SshCertIssuer

akeyless 2.0.1, Apr 27 26

Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community

akeyless-community/terraform-provider-akeyless

Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community

akeyless-community/terraform-provider-akeyless

Create SshCertIssuer Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new SshCertIssuer(name: string, args: SshCertIssuerArgs, opts?: CustomResourceOptions);

@overload
def SshCertIssuer(resource_name: str,
                  args: SshCertIssuerArgs,
                  opts: Optional[ResourceOptions] = None)

@overload
def SshCertIssuer(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  allowed_users: Optional[str] = None,
                  ttl: Optional[float] = None,
                  signer_key_name: Optional[str] = None,
                  secure_access_bastion_ssh: Optional[str] = None,
                  secure_access_enforce_hosts_restriction: Optional[bool] = None,
                  host_provider: Optional[str] = None,
                  item_custom_fields: Optional[Mapping[str, str]] = None,
                  name: Optional[str] = None,
                  principals: Optional[str] = None,
                  provider_type: Optional[str] = None,
                  secure_access_api: Optional[str] = None,
                  secure_access_bastion_api: Optional[str] = None,
                  extensions: Optional[Mapping[str, str]] = None,
                  secure_access_enable: Optional[str] = None,
                  fixed_user_claim_keyname: Optional[str] = None,
                  secure_access_gateway: Optional[str] = None,
                  secure_access_hosts: Optional[Sequence[str]] = None,
                  secure_access_ssh: Optional[str] = None,
                  secure_access_ssh_creds_user: Optional[str] = None,
                  secure_access_use_internal_bastion: Optional[bool] = None,
                  secure_access_use_internal_ssh_access: Optional[bool] = None,
                  description: Optional[str] = None,
                  ssh_cert_issuer_id: Optional[str] = None,
                  tags: Optional[Sequence[str]] = None,
                  targets: Optional[Sequence[str]] = None,
                  delete_protection: Optional[bool] = None)

func NewSshCertIssuer(ctx *Context, name string, args SshCertIssuerArgs, opts ...ResourceOption) (*SshCertIssuer, error)

public SshCertIssuer(string name, SshCertIssuerArgs args, CustomResourceOptions? opts = null)

public SshCertIssuer(String name, SshCertIssuerArgs args)
public SshCertIssuer(String name, SshCertIssuerArgs args, CustomResourceOptions options)

type: akeyless:SshCertIssuer
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args SshCertIssuerArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args SshCertIssuerArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args SshCertIssuerArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args SshCertIssuerArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args SshCertIssuerArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var sshCertIssuerResource = new Akeyless.SshCertIssuer("sshCertIssuerResource", new()
{
    AllowedUsers = "string",
    Ttl = 0,
    SignerKeyName = "string",
    SecureAccessBastionSsh = "string",
    SecureAccessEnforceHostsRestriction = false,
    HostProvider = "string",
    ItemCustomFields = 
    {
        { "string", "string" },
    },
    Name = "string",
    Principals = "string",
    ProviderType = "string",
    SecureAccessApi = "string",
    SecureAccessBastionApi = "string",
    Extensions = 
    {
        { "string", "string" },
    },
    SecureAccessEnable = "string",
    FixedUserClaimKeyname = "string",
    SecureAccessGateway = "string",
    SecureAccessHosts = new[]
    {
        "string",
    },
    SecureAccessSsh = "string",
    SecureAccessSshCredsUser = "string",
    SecureAccessUseInternalBastion = false,
    SecureAccessUseInternalSshAccess = false,
    Description = "string",
    SshCertIssuerId = "string",
    Tags = new[]
    {
        "string",
    },
    Targets = new[]
    {
        "string",
    },
    DeleteProtection = false,
});

