AwsSecretsManagerSecretPolicyArgs

interface AwsSecretsManagerSecretPolicyArgs extends Omit<AwsSecretsManagerSecretPolicyResourceArgs, 'secretArn'> {
blockPublicPolicy?: Input<boolean | undefined>;
policy: Input<string> | AwsSecretsManagerSecretPolicyDocumentTemplate;
region?: Input<string | undefined>;
secretArn: string;
}

Secret policy inputs for AwsSecretsManager that allow referencing secrets by object.

Example

CODE

const args: AwsSecretsManagerSecretPolicyArgs = {
  secretArn: 'arn:aws:secretsmanager:eu-west-1:000000000000:secret:app-secret',
  policy: {
    path: './policies/app-secret-policy.json',
  },
};

Hierarchy

Omit<AwsSecretsManagerSecretPolicyResourceArgs, "secretArn">
AwsSecretsManagerSecretPolicyArgs

Properties

`blockPublicPolicy: Input<boolean | undefined>`

Inherited from blockPublicPolicy

Makes an optional API call to Zelkova to validate the Resource Policy to prevent broad access to your secret.

`policy: Input<string> | AwsSecretsManagerSecretPolicyDocumentTemplate`

Inherited from policy

Resource policy document for the secret.

Remarks

Accepts a JSON file/template input or a direct policy document string (for example the output of aws.iam.getPolicyDocumentOutput(...).json). An empty JSON document "{}" is not valid — policy is always required by AWS.

`region: Input<string | undefined>`

Inherited from region

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

`secretArn: string`

ARN of the target secret.

Remarks

Must be provided as a plain string for deterministic logical identity generation.