Harness v0.5.7 published on Saturday, Mar 8, 2025 by Pulumi
harness.platform.getAwsSecretManagerConnector
Explore with Pulumi AI
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as harness from "@pulumi/harness";
const example = harness.platform.getAwsSecretManagerConnector({
    identifier: "identifier",
});
import pulumi
import pulumi_harness as harness
example = harness.platform.get_aws_secret_manager_connector(identifier="identifier")
package main
import (
	"github.com/pulumi/pulumi-harness/sdk/go/harness/platform"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := platform.LookupAwsSecretManagerConnector(ctx, &platform.LookupAwsSecretManagerConnectorArgs{
			Identifier: "identifier",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Harness = Pulumi.Harness;
return await Deployment.RunAsync(() => 
{
    var example = Harness.Platform.GetAwsSecretManagerConnector.Invoke(new()
    {
        Identifier = "identifier",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.harness.platform.PlatformFunctions;
import com.pulumi.harness.platform.inputs.GetAwsSecretManagerConnectorArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var example = PlatformFunctions.getAwsSecretManagerConnector(GetAwsSecretManagerConnectorArgs.builder()
            .identifier("identifier")
            .build());
    }
}
variables:
  example:
    fn::invoke:
      function: harness:platform:getAwsSecretManagerConnector
      arguments:
        identifier: identifier
Using getAwsSecretManagerConnector
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getAwsSecretManagerConnector(args: GetAwsSecretManagerConnectorArgs, opts?: InvokeOptions): Promise<GetAwsSecretManagerConnectorResult>
function getAwsSecretManagerConnectorOutput(args: GetAwsSecretManagerConnectorOutputArgs, opts?: InvokeOptions): Output<GetAwsSecretManagerConnectorResult>def get_aws_secret_manager_connector(force_delete_without_recovery: Optional[bool] = None,
                                     identifier: Optional[str] = None,
                                     name: Optional[str] = None,
                                     org_id: Optional[str] = None,
                                     project_id: Optional[str] = None,
                                     recovery_window_in_days: Optional[int] = None,
                                     opts: Optional[InvokeOptions] = None) -> GetAwsSecretManagerConnectorResult
def get_aws_secret_manager_connector_output(force_delete_without_recovery: Optional[pulumi.Input[bool]] = None,
                                     identifier: Optional[pulumi.Input[str]] = None,
                                     name: Optional[pulumi.Input[str]] = None,
                                     org_id: Optional[pulumi.Input[str]] = None,
                                     project_id: Optional[pulumi.Input[str]] = None,
                                     recovery_window_in_days: Optional[pulumi.Input[int]] = None,
                                     opts: Optional[InvokeOptions] = None) -> Output[GetAwsSecretManagerConnectorResult]func LookupAwsSecretManagerConnector(ctx *Context, args *LookupAwsSecretManagerConnectorArgs, opts ...InvokeOption) (*LookupAwsSecretManagerConnectorResult, error)
func LookupAwsSecretManagerConnectorOutput(ctx *Context, args *LookupAwsSecretManagerConnectorOutputArgs, opts ...InvokeOption) LookupAwsSecretManagerConnectorResultOutput> Note: This function is named LookupAwsSecretManagerConnector in the Go SDK.
public static class GetAwsSecretManagerConnector 
{
    public static Task<GetAwsSecretManagerConnectorResult> InvokeAsync(GetAwsSecretManagerConnectorArgs args, InvokeOptions? opts = null)
    public static Output<GetAwsSecretManagerConnectorResult> Invoke(GetAwsSecretManagerConnectorInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetAwsSecretManagerConnectorResult> getAwsSecretManagerConnector(GetAwsSecretManagerConnectorArgs args, InvokeOptions options)
public static Output<GetAwsSecretManagerConnectorResult> getAwsSecretManagerConnector(GetAwsSecretManagerConnectorArgs args, InvokeOptions options)
fn::invoke:
  function: harness:platform/getAwsSecretManagerConnector:getAwsSecretManagerConnector
  arguments:
    # arguments dictionaryThe following arguments are supported:
- Identifier string
- Unique identifier of the resource.
