AwsSecretsManagerPolicyDocumentTemplate

interface AwsSecretsManagerPolicyDocumentTemplate extends JsonFileTemplateArgs {
path: string;
variableArrays?: Record<string, Input<Input<string>[]>>;
variables?: Record<string, Input<string>>;
}

Template input for Secrets Manager inline resource policy documents.

Remarks

The template file is expected to contain valid JSON after replacing {{ variable }} placeholders.

Example

CODE

const policyTemplate: AwsSecretsManagerPolicyDocumentTemplate = {
  path: './policies/secret-resource-policy.json',
  variables: {
    accountId: '000000000000',
  },
};

Hierarchy

JsonFileTemplateArgs
AwsSecretsManagerPolicyDocumentTemplate

Properties

`path: string`

Inherited from path

Path to the template file.

`variableArrays: Record<string, Input<Input<string>[]>>`

Inherited from variableArrays

Optional string-array substitutions for template rendering.

Remarks

Place each placeholder as a quoted array element, for example ["{{ resourceArns }}"]. The complete placeholder is expanded into comma-separated, JSON-encoded string values. Arrays must contain at least one non-empty string, and keys must not also appear in variables. Literal values are validated synchronously; computed Pulumi inputs are validated after resolution and preserve secret propagation.

Example

CODE

const template: FileTemplateArgs = {
  path: './policy.json',
  variables: { region: 'eu-west-1' },
  variableArrays: {
    resourceArns: [queue.arn, archiveQueue.arn],
  },
};

`variables: Record<string, Input<string>>`

Inherited from variables

Optional {{ variable }} substitutions for template rendering.