AKakeyless
Rotated Secrets

POST /rotated-secret-create-hashi-vault

Changed on

Request

  • Base URL
    https://api.akeyless.io
  • URL
    https://api.akeyless.io/rotated-secret-create-hashi-vault
  • Auth
    none declared

Request body

ara-enabledboolean

Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.

AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag.

auto-rotatestring
delete_protectionstring

Protection from accidental deletion of this object [true/false]

descriptionstring

Description of the object

enable-agentic-runtime-authorityboolean

EnableAra is the documented spelling of AraEnabled. Both set the same field; --ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working.

enable-ai-quorumboolean

Turns on AI Quorum checks for this item.

input-rulestring[]

Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input)

item-custom-fieldsobject

Additional custom fields to associate with the item

jsonboolean

Set output format to JSON

keystring
lock-on-readstring

Lock this secret after each successful value read

lock-ttlstring

Lock TTL in minutes

max-versionsstring

Set the maximum number of versions, limited by the account settings defaults.

namestring required

Rotated secret name

output-rulestring[]

Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)

password-lengthstring

The length of the password to be generated

rotate-on-unlockstring

Rotate this secret after it is unlocked

rotation-event-instring[]

How many days before the rotation of the item would you like to be notified

rotation-hourinteger
rotation-intervalstring
skip-dry-runboolean

If set, dry-run will be skipped [true/false]

tagsstring[]

Add tags attached to this object

target-namestring required

The target name to associate

tokenstring

Authentication token (see /auth and /configure)

uid-tokenstring

The universal identity token, Required only for universal_identity authentication

use-capital-lettersstring

Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false]

use-lower-lettersstring

Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false]

use-numbersstring

Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false]

use-special-charactersstring

Example request

{
  "use-special-characters": "! @ # $. [true/false]"
}

Response

rotatedSecretCreateHashiVaultResponse wraps response body.

namestring

Changes