SecretRotationState constructor

const SecretRotationState({
  1. Input<List<SecretRotationExternalSecretRotationMetadata>?>? externalSecretRotationMetadatas,
  2. Input<String?>? externalSecretRotationRoleArn,
  3. Input<String?>? region,
  4. Input<bool?>? rotateImmediately,
  5. Input<bool?>? rotationEnabled,
  6. Input<String?>? rotationLambdaArn,
  7. Input<SecretRotationRotationRules?>? rotationRules,
  8. Input<String?>? secretId,
})

Creates a new SecretRotationState. externalSecretRotationMetadatas Configuration block for metadata required by the external secret partner. Required for managed external secrets. See details below. externalSecretRotationRoleArn ARN of the IAM role that allows Secrets Manager to rotate the secret held by a third-party partner. Required for managed external secrets. region Region where this resource will be managed. Defaults to the Region set in the provider configuration. rotateImmediately Whether to rotate the secret immediately or wait until the next scheduled rotation window. The rotation schedule is defined in rotationRules. For secrets that use a Lambda rotation function to rotate, if you don't immediately rotate the secret, Secrets Manager tests the rotation configuration by running the testSecret step (https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotate-secrets_how.html) of the Lambda rotation function. The test creates an AWSPENDING version of the secret and then removes it. Defaults to true. rotationEnabled Whether automatic rotation is enabled for the secret. Set to false to disable rotation on a secret whose rotation is otherwise managed by AWS (for example, an RDS master user password secret). When false, rotationRules must be omitted. Defaults to enabled when rotationRules is configured. Destroying this resource does not re-enable the automatic rotation that AWS configured. rotationLambdaArn ARN of the Lambda function that can rotate the secret. Must be supplied if the secret is not managed by AWS. rotationRules Structure that defines the rotation configuration for this secret. Required unless rotationEnabled is false. Defined below. secretId Secret to which you want to add a new version. You can specify either the ARN or the friendly name of the secret. The secret must already exist.

Implementation

const SecretRotationState({
  this.externalSecretRotationMetadatas,
  this.externalSecretRotationRoleArn,
  this.region,
  this.rotateImmediately,
  this.rotationEnabled,
  this.rotationLambdaArn,
  this.rotationRules,
  this.secretId,
});