AWS::RDS::DBInstance MasterUserSecret - AWS CloudFormation

AWS::RDS::DBInstance MasterUserSecret

The MasterUserSecret return value specifies the secret managed by RDS in AWS Secrets Manager for the master user password.

For more information, see Password management with AWS Secrets Manager in the Amazon RDS User Guide and Password management with AWS Secrets Manager in the Amazon Aurora User Guide.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "KmsKeyId" : String, "SecretArn" : String }

YAML

KmsKeyId: String SecretArn: String

Properties

KmsKeyId

The AWS KMS key identifier that is used to encrypt the secret.

Required: No

Type: String

Update requires: No interruption

SecretArn

The Amazon Resource Name (ARN) of the secret. This parameter is a return value that you can retrieve using the Fn::GetAtt intrinsic function. For more information, see Return values.

Required: No

Type: String

Update requires: No interruption