| providerType |
String |
|
[optional] |
| araEnabled |
Boolean |
Enable or disable Agentic Runtime Authority rule enforcement for this item. Mirrors commands.AgenticRulesParams.AraEnabled. |
[optional] |
| bindDn |
String |
Bind DN |
[optional] |
| bindDnPassword |
String |
Bind DN Password |
[optional] |
| customUsernameTemplate |
String |
Customize how temporary usernames are generated using go template |
[optional] |
| deleteProtection |
String |
Protection from accidental deletion of this object [true/false] |
[optional] |
| description |
String |
Description of the object |
[optional] |
| externalUsername |
String |
Externally provided username [true/false] |
[optional] [default to 'false'] |
| fixedUserClaimKeyname |
String |
For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true) |
[optional] [default to 'ext_username'] |
| groupDn |
String |
Group DN which the temporary user should be added |
[optional] |
| hostProvider |
String |
Host provider type [explicit/target], Default Host provider is explicit, Relevant only for SRA items. |
[optional] |
| inputRule |
[String] |
Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout). |
[optional] |
| itemCustomFields |
{String: String} |
Additional custom fields to associate with the item |
[optional] |
| json |
Boolean |
Set output format to JSON |
[optional] [default to false] |
| ldapCaCert |
String |
CA Certificate File Content |
[optional] |
| ldapUrl |
String |
LDAP Server URL |
[optional] |
| name |
String |
Dynamic secret name |
|
| outputRule |
[String] |
Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) |
[optional] |
| passwordLength |
String |
The length of the password to be generated |
[optional] |
| producerEncryptionKeyName |
String |
Dynamic producer encryption key |
[optional] |
| secureAccessBastionIssuer |
String |
Deprecated. use secure-access-certificate-issuer |
[optional] |
| secureAccessCertificateIssuer |
String |
Path to the SSH Certificate Issuer for your Akeyless Secure Access |
[optional] |
| secureAccessDelay |
Number |
The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds |
[optional] |
| secureAccessEnable |
String |
Enable/Disable secure remote access [true/false] |
[optional] |
| secureAccessEnforceHostsRestriction |
Boolean |
Enforce connections only to allowed SRA hosts |
[optional] |
| secureAccessHost |
[String] |
Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers) |
[optional] |
| secureAccessRdGatewayServer |
String |
RD Gateway server |
[optional] |
| secureAccessRdpDomain |
String |
Required when the Dynamic Secret is used for a domain user |
[optional] |
| skipDryRun |
String |
If set, dry-run will be skipped |
[optional] |
| tags |
[String] |
Add tags attached to this object |
[optional] |
| target |
[String] |
A list of targets to be associated with an SRA item, To specify multiple targets use argument multiple times |
[optional] |
| targetName |
String |
Target name |
[optional] |
| token |
String |
Authentication token (see `/auth` and `/configure`) |
[optional] |
| tokenExpiration |
String |
Token expiration |
[optional] |
| uidToken |
String |
The universal identity token, Required only for universal_identity authentication |
[optional] |
| useCapitalLetters |
String |
Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] |
[optional] |
| useLowerLetters |
String |
Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] |
[optional] |
| useNumbers |
String |
Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] |
[optional] |
| useSpecialCharacters |
String |
|
[optional] |
| userAttribute |
String |
User Attribute |
[optional] |
| userDn |
String |
User DN |
[optional] |
| userTtl |
String |
User TTL |
[optional] [default to '60m'] |