Optional 29

• block_public_policybool, default nullMakes an optional API call to Zelkova to validate the Resource Policy to prevent broad access to your secret
• createbool, default trueDetermines whether resources will be created (affects all resources)
• create_policybool, default falseDetermines whether a policy will be created
• create_random_passwordbool, default falseDetermines whether an ephemeral random password will be generated for secret_string_wo
• create_secret_versionbool, default trueDetermines whether a secret version is created. Set to false when secret values are managed externally (manually, by CI, or by a rotation process outside Terraform)
• descriptionstring, default nullA description of the secret
• enable_rotationbool, default falseDetermines whether secret rotation is enabled
• force_overwrite_replica_secretbool, default nullAccepts boolean value to specify whether to overwrite a secret with the same name in the destination Region
• ignore_secret_changesbool, default falseDetermines whether or not Terraform will ignore changes made externally to secret_string or secret_binary. Changing this value after creation is a destructive operation
• kms_key_idstring, default nullARN or Id of the AWS KMS key to be used to encrypt the secret values in the versions stored in this secret. If you need to reference a CMK in a different account, you can use only the key ARN. If you don't specify this value, then Secrets Manager defaults to using the AWS account's default KMS key (the one named aws/secretsmanager
• namestring, default nullFriendly name of the new secret. The secret name can consist of uppercase letters, lowercase letters, digits, and any of the following characters: /_+=.@-
• name_prefixstring, default nullCreates a unique name beginning with the specified prefix
• override_policy_documentslist(string), default []List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank sids will override statements with the same sid
• policy_statementsmap({...}), default nullA map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
• random_password_lengthnumber, default 32The length of the generated random password
• random_password_override_specialstring, default "!@#$%&*()-_=+[]{}<>:?"Supply your own list of special characters to use for string generation. This overrides the default character list in the special argument
• recovery_window_in_daysnumber, default nullNumber of days that AWS Secrets Manager waits before it can delete the secret. This value can be 0 to force deletion without recovery or range from 7 to 30 days. The default value is 30
• regionstring, default nullRegion where the resource(s) will be managed. Defaults to the Region set in the provider configuration
• replicamap({...}), default nullConfiguration block to support secret replication
• rotate_immediatelybool, default nullSpecifies whether to rotate the secret immediately or wait until the next scheduled rotation window. The rotation schedule is defined in rotation_rules
• rotation_lambda_arnstring, default ""Specifies the ARN of the Lambda function that can rotate the secret
• rotation_rulesobject({...}), default nullA structure that defines the rotation configuration for this secret
• secret_binarystring, default nullSpecifies binary data that you want to encrypt and store in this version of the secret. This is required if secret_string or secret_string_wo is not set. Needs to be encoded to base64
• secret_stringstring, default nullSpecifies text data that you want to encrypt and store in this version of the secret. This is required if secret_binary or secret_string_wo is not set
• secret_string_wostring, default nullSpecifies text data that you want to encrypt and store in this version of the secret. This is required if secret_binary or secret_string is not set
• secret_string_wo_versionstring, default nullUsed together with secret_string_wo to trigger an update. Increment this value when an update to secret_string_wo is required
• source_policy_documentslist(string), default []List of IAM policy documents that are merged together into the exported document. Statements must have unique sids
• tagsmap(string), default {}A map of tags to add to all resources
• version_stageslist(string), default nullSpecifies a list of staging labels that are attached to this version of the secret. A staging label must be unique to a single version of the secret