- ForceDelete boolWithout Recovery 
- Whether to force delete secret value or not.
- Name string
- Name of the resource.
- OrgId string
- Unique identifier of the organization.
- ProjectId string
- Unique identifier of the project.
- RecoveryWindow intIn Days 
- recovery duration in days in AWS Secrets Manager.
- Identifier string
- Unique identifier of the resource.
- ForceDelete boolWithout Recovery 
- Whether to force delete secret value or not.
- Name string
- Name of the resource.
- OrgId string
- Unique identifier of the organization.
- ProjectId string
- Unique identifier of the project.
- RecoveryWindow intIn Days 
- recovery duration in days in AWS Secrets Manager.
- identifier String
- Unique identifier of the resource.
- forceDelete BooleanWithout Recovery 
- Whether to force delete secret value or not.
- name String
- Name of the resource.
- orgId String
- Unique identifier of the organization.
- projectId String
- Unique identifier of the project.
- recoveryWindow IntegerIn Days 
- recovery duration in days in AWS Secrets Manager.
- identifier string
- Unique identifier of the resource.
- forceDelete booleanWithout Recovery 
- Whether to force delete secret value or not.
- name string
- Name of the resource.
- orgId string
- Unique identifier of the organization.
- projectId string
- Unique identifier of the project.
- recoveryWindow numberIn Days 
- recovery duration in days in AWS Secrets Manager.
- identifier str
- Unique identifier of the resource.
- force_delete_ boolwithout_ recovery 
- Whether to force delete secret value or not.
- name str
- Name of the resource.
- org_id str
- Unique identifier of the organization.
- project_id str
- Unique identifier of the project.
- recovery_window_ intin_ days 
- recovery duration in days in AWS Secrets Manager.
- identifier String
- Unique identifier of the resource.
- forceDelete BooleanWithout Recovery 
- Whether to force delete secret value or not.
- name String
- Name of the resource.
- orgId String
- Unique identifier of the organization.
- projectId String
- Unique identifier of the project.
- recoveryWindow NumberIn Days 
- recovery duration in days in AWS Secrets Manager.
getAwsSecretManagerConnector Result
The following output properties are available:
- Credentials
List<GetAws Secret Manager Connector Credential> 
- Credentials to connect to AWS.
- Default bool
- Whether this is the default connector.
- DelegateSelectors List<string>
- Tags to filter delegates for connection.
- Description string
- Description of the resource.
- ExecuteOn boolDelegate 
- The delegate to execute the action on.
- Id string
- The provider-assigned unique ID for this managed resource.
- Identifier string
- Unique identifier of the resource.
- Region string
- The AWS region where the AWS Secret Manager is.
- SecretName stringPrefix 
- A prefix to be added to all secrets.
- List<string>
- Tags to associate with the resource.
- UsePut boolSecret 
- Whether to update secret value using putSecretValue action.
- ForceDelete boolWithout Recovery 
- Whether to force delete secret value or not.
- Name string
- Name of the resource.
- OrgId string
- Unique identifier of the organization.
- ProjectId string
- Unique identifier of the project.
- RecoveryWindow intIn Days 
- recovery duration in days in AWS Secrets Manager.
- Credentials
[]GetAws Secret Manager Connector Credential 
- Credentials to connect to AWS.
- Default bool
- Whether this is the default connector.
- DelegateSelectors []string
- Tags to filter delegates for connection.
- Description string
- Description of the resource.
- ExecuteOn boolDelegate 
- The delegate to execute the action on.
- Id string
- The provider-assigned unique ID for this managed resource.
- Identifier string
- Unique identifier of the resource.
- Region string
- The AWS region where the AWS Secret Manager is.
- SecretName stringPrefix 
- A prefix to be added to all secrets.
- []string
- Tags to associate with the resource.
- UsePut boolSecret 
- Whether to update secret value using putSecretValue action.
- ForceDelete boolWithout Recovery 
- Whether to force delete secret value or not.
- Name string
- Name of the resource.
- OrgId string
- Unique identifier of the organization.
- ProjectId string
- Unique identifier of the project.
- RecoveryWindow intIn Days 
- recovery duration in days in AWS Secrets Manager.
