1. Packages
  2. Packages
  3. Akeyless Provider
  4. API Docs
  5. DynamicSecretEks
Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community
Schema (JSON)
akeyless-community/terraform-provider-akeyless

akeyless.DynamicSecretEks

Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community
Schema (JSON)
akeyless-community/terraform-provider-akeyless

    Amazon Elastic Kubernetes Service (Amazon EKS) dynamic secret

    Create DynamicSecretEks Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DynamicSecretEks(name: string, args?: DynamicSecretEksArgs, opts?: CustomResourceOptions);
    @overload
def DynamicSecretEks(resource_name: str,
                     args: Optional[DynamicSecretEksArgs] = None,
                     opts: Optional[ResourceOptions] = None)

@overload
def DynamicSecretEks(resource_name: str,
                     opts: Optional[ResourceOptions] = None,
                     delete_protection: Optional[str] = None,
                     description: Optional[str] = None,
                     dynamic_secret_eks_id: Optional[str] = None,
                     eks_access_key_id: Optional[str] = None,
                     eks_assume_role: Optional[str] = None,
                     eks_cluster_ca_cert: Optional[str] = None,
                     eks_cluster_endpoint: Optional[str] = None,
                     eks_cluster_name: Optional[str] = None,
                     eks_region: Optional[str] = None,
                     eks_secret_access_key: Optional[str] = None,
                     encryption_key_name: Optional[str] = None,
                     item_custom_fields: Optional[Mapping[str, str]] = None,
                     name: Optional[str] = None,
                     secure_access_allow_port_forwading: Optional[bool] = None,
                     secure_access_bastion_issuer: Optional[str] = None,
                     secure_access_certificate_issuer: Optional[str] = None,
                     secure_access_cluster_endpoint: Optional[str] = None,
                     secure_access_delay: Optional[float] = None,
                     secure_access_enable: Optional[str] = None,
                     secure_access_web: Optional[bool] = None,
                     tags: Optional[Sequence[str]] = None,
                     target_name: Optional[str] = None,
                     user_ttl: Optional[str] = None)
    func NewDynamicSecretEks(ctx *Context, name string, args *DynamicSecretEksArgs, opts ...ResourceOption) (*DynamicSecretEks, error)
    public DynamicSecretEks(string name, DynamicSecretEksArgs? args = null, CustomResourceOptions? opts = null)
    public DynamicSecretEks(String name, DynamicSecretEksArgs args)
public DynamicSecretEks(String name, DynamicSecretEksArgs args, CustomResourceOptions options)

    type: akeyless:DynamicSecretEks
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DynamicSecretEksArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DynamicSecretEksArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DynamicSecretEksArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DynamicSecretEksArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DynamicSecretEksArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var dynamicSecretEksResource = new Akeyless.DynamicSecretEks("dynamicSecretEksResource", new()
{
    DeleteProtection = "string",
    Description = "string",
    DynamicSecretEksId = "string",
    EksAccessKeyId = "string",
    EksAssumeRole = "string",
    EksClusterCaCert = "string",
    EksClusterEndpoint = "string",
    EksClusterName = "string",
    EksRegion = "string",
    EksSecretAccessKey = "string",
    EncryptionKeyName = "string",
    ItemCustomFields = 
    {
        { "string", "string" },
    },
    Name = "string",
    SecureAccessAllowPortForwading = false,
    SecureAccessCertificateIssuer = "string",
    SecureAccessClusterEndpoint = "string",
    SecureAccessDelay = 0,
    SecureAccessEnable = "string",
    SecureAccessWeb = false,
    Tags = new[]
    {
        "string",
    },
    TargetName = "string",
    UserTtl = "string",
});

    example, err := akeyless.NewDynamicSecretEks(ctx, "dynamicSecretEksResource", &akeyless.DynamicSecretEksArgs{
	DeleteProtection:   pulumi.String("string"),
	Description:        pulumi.String("string"),
	DynamicSecretEksId: pulumi.String("string"),
	EksAccessKeyId:     pulumi.String("string"),
	EksAssumeRole:      pulumi.String("string"),
	EksClusterCaCert:   pulumi.String("string"),
	EksClusterEndpoint: pulumi.String("string"),
	EksClusterName:     pulumi.String("string"),
	EksRegion:          pulumi.String("string"),
	EksSecretAccessKey: pulumi.String("string"),
	EncryptionKeyName:  pulumi.String("string"),
	ItemCustomFields: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Name:                           pulumi.String("string"),
	SecureAccessAllowPortForwading: pulumi.Bool(false),
	SecureAccessCertificateIssuer:  pulumi.String("string"),
	SecureAccessClusterEndpoint:    pulumi.String("string"),
	SecureAccessDelay:              pulumi.Float64(0),
	SecureAccessEnable:             pulumi.String("string"),
	SecureAccessWeb:                pulumi.Bool(false),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	TargetName: pulumi.String("string"),
	UserTtl:    pulumi.String("string"),
})