example, err := akeyless.NewSshCertIssuer(ctx, "sshCertIssuerResource", &akeyless.SshCertIssuerArgs{
	AllowedUsers:                        pulumi.String("string"),
	Ttl:                                 pulumi.Float64(0),
	SignerKeyName:                       pulumi.String("string"),
	SecureAccessBastionSsh:              pulumi.String("string"),
	SecureAccessEnforceHostsRestriction: pulumi.Bool(false),
	HostProvider:                        pulumi.String("string"),
	ItemCustomFields: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Name:                   pulumi.String("string"),
	Principals:             pulumi.String("string"),
	ProviderType:           pulumi.String("string"),
	SecureAccessApi:        pulumi.String("string"),
	SecureAccessBastionApi: pulumi.String("string"),
	Extensions: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	SecureAccessEnable:    pulumi.String("string"),
	FixedUserClaimKeyname: pulumi.String("string"),
	SecureAccessGateway:   pulumi.String("string"),
	SecureAccessHosts: pulumi.StringArray{
		pulumi.String("string"),
	},
	SecureAccessSsh:                  pulumi.String("string"),
	SecureAccessSshCredsUser:         pulumi.String("string"),
	SecureAccessUseInternalBastion:   pulumi.Bool(false),
	SecureAccessUseInternalSshAccess: pulumi.Bool(false),
	Description:                      pulumi.String("string"),
	SshCertIssuerId:                  pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	Targets: pulumi.StringArray{
		pulumi.String("string"),
	},
	DeleteProtection: pulumi.Bool(false),
})

var sshCertIssuerResource = new SshCertIssuer("sshCertIssuerResource", SshCertIssuerArgs.builder()
    .allowedUsers("string")
    .ttl(0.0)
    .signerKeyName("string")
    .secureAccessBastionSsh("string")
    .secureAccessEnforceHostsRestriction(false)
    .hostProvider("string")
    .itemCustomFields(Map.of("string", "string"))
    .name("string")
    .principals("string")
    .providerType("string")
    .secureAccessApi("string")
    .secureAccessBastionApi("string")
    .extensions(Map.of("string", "string"))
    .secureAccessEnable("string")
    .fixedUserClaimKeyname("string")
    .secureAccessGateway("string")
    .secureAccessHosts("string")
    .secureAccessSsh("string")
    .secureAccessSshCredsUser("string")
    .secureAccessUseInternalBastion(false)
    .secureAccessUseInternalSshAccess(false)
    .description("string")
    .sshCertIssuerId("string")
    .tags("string")
    .targets("string")
    .deleteProtection(false)
    .build());

ssh_cert_issuer_resource = akeyless.SshCertIssuer("sshCertIssuerResource",
    allowed_users="string",
    ttl=float(0),
    signer_key_name="string",
    secure_access_bastion_ssh="string",
    secure_access_enforce_hosts_restriction=False,
    host_provider="string",
    item_custom_fields={
        "string": "string",
    },
    name="string",
    principals="string",
    provider_type="string",
    secure_access_api="string",
    secure_access_bastion_api="string",
    extensions={
        "string": "string",
    },
    secure_access_enable="string",
    fixed_user_claim_keyname="string",
    secure_access_gateway="string",
    secure_access_hosts=["string"],
    secure_access_ssh="string",
    secure_access_ssh_creds_user="string",
    secure_access_use_internal_bastion=False,
    secure_access_use_internal_ssh_access=False,
    description="string",
    ssh_cert_issuer_id="string",
    tags=["string"],
    targets=["string"],
    delete_protection=False)

const sshCertIssuerResource = new akeyless.SshCertIssuer("sshCertIssuerResource", {
    allowedUsers: "string",
    ttl: 0,
    signerKeyName: "string",
    secureAccessBastionSsh: "string",
    secureAccessEnforceHostsRestriction: false,
    hostProvider: "string",
    itemCustomFields: {
        string: "string",
    },
    name: "string",
    principals: "string",
    providerType: "string",
    secureAccessApi: "string",
    secureAccessBastionApi: "string",
    extensions: {
        string: "string",
    },
    secureAccessEnable: "string",
    fixedUserClaimKeyname: "string",
    secureAccessGateway: "string",
    secureAccessHosts: ["string"],
    secureAccessSsh: "string",
    secureAccessSshCredsUser: "string",
    secureAccessUseInternalBastion: false,
    secureAccessUseInternalSshAccess: false,
    description: "string",
    sshCertIssuerId: "string",
    tags: ["string"],
    targets: ["string"],
    deleteProtection: false,
});

type: akeyless:SshCertIssuer
properties:
    allowedUsers: string
    deleteProtection: false
    description: string
    extensions:
        string: string
    fixedUserClaimKeyname: string
    hostProvider: string
    itemCustomFields:
        string: string
    name: string
    principals: string
    providerType: string
    secureAccessApi: string
    secureAccessBastionApi: string
    secureAccessBastionSsh: string
    secureAccessEnable: string
    secureAccessEnforceHostsRestriction: false
    secureAccessGateway: string
    secureAccessHosts:
        - string
    secureAccessSsh: string
    secureAccessSshCredsUser: string
    secureAccessUseInternalBastion: false
    secureAccessUseInternalSshAccess: false
    signerKeyName: string
    sshCertIssuerId: string
    tags:
        - string
    targets:
        - string
    ttl: 0

