| access_mode |
String |
|
|
| admin_email |
String |
Admin user email |
|
| ara_enabled |
Boolean |
Enable or disable Agentic Runtime Authority rule enforcement for this item. Mirrors commands.AgenticRulesParams.AraEnabled. |
[optional] |
| delete_protection |
String |
Protection from accidental deletion of this object [true/false] |
[optional] |
| description |
String |
Description of the object |
[optional] |
| enable_agentic_runtime_authority |
Boolean |
EnableAra is the documented spelling of AraEnabled; --ara-enabled shipped first and stays as an undocumented alias. |
[optional] |
| enable_ai_quorum |
Boolean |
Turns on AI Quorum checks for this item. |
[optional] |
| fixed_user_claim_keyname |
String |
For externally provided users, denotes the key-name of IdP claim to extract the username from |
[optional][default to 'ext_email'] |
| gcp_key |
String |
Base64-encoded service account private key text |
[optional] |
| group_email |
String |
A group email, relevant only for group access-mode |
[optional] |
| group_role |
String |
|
[optional] |
| input_rule |
Array<String> |
Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout). |
[optional] |
| item_custom_fields |
Hash<String, String> |
Additional custom fields to associate with the item |
[optional] |
| json |
Boolean |
Set output format to JSON |
[optional][default to false] |
| name |
String |
Dynamic secret name |
|
| output_rule |
Array<String> |
Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) |
[optional] |
| producer_encryption_key_name |
String |
Dynamic producer encryption key |
[optional] |
| role_name |
String |
Name of the admin role to assign to the user, relevant only for role access-mode |
[optional] |
| role_scope |
String |
|
[optional] |
| secure_access_delay |
Integer |
The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds |
[optional] |
| secure_access_enable |
String |
Enable/Disable secure remote access [true/false] |
[optional] |
| secure_access_url |
String |
Destination URL to inject secrets |
[optional] |
| secure_access_web |
Boolean |
Enable Web Secure Remote Access |
[optional][default to true] |
| secure_access_web_browsing |
Boolean |
Secure browser via Akeyless's Secure Remote Access (SRA) |
[optional][default to false] |
| secure_access_web_proxy |
Boolean |
Web-Proxy via Akeyless's Secure Remote Access (SRA) |
[optional][default to false] |
| skip_dry_run |
String |
If set, dry-run will be skipped |
[optional] |
| tags |
Array<String> |
Add tags attached to this object |
[optional] |
| target_name |
String |
Name of existing target to use in dynamic secret creation |
[optional] |
| token |
String |
Authentication token (see `/auth` and `/configure`) |
[optional] |
| uid_token |
String |
The universal identity token, Required only for universal_identity authentication |
[optional] |
| user_ttl |
String |
User TTL |
[optional][default to '60m'] |