    var dynamicSecretEksResource = new DynamicSecretEks("dynamicSecretEksResource", DynamicSecretEksArgs.builder()
    .deleteProtection("string")
    .description("string")
    .dynamicSecretEksId("string")
    .eksAccessKeyId("string")
    .eksAssumeRole("string")
    .eksClusterCaCert("string")
    .eksClusterEndpoint("string")
    .eksClusterName("string")
    .eksRegion("string")
    .eksSecretAccessKey("string")
    .encryptionKeyName("string")
    .itemCustomFields(Map.of("string", "string"))
    .name("string")
    .secureAccessAllowPortForwading(false)
    .secureAccessCertificateIssuer("string")
    .secureAccessClusterEndpoint("string")
    .secureAccessDelay(0.0)
    .secureAccessEnable("string")
    .secureAccessWeb(false)
    .tags("string")
    .targetName("string")
    .userTtl("string")
    .build());

    dynamic_secret_eks_resource = akeyless.DynamicSecretEks("dynamicSecretEksResource",
    delete_protection="string",
    description="string",
    dynamic_secret_eks_id="string",
    eks_access_key_id="string",
    eks_assume_role="string",
    eks_cluster_ca_cert="string",
    eks_cluster_endpoint="string",
    eks_cluster_name="string",
    eks_region="string",
    eks_secret_access_key="string",
    encryption_key_name="string",
    item_custom_fields={
        "string": "string",
    },
    name="string",
    secure_access_allow_port_forwading=False,
    secure_access_certificate_issuer="string",
    secure_access_cluster_endpoint="string",
    secure_access_delay=float(0),
    secure_access_enable="string",
    secure_access_web=False,
    tags=["string"],
    target_name="string",
    user_ttl="string")

    const dynamicSecretEksResource = new akeyless.DynamicSecretEks("dynamicSecretEksResource", {
    deleteProtection: "string",
    description: "string",
    dynamicSecretEksId: "string",
    eksAccessKeyId: "string",
    eksAssumeRole: "string",
    eksClusterCaCert: "string",
    eksClusterEndpoint: "string",
    eksClusterName: "string",
    eksRegion: "string",
    eksSecretAccessKey: "string",
    encryptionKeyName: "string",
    itemCustomFields: {
        string: "string",
    },
    name: "string",
    secureAccessAllowPortForwading: false,
    secureAccessCertificateIssuer: "string",
    secureAccessClusterEndpoint: "string",
    secureAccessDelay: 0,
    secureAccessEnable: "string",
    secureAccessWeb: false,
    tags: ["string"],
    targetName: "string",
    userTtl: "string",
});

    type: akeyless:DynamicSecretEks
properties:
    deleteProtection: string
    description: string
    dynamicSecretEksId: string
    eksAccessKeyId: string
    eksAssumeRole: string
    eksClusterCaCert: string
    eksClusterEndpoint: string
    eksClusterName: string
    eksRegion: string
    eksSecretAccessKey: string
    encryptionKeyName: string
    itemCustomFields:
        string: string
    name: string
    secureAccessAllowPortForwading: false
    secureAccessCertificateIssuer: string
    secureAccessClusterEndpoint: string
    secureAccessDelay: 0
    secureAccessEnable: string
    secureAccessWeb: false
    tags:
        - string
    targetName: string
    userTtl: string

    DynamicSecretEks Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DynamicSecretEks resource accepts the following input properties:

