> ## Documentation Index > Fetch the complete documentation index at: https://infisical.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # List > List all the Secret Rotations for the specified project. ## OpenAPI ````yaml GET /api/v2/secret-rotations openapi: 3.0.3 info: title: Infisical API description: List of all available APIs that can be consumed version: 0.0.1 servers: - url: https://us.infisical.com description: Production server (US) - url: https://eu.infisical.com description: Production server (EU) - url: http://localhost:8080 description: Local server security: [] paths: /api/v2/secret-rotations: get: tags: - Secret Rotations description: List all the Secret Rotations for the specified project. operationId: listSecretRotations parameters: - schema: type: string minLength: 1 in: query name: projectId required: true description: The ID of the project to list Secret Rotations from. responses: '200': description: Default Response content: application/json: schema: type: object properties: secretRotations: type: array items: anyOf: - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - postgres name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - postgres-credentials parameters: type: object properties: username1: type: string minLength: 1 description: >- The username of the first login to rotate passwords for. This user must already exists in your database. username2: type: string minLength: 1 description: >- The username of the second login to rotate passwords for. This user must already exists in your database. rotationStatement: type: string minLength: 1 description: The SQL template query used for rotation. passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. required: - username1 - username2 additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the active username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the generated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - mssql name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - mssql-credentials parameters: type: object properties: username1: type: string minLength: 1 description: >- The username of the first login to rotate passwords for. This user must already exists in your database. username2: type: string minLength: 1 description: >- The username of the second login to rotate passwords for. This user must already exists in your database. rotationStatement: type: string minLength: 1 description: The SQL template query used for rotation. passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. required: - username1 - username2 additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the active username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the generated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - mysql name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - mysql-credentials parameters: type: object properties: username1: type: string minLength: 1 description: >- The username of the first login to rotate passwords for. This user must already exists in your database. username2: type: string minLength: 1 description: >- The username of the second login to rotate passwords for. This user must already exists in your database. rotationStatement: type: string minLength: 1 description: The SQL template query used for rotation. passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. required: - username1 - username2 additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the active username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the generated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - oracledb name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - oracledb-credentials parameters: type: object properties: username1: type: string minLength: 1 description: >- The username of the first login to rotate passwords for. This user must already exists in your database. username2: type: string minLength: 1 description: >- The username of the second login to rotate passwords for. This user must already exists in your database. rotationStatement: type: string minLength: 1 description: The SQL template query used for rotation. passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. required: - username1 - username2 additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the active username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the generated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - auth0 name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - auth0-client-secret parameters: type: object properties: clientId: type: string minLength: 1 description: >- The client ID of the Auth0 Application to rotate the client secret for. required: - clientId additionalProperties: false secretsMapping: type: object properties: clientId: type: string minLength: 1 description: >- The name of the secret that the client ID will be mapped to. clientSecret: type: string minLength: 1 description: >- The name of the secret that the rotated client secret will be mapped to. required: - clientId - clientSecret additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - azure-client-secrets name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - azure-client-secret parameters: type: object properties: objectId: type: string minLength: 1 description: >- The ID of the Azure Application to rotate the client secret for. appName: type: string description: >- The name of the Azure Application to rotate the client secret for. clientId: type: string minLength: 1 description: >- The client ID of the Azure Application to rotate the client secret for. required: - objectId - clientId additionalProperties: false secretsMapping: type: object properties: clientId: type: string minLength: 1 description: >- The name of the secret that the client ID will be mapped to. clientSecret: type: string minLength: 1 description: >- The name of the secret that the rotated client secret will be mapped to. required: - clientId - clientSecret additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - ldap name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - ldap-password parameters: type: object properties: dn: type: string minLength: 1 description: >- The Distinguished Name (DN) or User Principal Name (UPN) of the principal to rotate the password for. passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. rotationMethod: type: string enum: - connection-principal - target-principal description: >- Whether the rotation should be performed by the LDAP "connection-principal" or the "target-principal" (defaults to 'connection-principal'). required: - dn additionalProperties: false secretsMapping: type: object properties: dn: type: string minLength: 1 description: >- The name of the secret that the Distinguished Name (DN) or User Principal Name (UPN) of the principal will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the rotated password will be mapped to. required: - dn - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - aws name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - aws-iam-user-secret parameters: type: object properties: userName: type: string minLength: 1 description: >- The name of the client to rotate credentials for. region: type: string enum: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - us-gov-east-1 - us-gov-west-1 - af-south-1 - ap-east-1 - ap-south-1 - ap-south-2 - ap-northeast-1 - ap-northeast-2 - ap-northeast-3 - ap-southeast-1 - ap-southeast-2 - ap-southeast-3 - ap-southeast-4 - ca-central-1 - eu-central-1 - eu-central-2 - eu-west-1 - eu-west-2 - eu-west-3 - eu-south-1 - eu-south-2 - eu-north-1 - me-south-1 - me-central-1 - sa-east-1 description: The AWS region the client is present in. required: - userName additionalProperties: false secretsMapping: type: object properties: accessKeyId: type: string minLength: 1 description: >- The name of the secret that the access key ID will be mapped to. secretAccessKey: type: string minLength: 1 description: >- The name of the secret that the rotated secret access key will be mapped to. required: - accessKeyId - secretAccessKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - okta name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - okta-client-secret parameters: type: object properties: clientId: type: string minLength: 1 description: >- The ID of the Okta Application to rotate the client secret for. required: - clientId additionalProperties: false secretsMapping: type: object properties: clientId: type: string minLength: 1 description: >- The name of the secret that the client ID will be mapped to. clientSecret: type: string minLength: 1 description: >- The name of the secret that the rotated client secret will be mapped to. required: - clientId - clientSecret additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - redis name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - redis-credentials parameters: type: object properties: passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. permissionScope: type: string minLength: 1 description: >- The ACL permission scope to assign to the issued Redis users. required: - permissionScope additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the rotated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - mongodb name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - mongodb-credentials parameters: type: object properties: username1: type: string minLength: 1 description: >- The username of the first login to rotate passwords for. This user must already exists in your database. username2: type: string minLength: 1 description: >- The username of the second login to rotate passwords for. This user must already exists in your database. required: - username1 - username2 additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the active username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the generated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - databricks name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - databricks-service-principal-secret parameters: type: object properties: servicePrincipalId: type: string minLength: 1 description: >- The ID of the Databricks Service Principal to rotate the OAuth secret for. servicePrincipalName: type: string description: >- The name of the Databricks Service Principal to rotate the OAuth secret for. clientId: type: string minLength: 1 description: >- The client ID of the Databricks Service Principal to rotate the OAuth secret for. required: - servicePrincipalId - clientId additionalProperties: false secretsMapping: type: object properties: clientId: type: string minLength: 1 description: >- The name of the secret that the client ID will be mapped to. clientSecret: type: string minLength: 1 description: >- The name of the secret that the rotated OAuth client secret will be mapped to. required: - clientId - clientSecret additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - ssh name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - unix-linux-local-account parameters: type: object properties: username: type: string minLength: 1 description: >- The username of the Unix/Linux user account to rotate the password for. passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. rotationMethod: type: string enum: - login-as-target - login-as-root description: >- Whether the rotation should be performed using "login-as-target" (the target user's own credentials) or "login-as-root" (the SSH connection's admin credentials). Defaults to "login-as-target". useSudo: type: boolean default: true description: >- If true, uses sudo when executing the password rotation command. Defaults to false. required: - username additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the rotated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - dbt name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - dbt-service-token parameters: type: object properties: tokenName: type: string minLength: 1 maxLength: 255 description: The name of the service token to create. permissionGrants: type: array items: type: object properties: permissionSet: type: string enum: - account_admin - account_viewer - admin - analyst - billing_admin - cost_insights_admin - cost_insights_viewer - cost_management_admin - cost_management_viewer - database_admin - developer - fusion_admin - git_admin - job_admin - job_runner - job_viewer - manage_marketplace_apps - member - metadata_only - owner - project_creator - readonly - scim_only - security_admin - semantic_layer_only - stakeholder - team_admin - webhooks_only projectId: type: number required: - permissionSet additionalProperties: false minItems: 1 description: >- The permission grants to apply to the service token. required: - tokenName - permissionGrants additionalProperties: false secretsMapping: type: object properties: serviceToken: type: string minLength: 1 description: >- The name of the secret that the service token will be mapped to. required: - serviceToken additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - smb name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - windows-local-account parameters: type: object properties: username: type: string minLength: 1 maxLength: 20 description: >- The username of the Windows user account to rotate the password for. passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. rotationMethod: type: string enum: - login-as-target - login-as-root description: >- Whether the rotation should be performed using "login-as-target" (the target user's own credentials) or "login-as-root" (the SSH connection's admin credentials). Defaults to "login-as-target". required: - username additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the rotated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - open-router name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - open-router-api-key parameters: type: object properties: name: type: string minLength: 1 maxLength: 100 description: >- The name for the generated OpenRouter API key. limit: type: number exclusiveMinimum: true minimum: 0 nullable: true description: >- The optional spending limit in USD for the generated API key. limitReset: type: string enum: - daily - weekly - monthly nullable: true description: >- The type of limit reset for the API key (daily, weekly, monthly, or null for no reset). includeByokInLimit: type: boolean nullable: true description: >- Whether to include BYOK (Bring Your Own Key) usage in the spending limit. When enabled, usage from your own provider keys counts toward this key's limit. See OpenRouter BYOK docs for details. required: - name additionalProperties: false secretsMapping: type: object properties: apiKey: type: string minLength: 1 description: >- The name of the secret that the rotated OpenRouter API key will be mapped to. required: - apiKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - litellm name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - litellm-api-key parameters: type: object properties: name: type: string minLength: 1 maxLength: 100 description: >- The name for the generated LiteLLM API key. Infisical appends a timestamp to keep each rotated key unique and record its creation time. additionalOptions: type: string description: >- A JSON object of additional LiteLLM /key/generate options (e.g. max_budget, tpm_limit, metadata). Reserved fields (key_alias, auto_rotate, rotation_interval, duration, send_invite_email, key_type, user_id, team_id, models) are managed by Infisical or set via dedicated fields and cannot be set here. userId: type: string description: >- The ID of the LiteLLM user to associate the generated key with. teamId: type: string description: >- The ID of the LiteLLM team to associate the generated key with. models: type: array items: type: string description: >- The list of model names the generated key is allowed to access. An empty list allows all models. required: - name additionalProperties: false secretsMapping: type: object properties: apiKey: type: string minLength: 1 description: >- The name of the secret that the rotated LiteLLM API key will be mapped to. required: - apiKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - openai name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - openai-service-account parameters: type: object properties: projectId: type: string minLength: 1 description: >- The ID of the OpenAI project to create service accounts in. name: type: string minLength: 1 maxLength: 86 description: >- The name for the generated OpenAI service account. required: - projectId - name additionalProperties: false secretsMapping: type: object properties: apiKey: type: string minLength: 1 description: >- The name of the secret that the rotated OpenAI service account API key will be mapped to. required: - apiKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - ssh