v1

latestOpenAPI 3.0.02026-07-246171,3332.1 MB
v2

post/dynamic-secret-create-aws

Request body

access-modestring
admin-rotation-interval-daysinteger

Admin credentials rotation interval (days)

aws-access-key-idstring

Access Key ID

aws-access-secret-keystring

Secret Access Key

aws-external-idstring

The AWS External ID associated with the AWS role (relevant only for assume_role mode)

aws-role-arnsstring

AWS Role ARNs to be used in the Assume Role operation (relevant only for assume_role mode)

aws-user-console-accessboolean

AWS User console access

aws-user-groupsstring

AWS User groups

aws-user-policiesstring

AWS User policies

aws-user-programmatic-accessboolean

Enable AWS User programmatic access

custom-username-templatestring

Customize how temporary usernames are generated using go template

delete_protectionstring

Protection from accidental deletion of this object [true/false]

descriptionstring

Description of the object

enable-admin-rotationboolean

Automatic admin credentials rotation

input-rulestring[]

Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).

item-custom-fieldsobject

Additional custom fields to associate with the item

jsonboolean

Set output format to JSON

namestring required

Dynamic secret name

output-rulestring[]

Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)

password-lengthstring

The length of the password to be generated

producer-encryption-key-namestring

Dynamic producer encryption key

regionstring

Region

secure-access-aws-account-idstring

The AWS account id

secure-access-aws-native-cliboolean

The AWS native cli

secure-access-bastion-issuerstring

Deprecated. use secure-access-certificate-issuer

secure-access-certificate-issuerstring

Path to the SSH Certificate Issuer for your Akeyless Secure Access

secure-access-delayinteger

The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds

secure-access-enablestring

Enable/Disable secure remote access [true/false]

secure-access-webboolean

Enable Web Secure Remote Access

secure-access-web-browsingboolean

Secure browser via Akeyless's Secure Remote Access (SRA)

secure-access-web-proxyboolean

Web-Proxy via Akeyless's Secure Remote Access (SRA)

session-tagsstring

String of Key value session tags comma separated, relevant only for Assumed Role

tagsstring[]

Add tags attached to this object

target-namestring

Target name

tokenstring

Authentication token (see /auth and /configure)

transitive-tag-keysstring

String of transitive tag keys space separated, relevant only for Assumed Role

uid-tokenstring

The universal identity token, Required only for universal_identity authentication

user-ttlstring

User TTL

Response

dynamicSecretCreateAwsResponse wraps response body.