Skip to content

Latest commit

 

History

History
62 lines (58 loc) · 6.92 KB

RotatedSecretUpdateAzure.md

File metadata and controls

62 lines (58 loc) · 6.92 KB

akeyless.Model.RotatedSecretUpdateAzure

Properties

Name Type Description Notes
AddTag List<string> List of the new tags that will be attached to this item [optional]
ApiId string API ID to rotate (relevant only for rotator-type=api-key) [optional]
ApiKey string API key to rotate (relevant only for rotator-type=api-key) [optional]
ApplicationId string Id of the azure app that hold the serect to be rotated (relevant only for rotator-type=api-key & authentication-credentials=use-target-creds) [optional]
AraEnabled bool Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs. AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag. [optional]
AuthenticationCredentials string The credentials to connect with use-user-creds/use-target-creds [optional] [default to "use-user-creds"]
AutoRotate string [optional]
DeleteProtection string Protection from accidental deletion of this object [true/false] [optional]
Description string Description of the object [optional] [default to "default_metadata"]
EnableAgenticRuntimeAuthority bool EnableAra is the documented spelling of AraEnabled. Both set the same field; - -ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working. [optional]
EnableAiQuorum bool Turns on AI Quorum checks for this item. [optional]
ExplicitlySetSa string If set, explicitly provide the storage account details [true/false] [optional] [default to "false"]
GraceRotation string Enable graceful rotation (keep both versions temporarily). When enabled, a new secret version is created while the previous version is kept for the grace period, so both versions exist for a limited time. [true/false] [optional]
GraceRotationHour int The Hour of the grace rotation in UTC [optional]
GraceRotationInterval string The number of days to wait before deleting the old key (must be bigger than rotation-interval) [optional]
GraceRotationTiming string When to create the new version relative to the rotation date [after/before] [optional]
InputRule List<string> Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) [optional]
ItemCustomFields Dictionary<string, string> Additional custom fields to associate with the item [optional]
Json bool Set output format to JSON [optional] [default to false]
KeepPrevVersion string Whether to keep previous version [true/false]. If not set, use default according to account settings [optional]
Key string [optional]
LockDuringSraSession string Lock this secret for read/update while an SRA session is active [optional]
LockOnRead string Lock this secret after each successful value read [optional]
LockTtl string Lock TTL in minutes [optional]
MaxVersions string Set the maximum number of versions, limited by the account settings defaults. [optional]
Name string Rotated secret name
NewName string New item name [optional]
OutputRule List<string> Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) [optional]
Password string The password for the user principal name to rotate (relevant only for rotator-type=password) [optional]
PasswordLength string The length of the password to be generated [optional]
ResourceGroupName string The resource group name (only relevant when explicitly-set-sa=true) [optional]
ResourceName string The name of the storage account (only relevant when explicitly-set-sa=true) [optional]
RmTag List<string> List of the existent tags that will be removed from this item [optional]
RotateAfterDisconnect string StringOrBool accepts JSON strings, booleans, and numbers for backward compatibility with older SDK versions that send boolean values for rotate-after-disconnect. [optional]
RotateOnUnlock string Rotate this secret after it is unlocked [optional]
RotationEventIn List<string> How many days before the rotation of the item would you like to be notified [optional]
RotationHour int [optional]
RotationInterval string [optional]
SecureAccessDisableConcurrentConnections bool Enable this flag to prevent simultaneous use of the same secret [optional]
SecureAccessEnable string Enable/Disable secure remote access [true/false] [optional]
SecureAccessUrl string Destination URL to inject secrets [optional]
SecureAccessWeb bool Enable Web Secure Remote Access [optional] [default to false]
SecureAccessWebBrowsing bool Secure browser via Akeyless's Secure Remote Access (SRA) [optional] [default to false]
SecureAccessWebProxy bool Web-Proxy via Akeyless's Secure Remote Access (SRA) [optional] [default to false]
SkipDryRun bool If set, dry-run will be skipped [true/false] [optional]
StorageAccountKeyName string The name of the storage account key to rotate [key1/key2/kerb1/kerb2] (relevat to azure-storage-account) [optional]
Token string Authentication token (see `/auth` and `/configure`) [optional]
UidToken string The universal identity token, Required only for universal_identity authentication [optional]
UseCapitalLetters string Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] [optional]
UseLowerLetters string Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] [optional]
UseNumbers string Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] [optional]
UseSpecialCharacters string [optional]
Username string The user principal name to rotate his password (relevant only for rotator-type=password) [optional]

[Back to Model list] [Back to API list] [Back to README]