SshCertIssuer Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The SshCertIssuer resource accepts the following input properties:

AllowedUsers string: Users allowed to fetch the certificate, e.g root,ubuntu
SignerKeyName string: A key to sign the certificate with
Ttl double: The requested Time To Live for the certificate, in seconds
DeleteProtection bool: Protection from accidental deletion of this object [true/false]
Description string: Description of the object
Extensions Dictionary<string, string>: Signed certificates with extensions, e.g permit-port-forwarding=""
FixedUserClaimKeyname string: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
HostProvider string: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
ItemCustomFields Dictionary<string, string>: Additional custom fields to associate with the item
Name string: SSH certificate issuer name
Principals string: Signed certificates with principal, e.g examplerole1,examplerole2
ProviderType string: Provider type
SecureAccessApi string: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
SecureAccessBastionApi string: Deprecated. use secure-access-api
SecureAccessBastionSsh string: Deprecated. use secure-access-ssh
SecureAccessEnable string: Enable/Disable secure remote access [true/false]
SecureAccessEnforceHostsRestriction bool: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
SecureAccessGateway string: Secure Access Gateway
SecureAccessHosts List<string>: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
SecureAccessSsh string: Bastion's SSH server. E.g. my.sra-server:22
SecureAccessSshCredsUser string: SSH username to connect to target server, must be in 'Allowed Users' list
SecureAccessUseInternalBastion bool: Deprecated. Use secure-access-use-internal-ssh-access
SecureAccessUseInternalSshAccess bool: Use internal SSH Access
SshCertIssuerId string: The ID of this resource.
Tags List<string>: List of the tags attached to this key
Targets List<string>: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times

AllowedUsers string: Users allowed to fetch the certificate, e.g root,ubuntu
SignerKeyName string: A key to sign the certificate with
Ttl float64: The requested Time To Live for the certificate, in seconds
DeleteProtection bool: Protection from accidental deletion of this object [true/false]
Description string: Description of the object
Extensions map[string]string: Signed certificates with extensions, e.g permit-port-forwarding=""
FixedUserClaimKeyname string: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
HostProvider string: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
ItemCustomFields map[string]string: Additional custom fields to associate with the item
Name string: SSH certificate issuer name
Principals string: Signed certificates with principal, e.g examplerole1,examplerole2
ProviderType string: Provider type
SecureAccessApi string: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
SecureAccessBastionApi string: Deprecated. use secure-access-api
SecureAccessBastionSsh string: Deprecated. use secure-access-ssh
SecureAccessEnable string: Enable/Disable secure remote access [true/false]
SecureAccessEnforceHostsRestriction bool: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
SecureAccessGateway string: Secure Access Gateway
SecureAccessHosts []string: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
SecureAccessSsh string: Bastion's SSH server. E.g. my.sra-server:22
SecureAccessSshCredsUser string: SSH username to connect to target server, must be in 'Allowed Users' list
SecureAccessUseInternalBastion bool: Deprecated. Use secure-access-use-internal-ssh-access
SecureAccessUseInternalSshAccess bool: Use internal SSH Access
SshCertIssuerId string: The ID of this resource.
Tags []string: List of the tags attached to this key
Targets []string: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times

