Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Harness Provider
  3. API Docs
  4. platform
  5. AwsKmsConnector
Harness v0.7.1 published on Saturday, Mar 29, 2025 by Pulumi
pulumi/pulumi-harness

harness.platform.AwsKmsConnector

Explore with Pulumi AI

Harness v0.7.1 published on Saturday, Mar 29, 2025 by Pulumi
pulumi/pulumi-harness

Example Usage

Create AwsKmsConnector Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AwsKmsConnector(name: string, args: AwsKmsConnectorArgs, opts?: CustomResourceOptions);
@overload
def AwsKmsConnector(resource_name: str,
                    args: AwsKmsConnectorArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def AwsKmsConnector(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    arn_ref: Optional[str] = None,
                    credentials: Optional[AwsKmsConnectorCredentialsArgs] = None,
                    identifier: Optional[str] = None,
                    region: Optional[str] = None,
                    default: Optional[bool] = None,
                    delegate_selectors: Optional[Sequence[str]] = None,
                    description: Optional[str] = None,
                    execute_on_delegate: Optional[bool] = None,
                    name: Optional[str] = None,
                    org_id: Optional[str] = None,
                    project_id: Optional[str] = None,
                    tags: Optional[Sequence[str]] = None)
func NewAwsKmsConnector(ctx *Context, name string, args AwsKmsConnectorArgs, opts ...ResourceOption) (*AwsKmsConnector, error)
public AwsKmsConnector(string name, AwsKmsConnectorArgs args, CustomResourceOptions? opts = null)
public AwsKmsConnector(String name, AwsKmsConnectorArgs args)
public AwsKmsConnector(String name, AwsKmsConnectorArgs args, CustomResourceOptions options)

