination URL to inject secrets |
[optional] |
| secureAccessWeb |
Boolean |
Enable Web Secure Remote Access |
[optional] [default to false] |
| secureAccessWebBrowsing |
Boolean |
Secure browser viaAkeyless's Secure Remote Access (SRA) (relevant only for aws or azure) |
[optional] [default to false] |
| secureAccessWebProxy |
Boolean |
Web-Proxy via Akeyless's Secure Remote Access (SRA) (relevant only for aws or azure) |
[optional] [default to false] |
| sshPassword |
String |
Deprecated: use RotatedPassword |
[optional] |
| sshUsername |
String |
Deprecated: use RotatedUser |
[optional] |
| storageAccountKeyName |
String |
The name of the storage account key to rotate [key1/key2/kerb1/kerb2] (relevat to azure-storage-account) |
[optional] |
| tags |
[String] |
Add tags attached to this object |
[optional] |
| target |
[String] |
A list of targets to be associated with an SRA item, To specify multiple targets use argument multiple times |
[optional] |
| targetName |
String |
Target name |
|
| token |
String |
Authentication token (see `/auth` and `/configure`) |
[optional] |
| uidToken |
String |
The universal identity token, Required only for universal_identity authentication |
[optional] |
| userAttribute |
String |
LDAP User Attribute, Default value "cn" |
[optional] [default to 'cn'] |
| userDn |
String |
LDAP User Base DN |
[optional] |