pulumi-infisical
Version:
A Pulumi provider for managing Infisical secrets management platform, dynamically bridged from the Terraform Infisical provider with support for projects, secrets, identity management, integrations, and access controls.
187 lines (186 loc) • 7.91 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
export declare class IntegrationAwsSecretsManager extends pulumi.CustomResource {
/**
* Get an existing IntegrationAwsSecretsManager resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: IntegrationAwsSecretsManagerState, opts?: pulumi.CustomResourceOptions): IntegrationAwsSecretsManager;
/**
* Returns true if the given object is an instance of IntegrationAwsSecretsManager. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is IntegrationAwsSecretsManager;
/**
* The AWS access key ID. Used to authenticate with AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
readonly accessKeyId: pulumi.Output<string | undefined>;
/**
* The ARN of the role to assume when syncing secrets to AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
readonly assumeRoleArn: pulumi.Output<string | undefined>;
/**
* The AWS region to sync secrets to. (us-east-1, us-east-2, etc)
*/
readonly awsRegion: pulumi.Output<string>;
/**
* The slug of the environment to sync to AWS Secrets Manager (prod, dev, staging, etc).
*/
readonly environment: pulumi.Output<string>;
/**
* The ID of the integration auth, used internally by Infisical.
*/
readonly integrationAuthId: pulumi.Output<string>;
/**
* The ID of the integration, used internally by Infisical.
*/
readonly integrationId: pulumi.Output<string>;
/**
* The behavior of the mapping. Can be 'many-to-one' or 'one-to-one'. Many to One: All Infisical secrets will be mapped to
* a single AWS secret. One to One: Each Infisical secret will be mapped to its own AWS secret.
*/
readonly mappingBehavior: pulumi.Output<string>;
/**
* Integration options
*/
readonly options: pulumi.Output<outputs.IntegrationAwsSecretsManagerOptions>;
/**
* The ID of your Infisical project.
*/
readonly projectId: pulumi.Output<string>;
/**
* The AWS secret access key. Used to authenticate with AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
readonly secretAccessKey: pulumi.Output<string | undefined>;
/**
* The secret path in Infisical to sync secrets from.
*/
readonly secretPath: pulumi.Output<string>;
/**
* The path in AWS Secrets Manager to sync secrets to. This is required if mapping_behavior is 'many-to-one'.
*/
readonly secretsManagerPath: pulumi.Output<string | undefined>;
/**
* Create a IntegrationAwsSecretsManager resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: IntegrationAwsSecretsManagerArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering IntegrationAwsSecretsManager resources.
*/
export interface IntegrationAwsSecretsManagerState {
/**
* The AWS access key ID. Used to authenticate with AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
accessKeyId?: pulumi.Input<string>;
/**
* The ARN of the role to assume when syncing secrets to AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
assumeRoleArn?: pulumi.Input<string>;
/**
* The AWS region to sync secrets to. (us-east-1, us-east-2, etc)
*/
awsRegion?: pulumi.Input<string>;
/**
* The slug of the environment to sync to AWS Secrets Manager (prod, dev, staging, etc).
*/
environment?: pulumi.Input<string>;
/**
* The ID of the integration auth, used internally by Infisical.
*/
integrationAuthId?: pulumi.Input<string>;
/**
* The ID of the integration, used internally by Infisical.
*/
integrationId?: pulumi.Input<string>;
/**
* The behavior of the mapping. Can be 'many-to-one' or 'one-to-one'. Many to One: All Infisical secrets will be mapped to
* a single AWS secret. One to One: Each Infisical secret will be mapped to its own AWS secret.
*/
mappingBehavior?: pulumi.Input<string>;
/**
* Integration options
*/
options?: pulumi.Input<inputs.IntegrationAwsSecretsManagerOptions>;
/**
* The ID of your Infisical project.
*/
projectId?: pulumi.Input<string>;
/**
* The AWS secret access key. Used to authenticate with AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
secretAccessKey?: pulumi.Input<string>;
/**
* The secret path in Infisical to sync secrets from.
*/
secretPath?: pulumi.Input<string>;
/**
* The path in AWS Secrets Manager to sync secrets to. This is required if mapping_behavior is 'many-to-one'.
*/
secretsManagerPath?: pulumi.Input<string>;
}
/**
* The set of arguments for constructing a IntegrationAwsSecretsManager resource.
*/
export interface IntegrationAwsSecretsManagerArgs {
/**
* The AWS access key ID. Used to authenticate with AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
accessKeyId?: pulumi.Input<string>;
/**
* The ARN of the role to assume when syncing secrets to AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
assumeRoleArn?: pulumi.Input<string>;
/**
* The AWS region to sync secrets to. (us-east-1, us-east-2, etc)
*/
awsRegion: pulumi.Input<string>;
/**
* The slug of the environment to sync to AWS Secrets Manager (prod, dev, staging, etc).
*/
environment: pulumi.Input<string>;
/**
* The behavior of the mapping. Can be 'many-to-one' or 'one-to-one'. Many to One: All Infisical secrets will be mapped to
* a single AWS secret. One to One: Each Infisical secret will be mapped to its own AWS secret.
*/
mappingBehavior?: pulumi.Input<string>;
/**
* Integration options
*/
options?: pulumi.Input<inputs.IntegrationAwsSecretsManagerOptions>;
/**
* The ID of your Infisical project.
*/
projectId: pulumi.Input<string>;
/**
* The AWS secret access key. Used to authenticate with AWS Secrets Manager. You must either set secret_access_key and
* access_key_id, or set assume_role_arn to assume a role.
*/
secretAccessKey?: pulumi.Input<string>;
/**
* The secret path in Infisical to sync secrets from.
*/
secretPath: pulumi.Input<string>;
/**
* The path in AWS Secrets Manager to sync secrets to. This is required if mapping_behavior is 'many-to-one'.
*/
secretsManagerPath?: pulumi.Input<string>;
}