replicate_secret_to_regions¶
Operation¶
async
¶
replicate_secret_to_regions(input: ReplicateSecretToRegionsInput, plugins: list[Plugin] | None = None) -> ReplicateSecretToRegionsOutput
Replicates the secret to a new Regions. See Multi-Region secrets.
Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters because it might be logged. For more information, see Logging Secrets Manager events with CloudTrail.
Required permissions: secretsmanager:ReplicateSecretToRegions. If
the primary secret is encrypted with a KMS key other than
aws/secretsmanager, you also need kms:Decrypt permission to the key.
To encrypt the replicated secret with a KMS key other than
aws/secretsmanager, you need kms:GenerateDataKey and kms:Encrypt
to the key. For more information, see IAM policy actions for Secrets
Manager
and Authentication and access control in Secrets
Manager.
Parameters:
| Name | Type | Description | Default |
|---|---|---|---|
input
|
ReplicateSecretToRegionsInput
|
An instance of |
required |
plugins
|
list[Plugin] | None
|
A list of callables that modify the configuration dynamically. Changes made by these plugins only apply for the duration of the operation execution and will not affect any other operation invocations. |
None
|
Returns:
| Type | Description |
|---|---|
ReplicateSecretToRegionsOutput
|
An instance of |
Input¶
dataclass
¶
Dataclass for ReplicateSecretToRegionsInput structure.
Attributes¶
class-attribute
instance-attribute
¶
add_replica_regions: list[ReplicaRegionType] | None = None
A list of Regions in which to replicate the secret.
Output¶
dataclass
¶
Dataclass for ReplicateSecretToRegionsOutput structure.