| ApiId |
string |
API ID to rotate (relevant only for rotator-type=api-key) |
[optional] |
| ApiKey |
string |
API key to rotate (relevant only for rotator-type=api-key) |
[optional] |
| AraEnabled |
bool |
Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs. AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag. |
[optional] |
| AuthenticationCredentials |
string |
The credentials to connect with use-user-creds/use-target-creds |
[optional] [default to "use-user-creds"] |
| AutoRotate |
string |
|
[optional] |
| AwsRegion |
string |
Aws Region |
[optional] [default to "us-east-2"] |
| DeleteProtection |
string |
Protection from accidental deletion of this object [true/false] |
[optional] |
| Description |
string |
Description of the object |
[optional] |
| EnableAgenticRuntimeAuthority |
bool |
EnableAra is the documented spelling of AraEnabled. Both set the same field; - -ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working. |
[optional] |
| EnableAiQuorum |
bool |
Turns on AI Quorum checks for this item. |
[optional] |
| GraceRotation |
string |
Enable graceful rotation (keep both versions temporarily). When enabled, a new secret version is created while the previous version is kept for the grace period, so both versions exist for a limited time. [true/false] |
[optional] |
| GraceRotationHour |
int |
The Hour of the grace rotation in UTC |
[optional] |
| GraceRotationInterval |
string |
The number of days to wait before deleting the old key (must be bigger than rotation-interval) |
[optional] |
| GraceRotationTiming |
string |
When to create the new version relative to the rotation date [after/before] |
[optional] |
| InputRule |
List<string> |
Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) |
[optional] |
| ItemCustomFields |
Dictionary<string, string> |
Additional custom fields to associate with the item |
[optional] |
| Json |
bool |
Set output format to JSON |
[optional] [default to false] |
| Key |
string |
|
[optional] |
| LockDuringSraSession |
string |
Lock this secret for read/update while an SRA session is active |
[optional] |
| LockOnRead |
string |
Lock this secret after each successful value read |
[optional] |
| LockTtl |
string |
Lock TTL in minutes |
[optional] |
| MaxVersions |
string |
Set the maximum number of versions, limited by the account settings defaults. |
[optional] |
| Name |
string |
Rotated secret name |
|
| OutputRule |
List<string> |
Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) |
[optional] |
| PasswordLength |
string |
The length of the password to be generated |
[optional] |
| RotateAfterDisconnect |
string |
StringOrBool accepts JSON strings, booleans, and numbers for backward compatibility with older SDK versions that send boolean values for rotate-after-disconnect. |
[optional] |
| RotateOnUnlock |
string |
Rotate this secret after it is unlocked |
[optional] |
| RotationEventIn |
List<string> |
How many days before the rotation of the item would you like to be notified |
[optional] |
| RotationHour |
int |
|
[optional] |
| RotationInterval |
string |
|
[optional] |
| RotatorType |
string |
The rotator type. options: [target/api-key] |
|
| SecureAccessAwsAccountId |
string |
The AWS account id |
[optional] |
| SecureAccessAwsNativeCli |
bool |
The AWS native cli |
[optional] |
| SecureAccessBastionIssuer |
string |
Deprecated. use secure-access-certificate-issuer |
[optional] |
| SecureAccessCertificateIssuer |
string |
Path to the SSH Certificate Issuer for your Akeyless Secure Access |
[optional] |
| SecureAccessEnable |
string |
Enable/Disable secure remote access [true/false] |
[optional] |
| SkipDryRun |
bool |
If set, dry-run will be skipped [true/false] |
[optional] |
| Tags |
List<string> |
Add tags attached to this object |
[optional] |
| TargetName |
string |
The target name to associate |
|
| Token |
string |
Authentication token (see `/auth` and `/configure`) |
[optional] |
| UidToken |
string |
The universal identity token, Required only for universal_identity authentication |
[optional] |
| UseCapitalLetters |
string |
Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] |
[optional] |
| UseLowerLetters |
string |
Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] |
[optional] |
| UseNumbers |
string |
Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] |
[optional] |
| UseSpecialCharacters |
string |
|
[optional] |