allowedUsers String: Users allowed to fetch the certificate, e.g root,ubuntu
signerKeyName String: A key to sign the certificate with
ttl Double: The requested Time To Live for the certificate, in seconds
deleteProtection Boolean: Protection from accidental deletion of this object [true/false]
description String: Description of the object
extensions Map<String,String>: Signed certificates with extensions, e.g permit-port-forwarding=""
fixedUserClaimKeyname String: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
hostProvider String: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
itemCustomFields Map<String,String>: Additional custom fields to associate with the item
name String: SSH certificate issuer name
principals String: Signed certificates with principal, e.g examplerole1,examplerole2
providerType String: Provider type
secureAccessApi String: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
secureAccessBastionApi String: Deprecated. use secure-access-api
secureAccessBastionSsh String: Deprecated. use secure-access-ssh
secureAccessEnable String: Enable/Disable secure remote access [true/false]
secureAccessEnforceHostsRestriction Boolean: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
secureAccessGateway String: Secure Access Gateway
secureAccessHosts List<String>: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
secureAccessSsh String: Bastion's SSH server. E.g. my.sra-server:22
secureAccessSshCredsUser String: SSH username to connect to target server, must be in 'Allowed Users' list
secureAccessUseInternalBastion Boolean: Deprecated. Use secure-access-use-internal-ssh-access
secureAccessUseInternalSshAccess Boolean: Use internal SSH Access
sshCertIssuerId String: The ID of this resource.
tags List<String>: List of the tags attached to this key
targets List<String>: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times

allowedUsers string: Users allowed to fetch the certificate, e.g root,ubuntu
signerKeyName string: A key to sign the certificate with
ttl number: The requested Time To Live for the certificate, in seconds
deleteProtection boolean: Protection from accidental deletion of this object [true/false]
description string: Description of the object
extensions {[key: string]: string}: Signed certificates with extensions, e.g permit-port-forwarding=""
fixedUserClaimKeyname string: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
hostProvider string: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
itemCustomFields {[key: string]: string}: Additional custom fields to associate with the item
name string: SSH certificate issuer name
principals string: Signed certificates with principal, e.g examplerole1,examplerole2
providerType string: Provider type
secureAccessApi string: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
secureAccessBastionApi string: Deprecated. use secure-access-api
secureAccessBastionSsh string: Deprecated. use secure-access-ssh
secureAccessEnable string: Enable/Disable secure remote access [true/false]
secureAccessEnforceHostsRestriction boolean: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
secureAccessGateway string: Secure Access Gateway
secureAccessHosts string[]: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
secureAccessSsh string: Bastion's SSH server. E.g. my.sra-server:22
secureAccessSshCredsUser string: SSH username to connect to target server, must be in 'Allowed Users' list
secureAccessUseInternalBastion boolean: Deprecated. Use secure-access-use-internal-ssh-access
secureAccessUseInternalSshAccess boolean: Use internal SSH Access
sshCertIssuerId string: The ID of this resource.
tags string[]: List of the tags attached to this key
targets string[]: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times

allowed_users str: Users allowed to fetch the certificate, e.g root,ubuntu
signer_key_name str: A key to sign the certificate with
ttl float: The requested Time To Live for the certificate, in seconds
delete_protection bool: Protection from accidental deletion of this object [true/false]
description str: Description of the object
extensions Mapping[str, str]: Signed certificates with extensions, e.g permit-port-forwarding=""
fixed_user_claim_keyname str: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
host_provider str: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
item_custom_fields Mapping[str, str]: Additional custom fields to associate with the item
name str: SSH certificate issuer name
principals str: Signed certificates with principal, e.g examplerole1,examplerole2
provider_type str: Provider type
secure_access_api str: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
secure_access_bastion_api str: Deprecated. use secure-access-api
secure_access_bastion_ssh str: Deprecated. use secure-access-ssh
secure_access_enable str: Enable/Disable secure remote access [true/false]
secure_access_enforce_hosts_restriction bool: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
secure_access_gateway str: Secure Access Gateway
secure_access_hosts Sequence[str]: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
secure_access_ssh str: Bastion's SSH server. E.g. my.sra-server:22
secure_access_ssh_creds_user str: SSH username to connect to target server, must be in 'Allowed Users' list
secure_access_use_internal_bastion bool: Deprecated. Use secure-access-use-internal-ssh-access
secure_access_use_internal_ssh_access bool: Use internal SSH Access
ssh_cert_issuer_id str: The ID of this resource.
tags Sequence[str]: List of the tags attached to this key
targets Sequence[str]: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times

allowedUsers String: Users allowed to fetch the certificate, e.g root,ubuntu
signerKeyName String: A key to sign the certificate with
ttl Number: The requested Time To Live for the certificate, in seconds
deleteProtection Boolean: Protection from accidental deletion of this object [true/false]
description String: Description of the object
extensions Map<String>: Signed certificates with extensions, e.g permit-port-forwarding=""
fixedUserClaimKeyname String: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
hostProvider String: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
itemCustomFields Map<String>: Additional custom fields to associate with the item
name String: SSH certificate issuer name
principals String: Signed certificates with principal, e.g examplerole1,examplerole2
providerType String: Provider type
secureAccessApi String: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
secureAccessBastionApi String: Deprecated. use secure-access-api
secureAccessBastionSsh String: Deprecated. use secure-access-ssh
secureAccessEnable String: Enable/Disable secure remote access [true/false]
secureAccessEnforceHostsRestriction Boolean: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
secureAccessGateway String: Secure Access Gateway
secureAccessHosts List<String>: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
secureAccessSsh String: Bastion's SSH server. E.g. my.sra-server:22
secureAccessSshCredsUser String: SSH username to connect to target server, must be in 'Allowed Users' list
secureAccessUseInternalBastion Boolean: Deprecated. Use secure-access-use-internal-ssh-access
secureAccessUseInternalSshAccess Boolean: Use internal SSH Access
sshCertIssuerId String: The ID of this resource.
tags List<String>: List of the tags attached to this key
targets List<String>: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times

Outputs

All input properties are implicitly available as output properties. Additionally, the SshCertIssuer resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing SshCertIssuer Resource

Get an existing SshCertIssuer resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SshCertIssuerState, opts?: CustomResourceOptions): SshCertIssuer

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allowed_users: Optional[str] = None,
        delete_protection: Optional[bool] = None,
        description: Optional[str] = None,
        extensions: Optional[Mapping[str, str]] = None,
        fixed_user_claim_keyname: Optional[str] = None,
        host_provider: Optional[str] = None,
        item_custom_fields: Optional[Mapping[str, str]] = None,
        name: Optional[str] = None,
        principals: Optional[str] = None,
        provider_type: Optional[str] = None,
        secure_access_api: Optional[str] = None,
        secure_access_bastion_api: Optional[str] = None,
        secure_access_bastion_ssh: Optional[str] = None,
        secure_access_enable: Optional[str] = None,
        secure_access_enforce_hosts_restriction: Optional[bool] = None,
        secure_access_gateway: Optional[str] = None,
        secure_access_hosts: Optional[Sequence[str]] = None,
        secure_access_ssh: Optional[str] = None,
        secure_access_ssh_creds_user: Optional[str] = None,
        secure_access_use_internal_bastion: Optional[bool] = None,
        secure_access_use_internal_ssh_access: Optional[bool] = None,
        signer_key_name: Optional[str] = None,
        ssh_cert_issuer_id: Optional[str] = None,
        tags: Optional[Sequence[str]] = None,
        targets: Optional[Sequence[str]] = None,
        ttl: Optional[float] = None) -> SshCertIssuer

func GetSshCertIssuer(ctx *Context, name string, id IDInput, state *SshCertIssuerState, opts ...ResourceOption) (*SshCertIssuer, error)

public static SshCertIssuer Get(string name, Input<string> id, SshCertIssuerState? state, CustomResourceOptions? opts = null)

public static SshCertIssuer get(String name, Output<String> id, SshCertIssuerState state, CustomResourceOptions options)

resources:  _:    type: akeyless:SshCertIssuer    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AllowedUsers string: Users allowed to fetch the certificate, e.g root,ubuntu
DeleteProtection bool: Protection from accidental deletion of this object [true/false]
Description string: Description of the object
Extensions Dictionary<string, string>: Signed certificates with extensions, e.g permit-port-forwarding=""
FixedUserClaimKeyname string: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
HostProvider string: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
ItemCustomFields Dictionary<string, string>: Additional custom fields to associate with the item
Name string: SSH certificate issuer name
Principals string: Signed certificates with principal, e.g examplerole1,examplerole2
ProviderType string: Provider type
SecureAccessApi string: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
SecureAccessBastionApi string: Deprecated. use secure-access-api
SecureAccessBastionSsh string: Deprecated. use secure-access-ssh
SecureAccessEnable string: Enable/Disable secure remote access [true/false]
SecureAccessEnforceHostsRestriction bool: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
SecureAccessGateway string: Secure Access Gateway
SecureAccessHosts List<string>: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
SecureAccessSsh string: Bastion's SSH server. E.g. my.sra-server:22
SecureAccessSshCredsUser string: SSH username to connect to target server, must be in 'Allowed Users' list
SecureAccessUseInternalBastion bool: Deprecated. Use secure-access-use-internal-ssh-access
SecureAccessUseInternalSshAccess bool: Use internal SSH Access
SignerKeyName string: A key to sign the certificate with
SshCertIssuerId string: The ID of this resource.
Tags List<string>: List of the tags attached to this key
Targets List<string>: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times
Ttl double: The requested Time To Live for the certificate, in seconds