    DeleteProtection string
    Protection from accidental deletion of this object [true/false]
    Description string
    Description of the object
    DynamicSecretEksId string
    The ID of this resource.
    EksAccessKeyId string
    EKS Access Key ID
    EksAssumeRole string
    Role ARN. Role to assume when connecting to the EKS cluster
    EksClusterCaCert string
    EKS Cluster certificate. Base 64 encoded certificate.
    EksClusterEndpoint string
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    EksClusterName string
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    EksRegion string
    EKS Region
    EksSecretAccessKey string
    EKS Secret Access Key
    EncryptionKeyName string
    Encrypt dynamic secret details with following key
    ItemCustomFields Dictionary<string, string>
    Additional custom fields to associate with the item
    Name string
    Dynamic secret name
    SecureAccessAllowPortForwading bool
    Enable Port forwarding while using CLI access.
    SecureAccessBastionIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    SecureAccessCertificateIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    SecureAccessClusterEndpoint string
    The K8s cluster endpoint URL
    SecureAccessDelay double
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    SecureAccessEnable string
    Enable/Disable secure remote access, [true/false]
    SecureAccessWeb bool
    Enable Web Secure Remote Access
    Tags List<string>
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    TargetName string
    Name of existing target to use in dynamic secret creation
    UserTtl string
    User TTL
    DeleteProtection string
    Protection from accidental deletion of this object [true/false]
    Description string
    Description of the object
    DynamicSecretEksId string
    The ID of this resource.
    EksAccessKeyId string
    EKS Access Key ID
    EksAssumeRole string
    Role ARN. Role to assume when connecting to the EKS cluster
    EksClusterCaCert string
    EKS Cluster certificate. Base 64 encoded certificate.
    EksClusterEndpoint string
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    EksClusterName string
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    EksRegion string
    EKS Region
    EksSecretAccessKey string
    EKS Secret Access Key
    EncryptionKeyName string
    Encrypt dynamic secret details with following key
    ItemCustomFields map[string]string
    Additional custom fields to associate with the item
    Name string
    Dynamic secret name
    SecureAccessAllowPortForwading bool
    Enable Port forwarding while using CLI access.
    SecureAccessBastionIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    SecureAccessCertificateIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    SecureAccessClusterEndpoint string
    The K8s cluster endpoint URL
    SecureAccessDelay float64
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    SecureAccessEnable string
    Enable/Disable secure remote access, [true/false]
    SecureAccessWeb bool
    Enable Web Secure Remote Access
    Tags []string
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    TargetName string
    Name of existing target to use in dynamic secret creation
    UserTtl string
    User TTL
    deleteProtection String
    Protection from accidental deletion of this object [true/false]
    description String
    Description of the object
    dynamicSecretEksId String
    The ID of this resource.
    eksAccessKeyId String
    EKS Access Key ID
    eksAssumeRole String
    Role ARN. Role to assume when connecting to the EKS cluster
    eksClusterCaCert String
    EKS Cluster certificate. Base 64 encoded certificate.
    eksClusterEndpoint String
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    eksClusterName String
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    eksRegion String
    EKS Region
    eksSecretAccessKey String
    EKS Secret Access Key
    encryptionKeyName String
    Encrypt dynamic secret details with following key
    itemCustomFields Map<String,String>
    Additional custom fields to associate with the item
    name String
    Dynamic secret name
    secureAccessAllowPortForwading Boolean
    Enable Port forwarding while using CLI access.
    secureAccessBastionIssuer String
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    secureAccessCertificateIssuer String
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    secureAccessClusterEndpoint String
    The K8s cluster endpoint URL
    secureAccessDelay Double
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    secureAccessEnable String
    Enable/Disable secure remote access, [true/false]
    secureAccessWeb Boolean
    Enable Web Secure Remote Access
    tags List<String>
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    targetName String
    Name of existing target to use in dynamic secret creation
    userTtl String
    User TTL
