RotationSingleUserOptions¶
-
class
aws_cdk.aws_rds.
RotationSingleUserOptions
(*, automatically_after=None, endpoint=None, exclude_characters=None, vpc_subnets=None)¶ Bases:
aws_cdk.aws_rds.CommonRotationUserOptions
Options to add the multi user rotation.
- Parameters
automatically_after (
Optional
[Duration
]) – Specifies the number of days after the previous rotation before Secrets Manager triggers the next automatic rotation. Default: - 30 daysendpoint (
Optional
[IInterfaceVpcEndpoint
]) – The VPC interface endpoint to use for the Secrets Manager API. If you enable private DNS hostnames for your VPC private endpoint (the default), you don’t need to specify an endpoint. The standard Secrets Manager DNS hostname the Secrets Manager CLI and SDKs use by default (https://secretsmanager..amazonaws.com) automatically resolves to your VPC endpoint. Default: https://secretsmanager..amazonaws.comexclude_characters (
Optional
[str
]) – Specifies characters to not include in generated passwords. Default: ” %+~`#$&*()|[]{}:;<>?!’/vpc_subnets (
Optional
[SubnetSelection
]) – Where to place the rotation Lambda function. Default: - same placement as instance or cluster
- ExampleMetadata
infused
Example:
import aws_cdk.core as cdk # instance: rds.DatabaseInstance instance.add_rotation_single_user( automatically_after=cdk.Duration.days(7), # defaults to 30 days exclude_characters="!@#$%^&*" )
Attributes
-
automatically_after
¶ Specifies the number of days after the previous rotation before Secrets Manager triggers the next automatic rotation.
- Default
30 days
- Return type
Optional
[Duration
]
-
endpoint
¶ The VPC interface endpoint to use for the Secrets Manager API.
If you enable private DNS hostnames for your VPC private endpoint (the default), you don’t need to specify an endpoint. The standard Secrets Manager DNS hostname the Secrets Manager CLI and SDKs use by default (https://secretsmanager..amazonaws.com) automatically resolves to your VPC endpoint.
- Default
- Return type
Optional
[IInterfaceVpcEndpoint
]
-
exclude_characters
¶ Specifies characters to not include in generated passwords.
- Default
” %+~`#$&*()|[]{}:;<>?!’/
:: “"
- Return type
Optional
[str
]
-
vpc_subnets
¶ Where to place the rotation Lambda function.
- Default
same placement as instance or cluster
- Return type
Optional
[SubnetSelection
]