AllowedUsers string: Users allowed to fetch the certificate, e.g root,ubuntu
DeleteProtection bool: Protection from accidental deletion of this object [true/false]
Description string: Description of the object
Extensions map[string]string: Signed certificates with extensions, e.g permit-port-forwarding=""
FixedUserClaimKeyname string: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
HostProvider string: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
ItemCustomFields map[string]string: Additional custom fields to associate with the item
Name string: SSH certificate issuer name
Principals string: Signed certificates with principal, e.g examplerole1,examplerole2
ProviderType string: Provider type
SecureAccessApi string: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
SecureAccessBastionApi string: Deprecated. use secure-access-api
SecureAccessBastionSsh string: Deprecated. use secure-access-ssh
SecureAccessEnable string: Enable/Disable secure remote access [true/false]
SecureAccessEnforceHostsRestriction bool: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
SecureAccessGateway string: Secure Access Gateway
SecureAccessHosts []string: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
SecureAccessSsh string: Bastion's SSH server. E.g. my.sra-server:22
SecureAccessSshCredsUser string: SSH username to connect to target server, must be in 'Allowed Users' list
SecureAccessUseInternalBastion bool: Deprecated. Use secure-access-use-internal-ssh-access
SecureAccessUseInternalSshAccess bool: Use internal SSH Access
SignerKeyName string: A key to sign the certificate with
SshCertIssuerId string: The ID of this resource.
Tags []string: List of the tags attached to this key
Targets []string: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times
Ttl float64: The requested Time To Live for the certificate, in seconds

allowedUsers String: Users allowed to fetch the certificate, e.g root,ubuntu
deleteProtection Boolean: Protection from accidental deletion of this object [true/false]
description String: Description of the object
extensions Map<String,String>: Signed certificates with extensions, e.g permit-port-forwarding=""
fixedUserClaimKeyname String: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
hostProvider String: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
itemCustomFields Map<String,String>: Additional custom fields to associate with the item
name String: SSH certificate issuer name
principals String: Signed certificates with principal, e.g examplerole1,examplerole2
providerType String: Provider type
secureAccessApi String: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
secureAccessBastionApi String: Deprecated. use secure-access-api
secureAccessBastionSsh String: Deprecated. use secure-access-ssh
secureAccessEnable String: Enable/Disable secure remote access [true/false]
secureAccessEnforceHostsRestriction Boolean: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
secureAccessGateway String: Secure Access Gateway
secureAccessHosts List<String>: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
secureAccessSsh String: Bastion's SSH server. E.g. my.sra-server:22
secureAccessSshCredsUser String: SSH username to connect to target server, must be in 'Allowed Users' list
secureAccessUseInternalBastion Boolean: Deprecated. Use secure-access-use-internal-ssh-access
secureAccessUseInternalSshAccess Boolean: Use internal SSH Access
signerKeyName String: A key to sign the certificate with
sshCertIssuerId String: The ID of this resource.
tags List<String>: List of the tags attached to this key
targets List<String>: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times
ttl Double: The requested Time To Live for the certificate, in seconds

