Secrets Manager

Makes an optional API call to Zelkova to validate the Resource Policy to prevent broad access to your secret

Determines whether resources will be created (affects all resources)

Determines whether a policy will be created

Determines whether an ephemeral random password will be generated for `secret_string_wo`

A description of the secret

Determines whether secret rotation is enabled

Accepts boolean value to specify whether to overwrite a secret with the same name in the destination Region

Determines whether or not Terraform will ignore changes made externally to `secret_string` or `secret_binary`. Changing this value after creation is a destructive operation

ARN or Id of the AWS KMS key to be used to encrypt the secret values in the versions stored in this secret. If you need to reference a CMK in a different account, you can use only the key ARN. If you don't specify this value, then Secrets Manager defaults to using the AWS account's default KMS key (…

Friendly name of the new secret. The secret name can consist of uppercase letters, lowercase letters, digits, and any of the following characters: `/_+=.@-`

Creates a unique name beginning with the specified prefix

List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank `sid`s will override statements with the same `sid`

A map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage

The length of the generated random password

Supply your own list of special characters to use for string generation. This overrides the default character list in the special argument

Number of days that AWS Secrets Manager waits before it can delete the secret. This value can be `0` to force deletion without recovery or range from `7` to `30` days. The default value is `30`

Region where the resource(s) will be managed. Defaults to the Region set in the provider configuration

Configuration block to support secret replication

Specifies whether to rotate the secret immediately or wait until the next scheduled rotation window. The rotation schedule is defined in `rotation_rules`

Specifies the ARN of the Lambda function that can rotate the secret

A structure that defines the rotation configuration for this secret

Specifies binary data that you want to encrypt and store in this version of the secret. This is required if `secret_string` or `secret_string_wo` is not set. Needs to be encoded to base64

Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string_wo` is not set

Specifies text data that you want to encrypt and store in this version of the secret. This is required if `secret_binary` or `secret_string` is not set

Used together with `secret_string_wo` to trigger an update. Increment this value when an update to `secret_string_wo` is required

List of IAM policy documents that are merged together into the exported document. Statements must have unique `sid`s

A map of tags to add to all resources

Specifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret

The ARN of the secret

The secret binary

The ID of the secret

The name of the secret

Attributes of the replica created

The secret string

The unique identifier of the version of the secret