    deleteProtection string
    Protection from accidental deletion of this object [true/false]
    description string
    Description of the object
    dynamicSecretEksId string
    The ID of this resource.
    eksAccessKeyId string
    EKS Access Key ID
    eksAssumeRole string
    Role ARN. Role to assume when connecting to the EKS cluster
    eksClusterCaCert string
    EKS Cluster certificate. Base 64 encoded certificate.
    eksClusterEndpoint string
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    eksClusterName string
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    eksRegion string
    EKS Region
    eksSecretAccessKey string
    EKS Secret Access Key
    encryptionKeyName string
    Encrypt dynamic secret details with following key
    itemCustomFields {[key: string]: string}
    Additional custom fields to associate with the item
    name string
    Dynamic secret name
    secureAccessAllowPortForwading boolean
    Enable Port forwarding while using CLI access.
    secureAccessBastionIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    secureAccessCertificateIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    secureAccessClusterEndpoint string
    The K8s cluster endpoint URL
    secureAccessDelay number
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    secureAccessEnable string
    Enable/Disable secure remote access, [true/false]
    secureAccessWeb boolean
    Enable Web Secure Remote Access
    tags string[]
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    targetName string
    Name of existing target to use in dynamic secret creation
    userTtl string
    User TTL
    delete_protection str
    Protection from accidental deletion of this object [true/false]
    description str
    Description of the object
    dynamic_secret_eks_id str
    The ID of this resource.
    eks_access_key_id str
    EKS Access Key ID
    eks_assume_role str
    Role ARN. Role to assume when connecting to the EKS cluster
    eks_cluster_ca_cert str
    EKS Cluster certificate. Base 64 encoded certificate.
    eks_cluster_endpoint str
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    eks_cluster_name str
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    eks_region str
    EKS Region
    eks_secret_access_key str
    EKS Secret Access Key
    encryption_key_name str
    Encrypt dynamic secret details with following key
    item_custom_fields Mapping[str, str]
    Additional custom fields to associate with the item
    name str
    Dynamic secret name
    secure_access_allow_port_forwading bool
    Enable Port forwarding while using CLI access.
    secure_access_bastion_issuer str
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    secure_access_certificate_issuer str
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    secure_access_cluster_endpoint str
    The K8s cluster endpoint URL
    secure_access_delay float
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    secure_access_enable str
    Enable/Disable secure remote access, [true/false]
    secure_access_web bool
    Enable Web Secure Remote Access
    tags Sequence[str]
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    target_name str
    Name of existing target to use in dynamic secret creation
    user_ttl str
    User TTL
    deleteProtection String
    Protection from accidental deletion of this object [true/false]
    description String
    Description of the object
    dynamicSecretEksId String
    The ID of this resource.
    eksAccessKeyId String
    EKS Access Key ID
    eksAssumeRole String
    Role ARN. Role to assume when connecting to the EKS cluster
    eksClusterCaCert String
    EKS Cluster certificate. Base 64 encoded certificate.
    eksClusterEndpoint String
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    eksClusterName String
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    eksRegion String
    EKS Region
    eksSecretAccessKey String
    EKS Secret Access Key
    encryptionKeyName String
    Encrypt dynamic secret details with following key
    itemCustomFields Map<String>
    Additional custom fields to associate with the item
    name String
    Dynamic secret name
    secureAccessAllowPortForwading Boolean
    Enable Port forwarding while using CLI access.
    secureAccessBastionIssuer String
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    secureAccessCertificateIssuer String
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    secureAccessClusterEndpoint String
    The K8s cluster endpoint URL
    secureAccessDelay Number
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    secureAccessEnable String
    Enable/Disable secure remote access, [true/false]
    secureAccessWeb Boolean
    Enable Web Secure Remote Access
    tags List<String>
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    targetName String
    Name of existing target to use in dynamic secret creation
    userTtl String
    User TTL