type: harness:platform:AwsKmsConnector
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AwsKmsConnectorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AwsKmsConnectorArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AwsKmsConnectorArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AwsKmsConnectorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AwsKmsConnectorArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var awsKmsConnectorResource = new Harness.Platform.AwsKmsConnector("awsKmsConnectorResource", new()
{
    ArnRef = "string",
    Credentials = new Harness.Platform.Inputs.AwsKmsConnectorCredentialsArgs
    {
        AssumeRole = new Harness.Platform.Inputs.AwsKmsConnectorCredentialsAssumeRoleArgs
        {
            Duration = 0,
            RoleArn = "string",
            ExternalId = "string",
        },
        InheritFromDelegate = false,
        Manual = new Harness.Platform.Inputs.AwsKmsConnectorCredentialsManualArgs
        {
            AccessKeyRef = "string",
            SecretKeyRef = "string",
        },
        OidcAuthentication = new Harness.Platform.Inputs.AwsKmsConnectorCredentialsOidcAuthenticationArgs
        {
            IamRoleArn = "string",
        },
    },
    Identifier = "string",
    Region = "string",
    Default = false,
    DelegateSelectors = new[]
    {
        "string",
    },
    Description = "string",
    ExecuteOnDelegate = false,
    Name = "string",
    OrgId = "string",
    ProjectId = "string",
    Tags = new[]
    {
        "string",
    },
});
Copy
example, err := platform.NewAwsKmsConnector(ctx, "awsKmsConnectorResource", &platform.AwsKmsConnectorArgs{
	ArnRef: pulumi.String("string"),
	Credentials: &platform.AwsKmsConnectorCredentialsArgs{
		AssumeRole: &platform.AwsKmsConnectorCredentialsAssumeRoleArgs{
			Duration:   pulumi.Int(0),
			RoleArn:    pulumi.String("string"),
			ExternalId: pulumi.String("string"),
		},
		InheritFromDelegate: pulumi.Bool(false),
		Manual: &platform.AwsKmsConnectorCredentialsManualArgs{
			AccessKeyRef: pulumi.String("string"),
			SecretKeyRef: pulumi.String("string"),
		},
		OidcAuthentication: &platform.AwsKmsConnectorCredentialsOidcAuthenticationArgs{
			IamRoleArn: pulumi.String("string"),
		},
	},
	Identifier: pulumi.String("string"),
	Region:     pulumi.String("string"),
	Default:    pulumi.Bool(false),
	DelegateSelectors: pulumi.StringArray{
		pulumi.String("string"),
	},
	Description:       pulumi.String("string"),
	ExecuteOnDelegate: pulumi.Bool(false),
	Name:              pulumi.String("string"),
	OrgId:             pulumi.String("string"),
	ProjectId:         pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
})
Copy
var awsKmsConnectorResource = new AwsKmsConnector("awsKmsConnectorResource", AwsKmsConnectorArgs.builder()
    .arnRef("string")
    .credentials(AwsKmsConnectorCredentialsArgs.builder()
        .assumeRole(AwsKmsConnectorCredentialsAssumeRoleArgs.builder()
            .duration(0)
            .roleArn("string")
            .externalId("string")
            .build())
        .inheritFromDelegate(false)
        .manual(AwsKmsConnectorCredentialsManualArgs.builder()
            .accessKeyRef("string")
            .secretKeyRef("string")
            .build())
        .oidcAuthentication(AwsKmsConnectorCredentialsOidcAuthenticationArgs.builder()
            .iamRoleArn("string")
            .build())
        .build())
    .identifier("string")
    .region("string")
    .default_(false)
    .delegateSelectors("string")
    .description("string")
    .executeOnDelegate(false)
    .name("string")
    .orgId("string")
    .projectId("string")
    .tags("string")
    .build());
Copy
aws_kms_connector_resource = harness.platform.AwsKmsConnector("awsKmsConnectorResource",
    arn_ref="string",
    credentials={
        "assume_role": {
            "duration": 0,
            "role_arn": "string",
            "external_id": "string",
        },
        "inherit_from_delegate": False,
        "manual": {
            "access_key_ref": "string",
            "secret_key_ref": "string",
        },
        "oidc_authentication": {
            "iam_role_arn": "string",
        },
    },
    identifier="string",
    region="string",
    default=False,
    delegate_selectors=["string"],
    description="string",
    execute_on_delegate=False,
    name="string",
    org_id="string",
    project_id="string",
    tags=["string"])
Copy
const awsKmsConnectorResource = new harness.platform.AwsKmsConnector("awsKmsConnectorResource", {
    arnRef: "string",
    credentials: {
        assumeRole: {
            duration: 0,
            roleArn: "string",
            externalId: "string",
        },
        inheritFromDelegate: false,
        manual: {
            accessKeyRef: "string",
            secretKeyRef: "string",
        },
        oidcAuthentication: {
            iamRoleArn: "string",
        },
    },
    identifier: "string",
    region: "string",
    "default": false,
    delegateSelectors: ["string"],
    description: "string",
    executeOnDelegate: false,
    name: "string",
    orgId: "string",
    projectId: "string",
    tags: ["string"],
});
Copy
type: harness:platform:AwsKmsConnector
properties:
    arnRef: string
    credentials:
        assumeRole:
            duration: 0
            externalId: string
            roleArn: string
        inheritFromDelegate: false
        manual:
            accessKeyRef: string
            secretKeyRef: string
        oidcAuthentication:
            iamRoleArn: string
    default: false
    delegateSelectors:
        - string
    description: string
    executeOnDelegate: false
    identifier: string
    name: string
    orgId: string
    projectId: string
    region: string
    tags:
        - string
Copy

AwsKmsConnector Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AwsKmsConnector resource accepts the following input properties:

ArnRef This property is required. string
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
Credentials This property is required. AwsKmsConnectorCredentials
Credentials to connect to AWS.
Identifier
This property is required.
Changes to this property will trigger replacement.
string
Unique identifier of the resource.
Region This property is required. string
The AWS region where the AWS Secret Manager is.
Default bool
Set this connector as the default for all the services.
DelegateSelectors List<string>
Tags to filter delegates for connection.
Description string
Description of the resource.
ExecuteOnDelegate bool
Execute the command on the delegate.
Name string
Name of the resource.
OrgId string
Unique identifier of the organization.
ProjectId string
Unique identifier of the project.
Tags List<string>
Tags to associate with the resource.
ArnRef This property is required. string
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
Credentials This property is required. AwsKmsConnectorCredentialsArgs
Credentials to connect to AWS.
Identifier
This property is required.
Changes to this property will trigger replacement.
string
Unique identifier of the resource.
Region This property is required. string
The AWS region where the AWS Secret Manager is.
Default bool
Set this connector as the default for all the services.
DelegateSelectors []string
Tags to filter delegates for connection.
Description string
Description of the resource.
ExecuteOnDelegate bool
Execute the command on the delegate.
Name string
Name of the resource.
OrgId string
Unique identifier of the organization.
ProjectId string
Unique identifier of the project.
Tags []string
Tags to associate with the resource.
arnRef This property is required. String
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
credentials This property is required. AwsKmsConnectorCredentials
Credentials to connect to AWS.
identifier
This property is required.
Changes to this property will trigger replacement.
String
Unique identifier of the resource.
region This property is required. String
The AWS region where the AWS Secret Manager is.
default_ Boolean
Set this connector as the default for all the services.
delegateSelectors List<String>
Tags to filter delegates for connection.
description String
Description of the resource.
executeOnDelegate Boolean
Execute the command on the delegate.
name String
Name of the resource.
orgId String
Unique identifier of the organization.
projectId String
Unique identifier of the project.
tags List<String>
Tags to associate with the resource.
arnRef This property is required. string
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
credentials This property is required. AwsKmsConnectorCredentials
Credentials to connect to AWS.
identifier
This property is required.
Changes to this property will trigger replacement.
string
Unique identifier of the resource.
region This property is required. string
The AWS region where the AWS Secret Manager is.
default boolean
Set this connector as the default for all the services.
delegateSelectors string[]
Tags to filter delegates for connection.
description string
Description of the resource.
executeOnDelegate boolean
Execute the command on the delegate.
name string
Name of the resource.
orgId string
Unique identifier of the organization.
projectId string
Unique identifier of the project.
tags string[]
Tags to associate with the resource.
arn_ref This property is required. str
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
credentials This property is required. AwsKmsConnectorCredentialsArgs
Credentials to connect to AWS.
identifier
This property is required.
Changes to this property will trigger replacement.
str
Unique identifier of the resource.
region This property is required. str
The AWS region where the AWS Secret Manager is.
default bool
Set this connector as the default for all the services.
delegate_selectors Sequence[str]
Tags to filter delegates for connection.
description str
Description of the resource.
execute_on_delegate bool
Execute the command on the delegate.
name str
Name of the resource.
org_id str
Unique identifier of the organization.
project_id str
Unique identifier of the project.
tags Sequence[str]
Tags to associate with the resource.
arnRef This property is required. String
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
credentials This property is required. Property Map
Credentials to connect to AWS.
identifier
This property is required.
Changes to this property will trigger replacement.
String
Unique identifier of the resource.
region This property is required. String
The AWS region where the AWS Secret Manager is.
default Boolean
Set this connector as the default for all the services.
delegateSelectors List<String>
Tags to filter delegates for connection.
description String
Description of the resource.
executeOnDelegate Boolean
Execute the command on the delegate.
name String
Name of the resource.
orgId String
Unique identifier of the organization.
projectId String
Unique identifier of the project.
tags List<String>
Tags to associate with the resource.

Outputs

All input properties are implicitly available as output properties. Additionally, the AwsKmsConnector resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing AwsKmsConnector Resource

