AwsSecretsManagerSecretPolicyResourceArgs

interface AwsSecretsManagerSecretPolicyResourceArgs extends Omit<aws.secretsmanager.SecretPolicyArgs, 'policy' | 'secretArn'> {
blockPublicPolicy?: Input<boolean | undefined>;
policy: Input<string> | AwsSecretsManagerSecretPolicyDocumentTemplate;
region?: Input<string | undefined>;
secretArn: string;
}

Input arguments for AwsSecretsManagerSecretPolicy.

Remarks

This type maps directly to aws.secretsmanager.SecretPolicyArgs with one change:

policy accepts either a JSON file/template input with {{ variable }} substitution or a direct policy document string.

Example

CODE

const args: AwsSecretsManagerSecretPolicyResourceArgs = {
  secretArn: 'arn:aws:secretsmanager:eu-west-1:000000000000:secret:app-secret',
  policy: {
    path: './policies/app-secret-policy.json',
  },
};

Hierarchy

SecretPolicyArgs, "policy" | "secretArn">
AwsSecretsManagerSecretPolicyResourceArgs

Properties

`blockPublicPolicy: Input<boolean | undefined>`

Inherited from blockPublicPolicy

Makes an optional API call to Zelkova to validate the Resource Policy to prevent broad access to your secret.

`policy: Input<string> | AwsSecretsManagerSecretPolicyDocumentTemplate`

Resource policy document for the secret.

Remarks

Accepts a JSON file/template input or a direct policy document string (for example the output of aws.iam.getPolicyDocumentOutput(...).json). An empty JSON document "{}" is not valid — policy is always required by AWS.

`region: Input<string | undefined>`

Inherited from region

Region where this resource will be managed. Defaults to the Region set in the provider configuration.

`secretArn: string`

Plain-string secret ARN forwarded unchanged to the provider and used as logical child identity.