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DynamicSecretEks resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing DynamicSecretEks Resource

    Get an existing DynamicSecretEks resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DynamicSecretEksState, opts?: CustomResourceOptions): DynamicSecretEks
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        delete_protection: Optional[str] = None,
        description: Optional[str] = None,
        dynamic_secret_eks_id: Optional[str] = None,
        eks_access_key_id: Optional[str] = None,
        eks_assume_role: Optional[str] = None,
        eks_cluster_ca_cert: Optional[str] = None,
        eks_cluster_endpoint: Optional[str] = None,
        eks_cluster_name: Optional[str] = None,
        eks_region: Optional[str] = None,
        eks_secret_access_key: Optional[str] = None,
        encryption_key_name: Optional[str] = None,
        item_custom_fields: Optional[Mapping[str, str]] = None,
        name: Optional[str] = None,
        secure_access_allow_port_forwading: Optional[bool] = None,
        secure_access_bastion_issuer: Optional[str] = None,
        secure_access_certificate_issuer: Optional[str] = None,
        secure_access_cluster_endpoint: Optional[str] = None,
        secure_access_delay: Optional[float] = None,
        secure_access_enable: Optional[str] = None,
        secure_access_web: Optional[bool] = None,
        tags: Optional[Sequence[str]] = None,
        target_name: Optional[str] = None,
        user_ttl: Optional[str] = None) -> DynamicSecretEks
    func GetDynamicSecretEks(ctx *Context, name string, id IDInput, state *DynamicSecretEksState, opts ...ResourceOption) (*DynamicSecretEks, error)
    public static DynamicSecretEks Get(string name, Input<string> id, DynamicSecretEksState? state, CustomResourceOptions? opts = null)
    public static DynamicSecretEks get(String name, Output<String> id, DynamicSecretEksState state, CustomResourceOptions options)
    resources:  _:    type: akeyless:DynamicSecretEks    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    DeleteProtection string
    Protection from accidental deletion of this object [true/false]
    Description string
    Description of the object
    DynamicSecretEksId string
    The ID of this resource.
    EksAccessKeyId string
    EKS Access Key ID
    EksAssumeRole string
    Role ARN. Role to assume when connecting to the EKS cluster
    EksClusterCaCert string
    EKS Cluster certificate. Base 64 encoded certificate.
    EksClusterEndpoint string
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    EksClusterName string
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    EksRegion string
    EKS Region
    EksSecretAccessKey string
    EKS Secret Access Key
    EncryptionKeyName string
    Encrypt dynamic secret details with following key
    ItemCustomFields Dictionary<string, string>
    Additional custom fields to associate with the item
    Name string
    Dynamic secret name
    SecureAccessAllowPortForwading bool
    Enable Port forwarding while using CLI access.
    SecureAccessBastionIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    SecureAccessCertificateIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    SecureAccessClusterEndpoint string
    The K8s cluster endpoint URL
    SecureAccessDelay double
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    SecureAccessEnable string
    Enable/Disable secure remote access, [true/false]
    SecureAccessWeb bool
    Enable Web Secure Remote Access
    Tags List<string>
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    TargetName string
    Name of existing target to use in dynamic secret creation
    UserTtl string
    User TTL
    DeleteProtection string
    Protection from accidental deletion of this object [true/false]
    Description string
    Description of the object
    DynamicSecretEksId string
    The ID of this resource.
    EksAccessKeyId string
    EKS Access Key ID
    EksAssumeRole string
    Role ARN. Role to assume when connecting to the EKS cluster
    EksClusterCaCert string
    EKS Cluster certificate. Base 64 encoded certificate.
    EksClusterEndpoint string
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    EksClusterName string
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    EksRegion string
    EKS Region
    EksSecretAccessKey string
    EKS Secret Access Key
    EncryptionKeyName string
    Encrypt dynamic secret details with following key
    ItemCustomFields map[string]string
    Additional custom fields to associate with the item
    Name string
    Dynamic secret name
    SecureAccessAllowPortForwading bool
    Enable Port forwarding while using CLI access.
    SecureAccessBastionIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    SecureAccessCertificateIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    SecureAccessClusterEndpoint string
    The K8s cluster endpoint URL
    SecureAccessDelay float64
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    SecureAccessEnable string
    Enable/Disable secure remote access, [true/false]
    SecureAccessWeb bool
    Enable Web Secure Remote Access
    Tags []string
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    TargetName string
    Name of existing target to use in dynamic secret creation
    UserTtl string
    User TTL
    deleteProtection String
    Protection from accidental deletion of this object [true/false]
    description String
    Description of the object
    dynamicSecretEksId String
    The ID of this resource.
    eksAccessKeyId String
    EKS Access Key ID
    eksAssumeRole String
    Role ARN. Role to assume when connecting to the EKS cluster
    eksClusterCaCert String
    EKS Cluster certificate. Base 64 encoded certificate.
    eksClusterEndpoint String
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    eksClusterName String
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    eksRegion String
    EKS Region
    eksSecretAccessKey String
    EKS Secret Access Key
    encryptionKeyName String
    Encrypt dynamic secret details with following key
    itemCustomFields Map<String,String>
    Additional custom fields to associate with the item
    name String
    Dynamic secret name
