---
title: "POST /usc-update"
method: POST
path: "/usc-update"
tags: ["Universal Secrets Connector"]
---

# POST /usc-update

`POST /usc-update`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/usc-update`
- Auth: none declared

## Request body

- UscUpdate: uscUpdate is a command that updates a secret in a Universal Secrets Connector
  - `aws-account-id` string: The AWS account ID that contains the secret. Required when the connector spans multiple account IDs.
  - `binary-value` boolean: Use this option if the universal secrets value is a base64 encoded binary
  - `description` string: Description of the universal secrets
  - `json` boolean: Set output format to JSON
  - `namespace` string: The namespace (relevant for Hashi vault target)
  - `object-type` string
  - `pfx-password` string: Optional, the passphrase that protects the private key within the pfx certificate (Relevant only for Azure KV certificates)
  - `region` string: The AWS region that contains the secret (AWS only). If empty, uses the target region.
  - `remote-secret-activation-date` string: Activation date for the secret on the remote endpoint, in UTC format: YYYY-MM-DDTHH:MM:SSZ
  - `remote-secret-expires` string: Expiration time for the secret on the remote endpoint, in UTC format: YYYY-MM-DDTHH:MM:SSZ
  - `secret-id` string, required: The universal secrets id (or name, for AWS, Azure, K8s or Hashi vault targets) to update
  - `selected-repositories` string: GitHub selected repositories (required for GitHub USC when repository-access is 'selected' or for repository scope) Comma-separated repository names (e.g., "repo1,repo2")
  - `tags` object: Tags for the universal secrets
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication
  - `usc-encryption-key` string: Optional, The name of the remote key that used to encrypt the secret value (if empty, the default key will be used)
  - `usc-name` string, required: Name of the Universal Secrets Connector item
  - `value` string, required: Value of the universal secrets item, either text or base64 encoded binary

## Response `200`

uscUpdateResponse wraps response body.

- UscUpdateSecretOutput
  - `name` string
  - `secret_id` string
  - `version_id` string

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/infrastructure-connectivity.md) - [All operations](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/revisions/62dc62fea89d?raw)