- credentials
List<GetAws Secret Manager Connector Credential> 
- Credentials to connect to AWS.
- default_ Boolean
- Whether this is the default connector.
- delegateSelectors List<String>
- Tags to filter delegates for connection.
- description String
- Description of the resource.
- executeOn BooleanDelegate 
- The delegate to execute the action on.
- id String
- The provider-assigned unique ID for this managed resource.
- identifier String
- Unique identifier of the resource.
- region String
- The AWS region where the AWS Secret Manager is.
- secretName StringPrefix 
- A prefix to be added to all secrets.
- List<String>
- Tags to associate with the resource.
- usePut BooleanSecret 
- Whether to update secret value using putSecretValue action.
- forceDelete BooleanWithout Recovery 
- Whether to force delete secret value or not.
- name String
- Name of the resource.
- orgId String
- Unique identifier of the organization.
- projectId String
- Unique identifier of the project.
- recoveryWindow IntegerIn Days 
- recovery duration in days in AWS Secrets Manager.
- credentials
GetAws Secret Manager Connector Credential[] 
- Credentials to connect to AWS.
- default boolean
- Whether this is the default connector.
- delegateSelectors string[]
- Tags to filter delegates for connection.
- description string
- Description of the resource.
- executeOn booleanDelegate 
- The delegate to execute the action on.
- id string
- The provider-assigned unique ID for this managed resource.
- identifier string
- Unique identifier of the resource.
- region string
- The AWS region where the AWS Secret Manager is.
- secretName stringPrefix 
- A prefix to be added to all secrets.
- string[]
- Tags to associate with the resource.
- usePut booleanSecret 
- Whether to update secret value using putSecretValue action.
- forceDelete booleanWithout Recovery 
- Whether to force delete secret value or not.
- name string
- Name of the resource.
- orgId string
- Unique identifier of the organization.
- projectId string
- Unique identifier of the project.
- recoveryWindow numberIn Days 
- recovery duration in days in AWS Secrets Manager.
- credentials
Sequence[GetAws Secret Manager Connector Credential] 
- Credentials to connect to AWS.
- default bool
- Whether this is the default connector.
- delegate_selectors Sequence[str]
- Tags to filter delegates for connection.
- description str
- Description of the resource.
- execute_on_ booldelegate 
- The delegate to execute the action on.
- id str
- The provider-assigned unique ID for this managed resource.
- identifier str
- Unique identifier of the resource.
- region str
- The AWS region where the AWS Secret Manager is.
- secret_name_ strprefix 
- A prefix to be added to all secrets.
- Sequence[str]
- Tags to associate with the resource.
- use_put_ boolsecret 
- Whether to update secret value using putSecretValue action.
- force_delete_ boolwithout_ recovery 
- Whether to force delete secret value or not.
- name str
- Name of the resource.
- org_id str
- Unique identifier of the organization.
- project_id str
- Unique identifier of the project.
- recovery_window_ intin_ days 
- recovery duration in days in AWS Secrets Manager.
- credentials List<Property Map>
- Credentials to connect to AWS.
- default Boolean
- Whether this is the default connector.
- delegateSelectors List<String>
- Tags to filter delegates for connection.
- description String
- Description of the resource.
- executeOn BooleanDelegate 
- The delegate to execute the action on.
- id String
- The provider-assigned unique ID for this managed resource.
- identifier String
- Unique identifier of the resource.
- region String
- The AWS region where the AWS Secret Manager is.
- secretName StringPrefix 
- A prefix to be added to all secrets.
- List<String>
- Tags to associate with the resource.
- usePut BooleanSecret 
- Whether to update secret value using putSecretValue action.
- forceDelete BooleanWithout Recovery 
- Whether to force delete secret value or not.
- name String
- Name of the resource.
- orgId String
- Unique identifier of the organization.
- projectId String
- Unique identifier of the project.
- recoveryWindow NumberIn Days 
- recovery duration in days in AWS Secrets Manager.
Supporting Types
GetAwsSecretManagerConnectorCredential     
- AssumeRoles List<GetAws Secret Manager Connector Credential Assume Role> 
- Connect using STS assume role.
