Updates a secret's fields. When the password field changes, two optional query parameters control rotation behaviour. saveAsVersion=true archives the current credential as a new version before applying the update. syncToTarget=true pushes the new credential to all mapped target accounts via the Broker. When syncToTarget is omitted the target resources are not updated automatically. For dual-account secrets a successful sync triggers the Primary/Secondary account swap.
vault Id
Secret path
Archive the existing credential as a new version before applying the update
Push the new credential to all mapped target accounts via the Broker
Secondary credential key-value map. Required only when dualAccount is true (Dual Account secrets).
When true the secret holds two sets of credentials (Primary in value and Secondary in secondaryValue) that alternate on each rotation cycle to ensure zero downtime.
Rotation target and notification settings embedded in a secret
Notification medium IDs
The target resource and account that will be updated during rotation, along with the rotation template the Broker executes
Identifier of the target resource. Must have rotation enabled in Resource Manager.
Account on the target resource that receives the updated credential
Account name on the target resource
Account identifier value
Defines the script/logic the Broker executes to update the credential on the target resource
Unique identifier of the rotation template
Human-readable name of the rotation template
Variables required by the rotation template. System-defined variables are populated automatically; user-defined variables must be supplied.
A single variable used by the rotation template
Variable name as referenced in the rotation script
True if populated automatically by the system; false if user-supplied
One or more values for this variable
No content