Get an existing AwsKmsConnector resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AwsKmsConnectorState, opts?: CustomResourceOptions): AwsKmsConnector
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn_ref: Optional[str] = None,
        credentials: Optional[AwsKmsConnectorCredentialsArgs] = None,
        default: Optional[bool] = None,
        delegate_selectors: Optional[Sequence[str]] = None,
        description: Optional[str] = None,
        execute_on_delegate: Optional[bool] = None,
        identifier: Optional[str] = None,
        name: Optional[str] = None,
        org_id: Optional[str] = None,
        project_id: Optional[str] = None,
        region: Optional[str] = None,
        tags: Optional[Sequence[str]] = None) -> AwsKmsConnector
func GetAwsKmsConnector(ctx *Context, name string, id IDInput, state *AwsKmsConnectorState, opts ...ResourceOption) (*AwsKmsConnector, error)
public static AwsKmsConnector Get(string name, Input<string> id, AwsKmsConnectorState? state, CustomResourceOptions? opts = null)
public static AwsKmsConnector get(String name, Output<String> id, AwsKmsConnectorState state, CustomResourceOptions options)
resources:  _:    type: harness:platform:AwsKmsConnector    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
ArnRef string
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
Credentials AwsKmsConnectorCredentials
Credentials to connect to AWS.
Default bool
Set this connector as the default for all the services.
DelegateSelectors List<string>
Tags to filter delegates for connection.
Description string
Description of the resource.
ExecuteOnDelegate bool
Execute the command on the delegate.
Identifier Changes to this property will trigger replacement. string
Unique identifier of the resource.
Name string
Name of the resource.
OrgId string
Unique identifier of the organization.
ProjectId string
Unique identifier of the project.
Region string
The AWS region where the AWS Secret Manager is.
Tags List<string>
Tags to associate with the resource.
ArnRef string
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
Credentials AwsKmsConnectorCredentialsArgs
Credentials to connect to AWS.
Default bool
Set this connector as the default for all the services.
DelegateSelectors []string
Tags to filter delegates for connection.
Description string
Description of the resource.
ExecuteOnDelegate bool
Execute the command on the delegate.
Identifier Changes to this property will trigger replacement. string
Unique identifier of the resource.
Name string
Name of the resource.
OrgId string
Unique identifier of the organization.
ProjectId string
Unique identifier of the project.
Region string
The AWS region where the AWS Secret Manager is.
Tags []string
Tags to associate with the resource.
arnRef String
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
credentials AwsKmsConnectorCredentials
Credentials to connect to AWS.
default_ Boolean
Set this connector as the default for all the services.
delegateSelectors List<String>
Tags to filter delegates for connection.
description String
Description of the resource.
executeOnDelegate Boolean
Execute the command on the delegate.
identifier Changes to this property will trigger replacement. String
Unique identifier of the resource.
name String
Name of the resource.
orgId String
Unique identifier of the organization.
projectId String
Unique identifier of the project.
region String
The AWS region where the AWS Secret Manager is.
tags List<String>
Tags to associate with the resource.
arnRef string
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
credentials AwsKmsConnectorCredentials
Credentials to connect to AWS.
default boolean
Set this connector as the default for all the services.
delegateSelectors string[]
Tags to filter delegates for connection.
description string
Description of the resource.
executeOnDelegate boolean
Execute the command on the delegate.
identifier Changes to this property will trigger replacement. string
Unique identifier of the resource.
name string
Name of the resource.
orgId string
Unique identifier of the organization.
projectId string
Unique identifier of the project.
region string
The AWS region where the AWS Secret Manager is.
tags string[]
Tags to associate with the resource.
arn_ref str
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
credentials AwsKmsConnectorCredentialsArgs
Credentials to connect to AWS.
default bool
Set this connector as the default for all the services.
delegate_selectors Sequence[str]
Tags to filter delegates for connection.
description str
Description of the resource.
execute_on_delegate bool
Execute the command on the delegate.
identifier Changes to this property will trigger replacement. str
Unique identifier of the resource.
name str
Name of the resource.
org_id str
Unique identifier of the organization.
project_id str
Unique identifier of the project.
region str
The AWS region where the AWS Secret Manager is.
tags Sequence[str]
Tags to associate with the resource.
arnRef String
A reference to the Harness secret containing the ARN of the AWS KMS. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
credentials Property Map
Credentials to connect to AWS.
default Boolean
Set this connector as the default for all the services.
delegateSelectors List<String>
Tags to filter delegates for connection.
description String
Description of the resource.
executeOnDelegate Boolean
Execute the command on the delegate.
identifier Changes to this property will trigger replacement. String
Unique identifier of the resource.
name String
Name of the resource.
orgId String
Unique identifier of the organization.
projectId String
Unique identifier of the project.
region String
The AWS region where the AWS Secret Manager is.
tags List<String>
Tags to associate with the resource.

