Package software.amazon.awscdk.services.secretsmanager

Class CfnRotationSchedule.HostedRotationLambdaProperty.Builder

java.lang.Object

software.amazon.awscdk.services.secretsmanager.CfnRotationSchedule.HostedRotationLambdaProperty.Builder

All Implemented Interfaces:

software.amazon.jsii.Builder<CfnRotationSchedule.HostedRotationLambdaProperty>

Enclosing interface:

CfnRotationSchedule.HostedRotationLambdaProperty

@Stability(Stable)
public static final class CfnRotationSchedule.HostedRotationLambdaProperty.Builder
extends Object
implements software.amazon.jsii.Builder<CfnRotationSchedule.HostedRotationLambdaProperty>

A builder for CfnRotationSchedule.HostedRotationLambdaProperty

Constructor Summary

Constructors

Constructor	Description
Builder()

Method Summary

Modifier and Type	Method	Description
CfnRotationSchedule.HostedRotationLambdaProperty	build()	Builds the configured instance.
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	excludeCharacters(String excludeCharacters)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getExcludeCharacters()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	kmsKeyArn(String kmsKeyArn)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getKmsKeyArn()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	masterSecretArn(String masterSecretArn)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getMasterSecretArn()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	masterSecretKmsKeyArn(String masterSecretKmsKeyArn)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getMasterSecretKmsKeyArn()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	rotationLambdaName(String rotationLambdaName)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getRotationLambdaName()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	rotationType(String rotationType)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getRotationType()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	runtime(String runtime)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getRuntime()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	superuserSecretArn(String superuserSecretArn)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getSuperuserSecretArn()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	superuserSecretKmsKeyArn(String superuserSecretKmsKeyArn)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getSuperuserSecretKmsKeyArn()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	vpcSecurityGroupIds(String vpcSecurityGroupIds)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getVpcSecurityGroupIds()
CfnRotationSchedule.HostedRotationLambdaProperty.Builder	vpcSubnetIds(String vpcSubnetIds)	Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getVpcSubnetIds()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Builder

public Builder()

Method Details

rotationType

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder rotationType(String rotationType)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getRotationType()

Parameters:

rotationType - The rotation template to base the rotation function on, one of the following:. This parameter is required.

• MySQLSingleUser to use the template SecretsManagerRDSMySQLRotationSingleUser .
• MySQLMultiUser to use the template SecretsManagerRDSMySQLRotationMultiUser .
• PostgreSQLSingleUser to use the template SecretsManagerRDSPostgreSQLRotationSingleUser
• PostgreSQLMultiUser to use the template SecretsManagerRDSPostgreSQLRotationMultiUser .
• OracleSingleUser to use the template SecretsManagerRDSOracleRotationSingleUser .
• OracleMultiUser to use the template SecretsManagerRDSOracleRotationMultiUser .
• MariaDBSingleUser to use the template SecretsManagerRDSMariaDBRotationSingleUser .
• MariaDBMultiUser to use the template SecretsManagerRDSMariaDBRotationMultiUser .
• SQLServerSingleUser to use the template SecretsManagerRDSSQLServerRotationSingleUser .
• SQLServerMultiUser to use the template SecretsManagerRDSSQLServerRotationMultiUser .
• RedshiftSingleUser to use the template SecretsManagerRedshiftRotationSingleUsr .
• RedshiftMultiUser to use the template SecretsManagerRedshiftRotationMultiUser .
• MongoDBSingleUser to use the template SecretsManagerMongoDBRotationSingleUser .
• MongoDBMultiUser to use the template SecretsManagerMongoDBRotationMultiUser .

Returns:

this

excludeCharacters

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder excludeCharacters(String excludeCharacters)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getExcludeCharacters()

Parameters:

excludeCharacters - A string of the characters that you don't want in the password.

Returns:

this

kmsKeyArn

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder kmsKeyArn(String kmsKeyArn)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getKmsKeyArn()

Parameters:

kmsKeyArn - The ARN of the KMS key that Secrets Manager uses to encrypt the secret. If you don't specify this value, then Secrets Manager uses the key aws/secretsmanager . If aws/secretsmanager doesn't yet exist, then Secrets Manager creates it for you automatically the first time it encrypts the secret value.

Returns:

this

masterSecretArn

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder masterSecretArn(String masterSecretArn)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getMasterSecretArn()

Parameters:

masterSecretArn - The ARN of the secret that contains superuser credentials, if you use the Alternating users rotation strategy . CloudFormation grants the execution role for the Lambda rotation function GetSecretValue permission to the secret in this property. For more information, see Lambda rotation function execution role permissions for Secrets Manager . You must create the superuser secret before you can set this property.

