Builder
Properties
If you include SecretString
or SecretBinary
, then Secrets Manager creates a new version for the secret, and this parameter specifies the unique identifier for the new version.
The description of the secret.
The ARN, key ID, or alias of the KMS key that Secrets Manager uses to encrypt new secret versions as well as any existing versions with the staging labels AWSCURRENT
, AWSPENDING
, or AWSPREVIOUS
. If you don't have kms:Encrypt
permission to the new key, Secrets Manager does not re-ecrypt existing secret versions with the new key. For more information about versions and staging labels, see Concepts: Version.
The binary data to encrypt and store in the new version of the secret. We recommend that you store your binary data in a file and then pass the contents of the file as a parameter.
The text data to encrypt and store in the new version of the secret. We recommend you use a JSON structure of key/value pairs for your secret value.