Sign in

v1

latestOpenAPI 3.0.02026-07-246171,3332.1 MB
v2

post/dynamic-secret-update-gcp

Request body

access-typestring
custom-username-templatestring

Customize how temporary usernames are generated using go template

delete_protectionstring

Protection from accidental deletion of this object [true/false]

descriptionstring

Description of the object

fixed-user-claim-keynamestring

For externally provided users, denotes the key-name of IdP claim to extract the username from (Relevant only when --access-type=external)

gcp-cred-typestring
gcp-keystring

Base64-encoded service account private key text

gcp-key-algostring

Service account key algorithm, e.g. KEY_ALG_RSA_1024 (Relevant only when --access-type=sa and --gcp-cred-type=key)

gcp-project-idstring

GCP Project ID override for dynamic secret operations

gcp-sa-emailstring

The email of the fixed service account to generate keys or tokens for (Relevant only when --access-type=sa and --service-account-type=fixed)

gcp-token-scopesstring

Access token scopes list, e.g. scope1,scope2 (Relevant only when --access-type=sa; required when --gcp-cred-type=token)

input-rulestring[]

Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).

item-custom-fieldsobject

Additional custom fields to associate with the item

jsonboolean

Set output format to JSON

namestring required

Dynamic secret name

new-namestring

Dynamic secret name

output-rulestring[]

Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)

producer-encryption-key-namestring

Dynamic producer encryption key

role-bindingstring

Role binding definitions in JSON format (Relevant only when --access-type=sa and --service-account-type=dynamic)

role-namesstring

Comma-separated list of GCP roles to assign to the user (Relevant only when --access-type=external)

secure-access-delayinteger

The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds

secure-access-enablestring

Enable/Disable secure remote access [true/false]

secure-access-urlstring

Destination URL to inject secrets

secure-access-web-browsingboolean

Secure browser via Akeyless's Secure Remote Access (SRA)

secure-access-web-proxyboolean

Web-Proxy via Akeyless's Secure Remote Access (SRA)

service-account-typestring

The type of the GCP service account. Options [fixed, dynamic] (Relevant only when --access-type=sa)

tagsstring[]

Add tags attached to this object

target-namestring

Target name

tokenstring

Authentication token (see /auth and /configure)

uid-tokenstring

The universal identity token, Required only for universal_identity authentication

user-ttlstring

User TTL

Response

dynamicSecretUpdateGcpResponse wraps response body.