steampipe plugin install akeyless-community/akeyless

Akeyless + Steampipe

Akeyless The Akeyless Platform is a unified secrets management system that enables you to store, protect, rotate, and dynamically create and manage credentials, certificates, and encryption keys.

Steampipe is an open source CLI for querying cloud APIs using SQL from Turbot

List roles in your Akeyless account:

select
role_name
from
akeyless_role;

Documentation

Get started

Install

Download and install the latest Akeyless plugin:

steampipe plugin install akeyless-community/akeyless

Configuration

Installing the latest Akeyless plugin will create a config file (~/.steampipe/config/akeyless.spc) with a single connection named akeyless. Edit the file to include a valid access_type and access_id and uncomment any other fields as necessary:

connection "akeyless" {
plugin = "akeyless-community/akeyless"
# Required. Defines the type of access. Supported types: "api_key", "aws_iam", "azure_ad", "gcp", "universal_identity", "k8s", "jwt".
access_type = ""
# Required. The access ID of your auth method.
access_id = ""
# The access key or secret, paired with access_id. Only required when `access_type = api_key`.
#access_key = ""
# API URL for the Akeyless Gateway. Default URL is https://api.akeyless.io.
#api_url = ""
# JSON Web Token for JWT-based authentication.
#jwt = ""
# User identity token for Universal Identity™ authentication.
#uid_token = ""
# Audience for GCP authentication.
#gcp_audience = ""
# Object ID for Azure AD authentication.
#azure_object_id = ""
# Kubernetes service account token for Kubernetes-based authentication.
#k8s_service_account_token = ""
# Name of the Kubernetes auth config.
#k8s_auth_config_name = ""
# CA certificate for TLS verification of the Akeyless Gateway.
#gateway_ca_cert = ""
}

Authentication

Akeyless supports multiple authentication methods: api_key,aws_iam,azure_ad,gcp,universal_identity,k8s,jwt.

AWS Example
connection "akeyless" {
plugin = "akeyless-community/akeyless"
access_type = "aws_iam"
access_id = "p-xxxxxxxxxx"
}

Get involved