allowedUsers string: Users allowed to fetch the certificate, e.g root,ubuntu
deleteProtection boolean: Protection from accidental deletion of this object [true/false]
description string: Description of the object
extensions {[key: string]: string}: Signed certificates with extensions, e.g permit-port-forwarding=""
fixedUserClaimKeyname string: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
hostProvider string: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
itemCustomFields {[key: string]: string}: Additional custom fields to associate with the item
name string: SSH certificate issuer name
principals string: Signed certificates with principal, e.g examplerole1,examplerole2
providerType string: Provider type
secureAccessApi string: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
secureAccessBastionApi string: Deprecated. use secure-access-api
secureAccessBastionSsh string: Deprecated. use secure-access-ssh
secureAccessEnable string: Enable/Disable secure remote access [true/false]
secureAccessEnforceHostsRestriction boolean: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
secureAccessGateway string: Secure Access Gateway
secureAccessHosts string[]: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
secureAccessSsh string: Bastion's SSH server. E.g. my.sra-server:22
secureAccessSshCredsUser string: SSH username to connect to target server, must be in 'Allowed Users' list
secureAccessUseInternalBastion boolean: Deprecated. Use secure-access-use-internal-ssh-access
secureAccessUseInternalSshAccess boolean: Use internal SSH Access
signerKeyName string: A key to sign the certificate with
sshCertIssuerId string: The ID of this resource.
tags string[]: List of the tags attached to this key
targets string[]: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times
ttl number: The requested Time To Live for the certificate, in seconds

allowed_users str: Users allowed to fetch the certificate, e.g root,ubuntu
delete_protection bool: Protection from accidental deletion of this object [true/false]
description str: Description of the object
extensions Mapping[str, str]: Signed certificates with extensions, e.g permit-port-forwarding=""
fixed_user_claim_keyname str: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
host_provider str: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
item_custom_fields Mapping[str, str]: Additional custom fields to associate with the item
name str: SSH certificate issuer name
principals str: Signed certificates with principal, e.g examplerole1,examplerole2
provider_type str: Provider type
secure_access_api str: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
secure_access_bastion_api str: Deprecated. use secure-access-api
secure_access_bastion_ssh str: Deprecated. use secure-access-ssh
secure_access_enable str: Enable/Disable secure remote access [true/false]
secure_access_enforce_hosts_restriction bool: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
secure_access_gateway str: Secure Access Gateway
secure_access_hosts Sequence[str]: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
secure_access_ssh str: Bastion's SSH server. E.g. my.sra-server:22
secure_access_ssh_creds_user str: SSH username to connect to target server, must be in 'Allowed Users' list
secure_access_use_internal_bastion bool: Deprecated. Use secure-access-use-internal-ssh-access
secure_access_use_internal_ssh_access bool: Use internal SSH Access
signer_key_name str: A key to sign the certificate with
ssh_cert_issuer_id str: The ID of this resource.
tags Sequence[str]: List of the tags attached to this key
targets Sequence[str]: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times
ttl float: The requested Time To Live for the certificate, in seconds

allowedUsers String: Users allowed to fetch the certificate, e.g root,ubuntu
deleteProtection Boolean: Protection from accidental deletion of this object [true/false]
description String: Description of the object
extensions Map<String>: Signed certificates with extensions, e.g permit-port-forwarding=""
fixedUserClaimKeyname String: For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)
hostProvider String: Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret
itemCustomFields Map<String>: Additional custom fields to associate with the item
name String: SSH certificate issuer name
principals String: Signed certificates with principal, e.g examplerole1,examplerole2
providerType String: Provider type
secureAccessApi String: Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900
secureAccessBastionApi String: Deprecated. use secure-access-api
secureAccessBastionSsh String: Deprecated. use secure-access-ssh
secureAccessEnable String: Enable/Disable secure remote access [true/false]
secureAccessEnforceHostsRestriction Boolean: Enable this flag to enforce connections only to the hosts listed in --secure-access-host
secureAccessGateway String: Secure Access Gateway
secureAccessHosts List<String>: Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)
secureAccessSsh String: Bastion's SSH server. E.g. my.sra-server:22
secureAccessSshCredsUser String: SSH username to connect to target server, must be in 'Allowed Users' list
secureAccessUseInternalBastion Boolean: Deprecated. Use secure-access-use-internal-ssh-access
secureAccessUseInternalSshAccess Boolean: Use internal SSH Access
signerKeyName String: A key to sign the certificate with
sshCertIssuerId String: The ID of this resource.
tags List<String>: List of the tags attached to this key
targets List<String>: A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times
ttl Number: The requested Time To Live for the certificate, in seconds