Supporting Types

AwsKmsConnectorCredentials
, AwsKmsConnectorCredentialsArgs

AssumeRole AwsKmsConnectorCredentialsAssumeRole
Connect using STS assume role.
InheritFromDelegate bool
Inherit the credentials from from the delegate.
Manual AwsKmsConnectorCredentialsManual
Specify the AWS key and secret used for authenticating.
OidcAuthentication AwsKmsConnectorCredentialsOidcAuthentication
Connect using OIDC authentication.
AssumeRole AwsKmsConnectorCredentialsAssumeRole
Connect using STS assume role.
InheritFromDelegate bool
Inherit the credentials from from the delegate.
Manual AwsKmsConnectorCredentialsManual
Specify the AWS key and secret used for authenticating.
OidcAuthentication AwsKmsConnectorCredentialsOidcAuthentication
Connect using OIDC authentication.
assumeRole AwsKmsConnectorCredentialsAssumeRole
Connect using STS assume role.
inheritFromDelegate Boolean
Inherit the credentials from from the delegate.
manual AwsKmsConnectorCredentialsManual
Specify the AWS key and secret used for authenticating.
oidcAuthentication AwsKmsConnectorCredentialsOidcAuthentication
Connect using OIDC authentication.
assumeRole AwsKmsConnectorCredentialsAssumeRole
Connect using STS assume role.
inheritFromDelegate boolean
Inherit the credentials from from the delegate.
manual AwsKmsConnectorCredentialsManual
Specify the AWS key and secret used for authenticating.
oidcAuthentication AwsKmsConnectorCredentialsOidcAuthentication
Connect using OIDC authentication.
assume_role AwsKmsConnectorCredentialsAssumeRole
Connect using STS assume role.
inherit_from_delegate bool
Inherit the credentials from from the delegate.
manual AwsKmsConnectorCredentialsManual
Specify the AWS key and secret used for authenticating.
oidc_authentication AwsKmsConnectorCredentialsOidcAuthentication
Connect using OIDC authentication.
assumeRole Property Map
Connect using STS assume role.
inheritFromDelegate Boolean
Inherit the credentials from from the delegate.
manual Property Map
Specify the AWS key and secret used for authenticating.
oidcAuthentication Property Map
Connect using OIDC authentication.

AwsKmsConnectorCredentialsAssumeRole
, AwsKmsConnectorCredentialsAssumeRoleArgs

Duration This property is required. int
The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
RoleArn This property is required. string
The ARN of the role to assume.
ExternalId string
If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
Duration This property is required. int
The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
RoleArn This property is required. string
The ARN of the role to assume.
ExternalId string
If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
duration This property is required. Integer
The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
roleArn This property is required. String
The ARN of the role to assume.
externalId String
If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
duration This property is required. number
The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
roleArn This property is required. string
The ARN of the role to assume.
externalId string
If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
duration This property is required. int
The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
role_arn This property is required. str
The ARN of the role to assume.
external_id str
If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.
duration This property is required. Number
The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default, the value is set to 3600 seconds. An expiration can also be specified in the client request body. The minimum value is 1 hour.
roleArn This property is required. String
The ARN of the role to assume.
externalId String
If the administrator of the account to which the role belongs provided you with an external ID, then enter that value.

AwsKmsConnectorCredentialsManual
, AwsKmsConnectorCredentialsManualArgs

AccessKeyRef This property is required. string
The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
SecretKeyRef This property is required. string
The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
AccessKeyRef This property is required. string
The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
SecretKeyRef This property is required. string
The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
accessKeyRef This property is required. String
The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
secretKeyRef This property is required. String
The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
accessKeyRef This property is required. string
The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
secretKeyRef This property is required. string
The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
access_key_ref This property is required. str
The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
secret_key_ref This property is required. str
The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
accessKeyRef This property is required. String
The reference to the Harness secret containing the AWS access key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
secretKeyRef This property is required. String
The reference to the Harness secret containing the AWS secret key. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.

AwsKmsConnectorCredentialsOidcAuthentication
, AwsKmsConnectorCredentialsOidcAuthenticationArgs

IamRoleArn This property is required. string
The ARN of the IAM role to assume.
IamRoleArn This property is required. string
The ARN of the IAM role to assume.
iamRoleArn This property is required. String
The ARN of the IAM role to assume.
iamRoleArn This property is required. string
The ARN of the IAM role to assume.
iam_role_arn This property is required. str
The ARN of the IAM role to assume.
iamRoleArn This property is required. String
The ARN of the IAM role to assume.

Import

Import account level awskms connector

$ pulumi import harness:platform/awsKmsConnector:AwsKmsConnector example <connector_id>
Copy

Import org level awskms connector

$ pulumi import harness:platform/awsKmsConnector:AwsKmsConnector example <ord_id>/<connector_id>
Copy

Import project level awskms connector

$ pulumi import harness:platform/awsKmsConnector:AwsKmsConnector example <org_id>/<project_id>/<connector_id>
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
harness pulumi/pulumi-harness
License
Apache-2.0
Notes
This Pulumi package is based on the harness Terraform Provider.
Harness v0.7.1 published on Saturday, Mar 29, 2025 by Pulumi
pulumi/pulumi-harness