- InheritFrom boolDelegate 
- Inherit the credentials from from the delegate.
- Manuals
List<GetAws Secret Manager Connector Credential Manual> 
- Specify the AWS key and secret used for authenticating.
- OidcAuthentications List<GetAws Secret Manager Connector Credential Oidc Authentication> 
- Authentication using OIDC.
- AssumeRoles []GetAws Secret Manager Connector Credential Assume Role 
- Connect using STS assume role.
- InheritFrom boolDelegate 
- Inherit the credentials from from the delegate.
- Manuals
[]GetAws Secret Manager Connector Credential Manual 
- Specify the AWS key and secret used for authenticating.
- OidcAuthentications []GetAws Secret Manager Connector Credential Oidc Authentication 
- Authentication using OIDC.
- assumeRoles List<GetAws Secret Manager Connector Credential Assume Role> 
- Connect using STS assume role.
- inheritFrom BooleanDelegate 
- Inherit the credentials from from the delegate.
- manuals
List<GetAws Secret Manager Connector Credential Manual> 
- Specify the AWS key and secret used for authenticating.
- oidcAuthentications List<GetAws Secret Manager Connector Credential Oidc Authentication> 
- Authentication using OIDC.
- assumeRoles GetAws Secret Manager Connector Credential Assume Role[] 
- Connect using STS assume role.
- inheritFrom booleanDelegate 
- Inherit the credentials from from the delegate.
- manuals
GetAws Secret Manager Connector Credential Manual[] 
- Specify the AWS key and secret used for authenticating.
- oidcAuthentications GetAws Secret Manager Connector Credential Oidc Authentication[] 
- Authentication using OIDC.
- assume_roles Sequence[GetAws Secret Manager Connector Credential Assume Role] 
- Connect using STS assume role.
- inherit_from_ booldelegate 
- Inherit the credentials from from the delegate.
- manuals
Sequence[GetAws Secret Manager Connector Credential Manual] 
- Specify the AWS key and secret used for authenticating.
- oidc_authentications Sequence[GetAws Secret Manager Connector Credential Oidc Authentication] 
- Authentication using OIDC.
- assumeRoles List<Property Map>
- Connect using STS assume role.
- inheritFrom BooleanDelegate 
- Inherit the credentials from from the delegate.
- manuals List<Property Map>
- Specify the AWS key and secret used for authenticating.
- oidcAuthentications List<Property Map>
- Authentication using OIDC.
GetAwsSecretManagerConnectorCredentialAssumeRole       
- Duration int
- The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
- ExternalId string
- If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
- RoleArn string
- The ARN of the role to assume.
- Duration int
- The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
- ExternalId string
- If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
- RoleArn string
- The ARN of the role to assume.
- duration Integer
- The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
- externalId String
- If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
- roleArn String
- The ARN of the role to assume.
- duration number
- The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
- externalId string
- If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
- roleArn string
- The ARN of the role to assume.
- duration int
- The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
- external_id str
- If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
- role_arn str
- The ARN of the role to assume.
- duration Number
- The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
- externalId String
- If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
- roleArn String
- The ARN of the role to assume.
GetAwsSecretManagerConnectorCredentialManual      
- AccessKey stringRef 
- The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- SecretKey stringRef 
- The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- AccessKey stringRef 
- The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- SecretKey stringRef 
- The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- accessKey StringRef 
- The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- secretKey StringRef 
- The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- accessKey stringRef 
- The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- secretKey stringRef 
- The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- access_key_ strref 
- The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- secret_key_ strref 
- The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- accessKey StringRef 
- The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
- secretKey StringRef 
- The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
GetAwsSecretManagerConnectorCredentialOidcAuthentication       
- IamRole stringArn 
- The IAM role ARN to assume.
- IamRole stringArn 
- The IAM role ARN to assume.
- iamRole StringArn 
- The IAM role ARN to assume.
- iamRole stringArn 
- The IAM role ARN to assume.
- iam_role_ strarn 
- The IAM role ARN to assume.
- iamRole StringArn 
- The IAM role ARN to assume.
Package Details
- Repository
- harness pulumi/pulumi-harness
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the harnessTerraform Provider.
