# SingleUserHostedRotationOptions

Single user hosted rotation options.

- Source: [`aws-secretsmanager/lib/rotation-schedule.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-secretsmanager/lib/rotation-schedule.ts#L180)
- Type last changed: v2.72.0 · 29 Mar 2023

## Example

```ts
declare const myVpc: ec2.IVpc;
declare const dbConnections: ec2.Connections;
declare const secret: secretsmanager.Secret;

const myHostedRotation = secretsmanager.HostedRotation.mysqlSingleUser({ vpc: myVpc });
secret.addRotationSchedule('RotationSchedule', { hostedRotation: myHostedRotation });
dbConnections.allowDefaultPortFrom(myHostedRotation);
```

## Properties

- `excludeCharacters`: string — A string of the characters that you don't want in the password.

  **Default:** the same exclude characters as the ones used for the secret or " %+~`#$&*()|[]{}:;<>?!'/@\"\\"

- `functionName`: string — A name for the Lambda created to rotate the secret.

  **Default:** a CloudFormation generated name

- `securityGroups`: [ISecurityGroup](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.ISecurityGroup.html)[] — A list of security groups for the Lambda created to rotate the secret.

  **Default:** a new security group is created

- `vpc`: [IVpc](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.IVpc.html) — The VPC where the Lambda rotation function will run.

  **Default:** the Lambda is not deployed in a VPC

- `vpcSubnets`: [SubnetSelection](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.SubnetSelection.html) — The type of subnets in the VPC where the Lambda rotation function will run.

  **Default:** the Vpc default strategy if not specified.