You must also include the superuser secret ARN as a key in the JSON of the rotating secret so that the Lambda rotation function can find it. CloudFormation does not hardcode secret ARNs in the Lambda rotation function, so you can use the function to rotate multiple secrets. For more information, see JSON structure of Secrets Manager secrets .

You can specify MasterSecretArn or SuperuserSecretArn but not both. They represent the same superuser secret.

Returns:

this

masterSecretKmsKeyArn

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder masterSecretKmsKeyArn(String masterSecretKmsKeyArn)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getMasterSecretKmsKeyArn()

Parameters:

masterSecretKmsKeyArn - The ARN of the KMS key that Secrets Manager used to encrypt the superuser secret, if you use the alternating users strategy and the superuser secret is encrypted with a customer managed key. You don't need to specify this property if the superuser secret is encrypted using the key aws/secretsmanager . CloudFormation grants the execution role for the Lambda rotation function Decrypt , DescribeKey , and GenerateDataKey permission to the key in this property. For more information, see Lambda rotation function execution role permissions for Secrets Manager . You can specify MasterSecretKmsKeyArn or SuperuserSecretKmsKeyArn but not both. They represent the same superuser secret KMS key .

Returns:

this

rotationLambdaName

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder rotationLambdaName(String rotationLambdaName)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getRotationLambdaName()

Parameters:

rotationLambdaName - The name of the Lambda rotation function.

Returns:

this

runtime

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder runtime(String runtime)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getRuntime()

Parameters:

runtime - By default, CloudFormation deploys Python 3.9 binaries for the rotation function. To use a different version of Python, you must do the following two steps:.

• Deploy the matching version Python binaries with your rotation function.
• Set the version number in this field. For example, for Python 3.7, enter python3.7

If you only do one of the steps, your rotation function will be incompatible with the binaries. For more information, see Why did my Lambda rotation function fail with a "pg module not found" error .

Returns:

this

superuserSecretArn

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder superuserSecretArn(String superuserSecretArn)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getSuperuserSecretArn()

Parameters:

superuserSecretArn - The ARN of the secret that contains superuser credentials, if you use the Alternating users rotation strategy . CloudFormation grants the execution role for the Lambda rotation function GetSecretValue permission to the secret in this property. For more information, see Lambda rotation function execution role permissions for Secrets Manager . You must create the superuser secret before you can set this property.

You must also include the superuser secret ARN as a key in the JSON of the rotating secret so that the Lambda rotation function can find it. CloudFormation does not hardcode secret ARNs in the Lambda rotation function, so you can use the function to rotate multiple secrets. For more information, see JSON structure of Secrets Manager secrets .

You can specify MasterSecretArn or SuperuserSecretArn but not both. They represent the same superuser secret.

Returns:

this

superuserSecretKmsKeyArn

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder superuserSecretKmsKeyArn(String superuserSecretKmsKeyArn)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getSuperuserSecretKmsKeyArn()

Parameters:

superuserSecretKmsKeyArn - The ARN of the KMS key that Secrets Manager used to encrypt the superuser secret, if you use the alternating users strategy and the superuser secret is encrypted with a customer managed key. You don't need to specify this property if the superuser secret is encrypted using the key aws/secretsmanager . CloudFormation grants the execution role for the Lambda rotation function Decrypt , DescribeKey , and GenerateDataKey permission to the key in this property. For more information, see Lambda rotation function execution role permissions for Secrets Manager . You can specify MasterSecretKmsKeyArn or SuperuserSecretKmsKeyArn but not both. They represent the same superuser secret KMS key .

Returns:

this

vpcSecurityGroupIds

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder vpcSecurityGroupIds(String vpcSecurityGroupIds)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getVpcSecurityGroupIds()

Parameters:

vpcSecurityGroupIds - A comma-separated list of security group IDs applied to the target database. The template applies the same security groups as on the Lambda rotation function that is created as part of this stack.

Returns:

this

vpcSubnetIds

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty.Builder vpcSubnetIds(String vpcSubnetIds)

Sets the value of CfnRotationSchedule.HostedRotationLambdaProperty.getVpcSubnetIds()

Parameters:

vpcSubnetIds - A comma separated list of VPC subnet IDs of the target database network. The Lambda rotation function is in the same subnet group.

Returns:

this

build

@Stability(Stable)
public CfnRotationSchedule.HostedRotationLambdaProperty build()

Builds the configured instance.

Specified by:

build in interface software.amazon.jsii.Builder<CfnRotationSchedule.HostedRotationLambdaProperty>

Returns:

a new instance of CfnRotationSchedule.HostedRotationLambdaProperty

Throws:

NullPointerException - if any required attribute was not provided