Table: alicloud_kms_secret

Secret enables to manage secrets in a centralized manner throughout their lifecycle (creation, retrieval, updating, and deletion).

Examples

Basic info

select
  name,
  description,
  arn,
  secret_type,
  create_time
from
  alicloud_kms_secret;

List secrets that do not have automatic rotation enabled

select
  name,
  secret_type automatic_rotation
from
  alicloud_kms_secret
where
  automatic_rotation <> 'Enabled';

List secrets that have not been rotated within the last 30 days

select
  name,
  secret_type,
  automatic_rotation
from
  alicloud_kms_secret
where
  last_rotation_date < (current_date - interval '30' day);

Get the extended configuration info for each secret

select
  name,
  extended_config -> 'CustomData' ->> 'DBName' as db_name,
  extended_config ->> 'DBInstanceId' as db_instance_id,
  extended_config ->> 'SecretSubType' as secret_sub_type
from
  alicloud_kms_secret;

List secrets without application tag key

select
  name,
  tags
from
  alicloud_kms_secret
where
  not tags :: JSONB ? 'application';

Query examples

kms_secrets_for_kms_key

.inspect alicloud_kms_secret

Alicloud KMS Secret

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The Alicloud Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Alibaba Cloud Resource Name (ARN).
automatic_rotation	text	Specifies whether automatic key rotation is enabled.
create_time	timestamp with time zone	The time when the KMS Secret was created.
description	text	The description of the secret.
encryption_key_id	text	The ID of the KMS customer master key (CMK) that is used to encrypt the secret value.
extended_config	jsonb	The extended configuration of Secret.
last_rotation_date	timestamp with time zone	Date of last rotation of Secret.
name	text	The name of the secret.
next_rotation_date	timestamp with time zone	The date of next rotation of Secret.
planned_delete_time	timestamp with time zone	The time when the KMS Secret is planned to delete.
region	text	The Alicloud region in which the resource is located.
rotation_interval	text	The rotation perion of Secret.
secret_type	text	The type of the secret.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags attached with the resource.
title	text	Title of the resource.
update_time	timestamp with time zone	The time when the KMS Secret was modifies.
version_ids	jsonb	The list of secret versions.

turbot/alicloud

Table: alicloud_kms_secret

Examples

Basic info

List secrets that do not have automatic rotation enabled

List secrets that have not been rotated within the last 30 days

Get the extended configuration info for each secret

List secrets without application tag key

Query examples

.inspect alicloud_kms_secret

Steampipe

Resources

Community