name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - hp-ilo-local-account parameters: type: object properties: username: type: string minLength: 1 description: >- The username of the HP iLO account to rotate the password for. passwordRequirements: type: object properties: length: type: number minimum: 1 maximum: 250 description: The length of the password to generate. required: type: object properties: digits: type: number minimum: 0 description: >- The amount of digits to require in the generated password. lowercase: type: number minimum: 0 description: >- The amount of lowercase characters to require in the generated password. uppercase: type: number minimum: 0 description: >- The amount of uppercase characters to require in the generated password. symbols: type: number minimum: 0 description: >- The amount of symbols to require in the generated password. required: - digits - lowercase - uppercase - symbols additionalProperties: false allowedSymbols: type: string pattern: '[!@#$%^&*()_+\-=\[\]{};'':"\\|,.<>\/?~]' description: >- The allowed symbols to use in the generated password (defaults to "-_.~!*"). required: - length - required additionalProperties: false description: >- The password requirements to use when generating the new password. rotationMethod: type: string enum: - login-as-target - login-as-root description: >- Whether the rotation should be performed using "login-as-target" (the target user's own credentials) or "login-as-root" (the SSH connection's admin credentials). Defaults to "login-as-root". required: - username additionalProperties: false secretsMapping: type: object properties: username: type: string minLength: 1 description: >- The name of the secret that the username will be mapped to. password: type: string minLength: 1 description: >- The name of the secret that the rotated password will be mapped to. required: - username - password additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - supabase name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - supabase-api-key parameters: type: object properties: projectRef: type: string minLength: 1 description: >- The reference ID of the Supabase project to rotate the API key for. keyType: type: string enum: - publishable - secret description: >- The type of the API key to rotate (e.g. publishable, secret). required: - projectRef - keyType additionalProperties: false secretsMapping: type: object properties: apiKey: type: string minLength: 1 description: >- The name of the secret that the rotated Supabase API key will be mapped to. required: - apiKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - salesforce name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - salesforce-oauth-credentials parameters: type: object properties: appId: type: string minLength: 1 description: >- The identifier of the Salesforce External Client App to rotate the consumer secret for. appName: type: string minLength: 1 description: >- The developer name of the Salesforce External Client App to rotate the consumer secret for. required: - appId - appName additionalProperties: false secretsMapping: type: object properties: consumerKey: type: string minLength: 1 description: >- The name of the secret that the rotated Salesforce consumer key will be mapped to. consumerSecret: type: string minLength: 1 description: >- The name of the secret that the rotated Salesforce consumer secret will be mapped to. required: - consumerKey - consumerSecret additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - datadog name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - datadog-application-key-secret parameters: type: object properties: serviceAccountId: type: string minLength: 1 description: >- The ID of the Datadog service account to rotate the application key for. required: - serviceAccountId additionalProperties: false secretsMapping: type: object properties: applicationKeyId: type: string minLength: 1 description: >- The name of the secret that the rotated Datadog application key ID will be mapped to. applicationKey: type: string minLength: 1 description: >- The name of the secret that the rotated Datadog application key value will be mapped to. required: - applicationKeyId - applicationKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - datadog name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - datadog-api-key parameters: type: object properties: name: type: string minLength: 1 maxLength: 255 description: The name for the generated Datadog API key. required: - name additionalProperties: false secretsMapping: type: object properties: apiKeyId: type: string minLength: 1 description: >- The name of the secret that the rotated Datadog API key ID will be mapped to. apiKey: type: string minLength: 1 description: >- The name of the secret that the rotated Datadog API key value will be mapped to. required: - apiKeyId - apiKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - convex name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - convex-access-key parameters: type: object properties: namePrefix: type: string minLength: 1 description: >- A prefix to use when naming the generated Convex access key. required: - namePrefix additionalProperties: false secretsMapping: type: object properties: accessKey: type: string minLength: 1 description: >- The name of the secret that the rotated Convex access key will be mapped to. required: - accessKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - fireworks name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - fireworks-api-key parameters: type: object properties: serviceAccountUserId: type: string minLength: 1 pattern: ^[a-zA-Z0-9_-]+$ description: >- The user ID of the Fireworks service account to create the API key for. required: - serviceAccountUserId additionalProperties: false secretsMapping: type: object properties: apiKey: type: string minLength: 1 description: >- The name of the secret that the rotated Fireworks API key will be mapped to. required: - apiKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - snowflake name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - snowflake-user-key-pair parameters: type: object properties: username: type: string minLength: 1 description: >- The Snowflake user whose RSA key pair will be rotated. If the user does not exist, it is created as a key-pair-only SERVICE user. modulusLength: anyOf: - type: number enum: - 2048 - type: number enum: - 4096 default: 2048 description: >- The modulus length in bits of the generated RSA key pairs. Defaults to 2048. required: - username additionalProperties: false secretsMapping: type: object properties: privateKey: type: string minLength: 1 description: >- The name of the secret that the generated RSA private key (PKCS#8 PEM) will be mapped to. publicKey: type: string minLength: 1 description: >- The name of the secret that the generated RSA public key (SPKI PEM) will be mapped to. required: - privateKey - publicKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - cloudflare name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - cloudflare-api-token parameters: type: object properties: name: type: string minLength: 1 maxLength: 100 description: >- The name for the generated Cloudflare API token. policies: type: array items: type: object properties: effect: type: string enum: - allow - deny scope: type: string enum: - account - all-zones - zones zoneIds: type: array items: type: string permissionGroupIds: type: array items: type: string minItems: 1 required: - effect - scope - permissionGroupIds additionalProperties: false minItems: 1 description: >- The access policies to attach to the generated Cloudflare API token. Each policy scopes a set of permission groups to the entire account, to all zones in the account, or to a specific set of zones. allowedIps: type: array items: type: string description: >- The IP addresses or CIDR blocks the generated Cloudflare API token is restricted to. disallowedIps: type: array items: type: string description: >- The IP addresses or CIDR blocks the generated Cloudflare API token is denied from. required: - name - policies additionalProperties: false secretsMapping: type: object properties: tokenId: type: string minLength: 1 description: >- The name of the secret that the rotated Cloudflare API token ID will be mapped to. apiToken: type: string minLength: 1 description: >- The name of the secret that the rotated Cloudflare API token value will be mapped to. required: - tokenId - apiToken additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false - type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - cloudflare name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - cloudflare-r2-access-key parameters: type: object properties: name: type: string minLength: 1 maxLength: 100 description: >- The name for the generated Cloudflare API token that backs the R2 access key. buckets: type: array items: type: object properties: name: type: string minLength: 1 maxLength: 64 jurisdiction: type: string enum: - default - eu - fedramp default: default required: - name additionalProperties: false minItems: 1 description: >- The R2 buckets the generated access key is scoped to. Each entry is a bucket name plus its jurisdiction (default, eu, or fedramp). accessLevel: type: string enum: - object-read - object-read-write default: object-read description: >- The level of access the generated key has over the selected buckets (object-read for read and list, object-read-write to also write). allowedIps: type: array items: type: string description: >- The IP addresses or CIDR blocks the generated R2 access key is restricted to. disallowedIps: type: array items: type: string description: >- The IP addresses or CIDR blocks the generated R2 access key is denied from. required: - name - buckets additionalProperties: false secretsMapping: type: object properties: accessKeyId: type: string minLength: 1 description: >- The name of the secret that the rotated R2 access key ID will be mapped to. secretAccessKey: type: string minLength: 1 description: >- The name of the secret that the rotated R2 secret access key will be mapped to. required: - accessKeyId - secretAccessKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false required: - secretRotations additionalProperties: false '400': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 400 message: type: string error: type: string details: {} required: - reqId - statusCode - message - error additionalProperties: false '401': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 401 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '403': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 403 message: type: string details: {} error: type: string required: - reqId - statusCode - message - error additionalProperties: false '404': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 404 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '422': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 422 message: {} error: type: string required: - reqId - statusCode - error additionalProperties: false '500': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 500 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false ````