    secureAccessAllowPortForwading Boolean
    Enable Port forwarding while using CLI access.
    secureAccessBastionIssuer String
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    secureAccessCertificateIssuer String
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    secureAccessClusterEndpoint String
    The K8s cluster endpoint URL
    secureAccessDelay Double
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    secureAccessEnable String
    Enable/Disable secure remote access, [true/false]
    secureAccessWeb Boolean
    Enable Web Secure Remote Access
    tags List<String>
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    targetName String
    Name of existing target to use in dynamic secret creation
    userTtl String
    User TTL
    deleteProtection string
    Protection from accidental deletion of this object [true/false]
    description string
    Description of the object
    dynamicSecretEksId string
    The ID of this resource.
    eksAccessKeyId string
    EKS Access Key ID
    eksAssumeRole string
    Role ARN. Role to assume when connecting to the EKS cluster
    eksClusterCaCert string
    EKS Cluster certificate. Base 64 encoded certificate.
    eksClusterEndpoint string
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    eksClusterName string
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    eksRegion string
    EKS Region
    eksSecretAccessKey string
    EKS Secret Access Key
    encryptionKeyName string
    Encrypt dynamic secret details with following key
    itemCustomFields {[key: string]: string}
    Additional custom fields to associate with the item
    name string
    Dynamic secret name
    secureAccessAllowPortForwading boolean
    Enable Port forwarding while using CLI access.
    secureAccessBastionIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    secureAccessCertificateIssuer string
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    secureAccessClusterEndpoint string
    The K8s cluster endpoint URL
    secureAccessDelay number
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    secureAccessEnable string
    Enable/Disable secure remote access, [true/false]
    secureAccessWeb boolean
    Enable Web Secure Remote Access
    tags string[]
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    targetName string
    Name of existing target to use in dynamic secret creation
    userTtl string
    User TTL
    delete_protection str
    Protection from accidental deletion of this object [true/false]
    description str
    Description of the object
    dynamic_secret_eks_id str
    The ID of this resource.
    eks_access_key_id str
    EKS Access Key ID
    eks_assume_role str
    Role ARN. Role to assume when connecting to the EKS cluster
    eks_cluster_ca_cert str
    EKS Cluster certificate. Base 64 encoded certificate.
    eks_cluster_endpoint str
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    eks_cluster_name str
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    eks_region str
    EKS Region
    eks_secret_access_key str
    EKS Secret Access Key
    encryption_key_name str
    Encrypt dynamic secret details with following key
    item_custom_fields Mapping[str, str]
    Additional custom fields to associate with the item
    name str
    Dynamic secret name
    secure_access_allow_port_forwading bool
    Enable Port forwarding while using CLI access.
    secure_access_bastion_issuer str
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    secure_access_certificate_issuer str
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    secure_access_cluster_endpoint str
    The K8s cluster endpoint URL
    secure_access_delay float
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    secure_access_enable str
    Enable/Disable secure remote access, [true/false]
    secure_access_web bool
    Enable Web Secure Remote Access
    tags Sequence[str]
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    target_name str
    Name of existing target to use in dynamic secret creation
    user_ttl str
    User TTL
    deleteProtection String
    Protection from accidental deletion of this object [true/false]
    description String
    Description of the object
    dynamicSecretEksId String
    The ID of this resource.
    eksAccessKeyId String
    EKS Access Key ID
    eksAssumeRole String
    Role ARN. Role to assume when connecting to the EKS cluster
    eksClusterCaCert String
    EKS Cluster certificate. Base 64 encoded certificate.
    eksClusterEndpoint String
    EKS Cluster endpoint. https:// , \n\n of the cluster.
    eksClusterName String
    EKS cluster name. Must match the EKS cluster name you want to connect to.
    eksRegion String
    EKS Region
    eksSecretAccessKey String
    EKS Secret Access Key
    encryptionKeyName String
    Encrypt dynamic secret details with following key
    itemCustomFields Map<String>
    Additional custom fields to associate with the item
    name String
    Dynamic secret name
    secureAccessAllowPortForwading Boolean
    Enable Port forwarding while using CLI access.
    secureAccessBastionIssuer String
    Path to the SSH Certificate Issuer for your Akeyless Bastion

    Deprecated: Deprecated

    secureAccessCertificateIssuer String
    Path to the SSH Certificate Issuer for your Akeyless Secure Access
    secureAccessClusterEndpoint String
    The K8s cluster endpoint URL
    secureAccessDelay Number
    The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds
    secureAccessEnable String
    Enable/Disable secure remote access, [true/false]
    secureAccessWeb Boolean
    Enable Web Secure Remote Access
    tags List<String>
    List of the tags attached to this secret. To specify multiple tags use argument multiple times: -t Tag1 -t Tag2
    targetName String
    Name of existing target to use in dynamic secret creation
    userTtl String
    User TTL

    Package Details

    Repository
    akeyless akeyless-community/terraform-provider-akeyless
    License
    Notes
    This Pulumi package is based on the akeyless Terraform Provider.
    Viewing docs for akeyless 2.0.1
    published on Monday, Apr 27, 2026 by akeyless-community
    Schema (JSON)
    akeyless-community/terraform-provider-akeyless
      Try Pulumi Cloud free. Your team will thank you.