View a markdown version of this page

CustomerManagedAwsSecretConfigurationInput - Oracle Database@AWS

CustomerManagedAwsSecretConfigurationInput

The input configuration for a customer-managed AWS Secrets Manager secret used to supply a password.

Contents

externalIdType

The type of Oracle Cloud Identifier (OCID) used as the external ID when assuming the IAM role.

The valid values depend on the operation. For the CreateAutonomousDatabase operation, only compartment_ocid and tenant_ocid are allowed. For the UpdateAutonomousDatabase and CreateAutonomousDatabaseWallet operations, database_ocid, compartment_ocid, and tenant_ocid are all allowed.

Type: String

Valid Values: database_ocid | compartment_ocid | tenant_ocid

Required: No

iamRoleArn

The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that OCI assumes to retrieve the secret value.

Type: String

Length Constraints: Minimum length of 20. Maximum length of 2048.

Pattern: arn:(?:aws|aws-cn|aws-us-gov|aws-iso-{0,1}[a-z]{0,1}):iam::[0-9]{12}:role/.+

Required: No

secretId

The identifier or ARN of the AWS Secrets Manager secret that contains the password.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 2048.

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: