aws.secretsmanager.getSecretVersions

AWS v7.11.0, Nov 5 25

AWS v7.11.0 published on Wednesday, Nov 5, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-aws

AWS v7.11.0 published on Wednesday, Nov 5, 2025 by Pulumi

Schema (JSON)

pulumi/pulumi-aws

Using getSecretVersions

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getSecretVersions(args: GetSecretVersionsArgs, opts?: InvokeOptions): Promise<GetSecretVersionsResult>
function getSecretVersionsOutput(args: GetSecretVersionsOutputArgs, opts?: InvokeOptions): Output<GetSecretVersionsResult>

def get_secret_versions(include_deprecated: Optional[bool] = None,
                        region: Optional[str] = None,
                        secret_id: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetSecretVersionsResult
def get_secret_versions_output(include_deprecated: Optional[pulumi.Input[bool]] = None,
                        region: Optional[pulumi.Input[str]] = None,
                        secret_id: Optional[pulumi.Input[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetSecretVersionsResult]

func GetSecretVersions(ctx *Context, args *GetSecretVersionsArgs, opts ...InvokeOption) (*GetSecretVersionsResult, error)
func GetSecretVersionsOutput(ctx *Context, args *GetSecretVersionsOutputArgs, opts ...InvokeOption) GetSecretVersionsResultOutput

> Note: This function is named GetSecretVersions in the Go SDK.

public static class GetSecretVersions 
{
    public static Task<GetSecretVersionsResult> InvokeAsync(GetSecretVersionsArgs args, InvokeOptions? opts = null)
    public static Output<GetSecretVersionsResult> Invoke(GetSecretVersionsInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetSecretVersionsResult> getSecretVersions(GetSecretVersionsArgs args, InvokeOptions options)
public static Output<GetSecretVersionsResult> getSecretVersions(GetSecretVersionsArgs args, InvokeOptions options)

fn::invoke:
  function: aws:secretsmanager/getSecretVersions:getSecretVersions
  arguments:
    # arguments dictionary

The following arguments are supported:

SecretId string: Specifies the secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
IncludeDeprecated bool: If true, all deprecated secret versions are included in the response. If false, no deprecated secret versions are included in the response. If no value is specified, the default value is false.
Region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.

SecretId string: Specifies the secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
IncludeDeprecated bool: If true, all deprecated secret versions are included in the response. If false, no deprecated secret versions are included in the response. If no value is specified, the default value is false.
Region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.

secretId String: Specifies the secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
includeDeprecated Boolean: If true, all deprecated secret versions are included in the response. If false, no deprecated secret versions are included in the response. If no value is specified, the default value is false.
region String: Region where this resource will be managed. Defaults to the Region set in the provider configuration.

secretId string: Specifies the secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
includeDeprecated boolean: If true, all deprecated secret versions are included in the response. If false, no deprecated secret versions are included in the response. If no value is specified, the default value is false.
region string: Region where this resource will be managed. Defaults to the Region set in the provider configuration.

secret_id str: Specifies the secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
include_deprecated bool: If true, all deprecated secret versions are included in the response. If false, no deprecated secret versions are included in the response. If no value is specified, the default value is false.
region str: Region where this resource will be managed. Defaults to the Region set in the provider configuration.

secretId String: Specifies the secret containing the version that you want to retrieve. You can specify either the ARN or the friendly name of the secret.
includeDeprecated Boolean: If true, all deprecated secret versions are included in the response. If false, no deprecated secret versions are included in the response. If no value is specified, the default value is false.
region String: Region where this resource will be managed. Defaults to the Region set in the provider configuration.

getSecretVersions Result

The following output properties are available:

Arn string: ARN of the secret.
Id string: The provider-assigned unique ID for this managed resource.
Name string
Region string
SecretId string
Versions List<GetSecretVersionsVersion>: List of the versions of the secret. Attributes are specified below.
IncludeDeprecated bool

Arn string: ARN of the secret.
Id string: The provider-assigned unique ID for this managed resource.
Name string
Region string
SecretId string
Versions []GetSecretVersionsVersion: List of the versions of the secret. Attributes are specified below.
IncludeDeprecated bool

arn String: ARN of the secret.
id String: The provider-assigned unique ID for this managed resource.
name String
region String
secretId String
versions List<GetSecretVersionsVersion>: List of the versions of the secret. Attributes are specified below.
includeDeprecated Boolean

arn string: ARN of the secret.
id string: The provider-assigned unique ID for this managed resource.
name string
region string
secretId string
versions GetSecretVersionsVersion[]: List of the versions of the secret. Attributes are specified below.
includeDeprecated boolean

arn str: ARN of the secret.
id str: The provider-assigned unique ID for this managed resource.
name str
region str
secret_id str
versions Sequence[GetSecretVersionsVersion]: List of the versions of the secret. Attributes are specified below.
include_deprecated bool

arn String: ARN of the secret.
id String: The provider-assigned unique ID for this managed resource.
name String
region String
secretId String
versions List<Property Map>: List of the versions of the secret. Attributes are specified below.
includeDeprecated Boolean

Supporting Types

GetSecretVersionsVersion

CreatedTime string: Date and time this version of the secret was created.
LastAccessedDate string: Date that this version of the secret was last accessed.
VersionId string: Unique version identifier of this version of the secret.
VersionStages List<string>: List of staging labels attached to the version.

CreatedTime string: Date and time this version of the secret was created.
LastAccessedDate string: Date that this version of the secret was last accessed.
VersionId string: Unique version identifier of this version of the secret.
VersionStages []string: List of staging labels attached to the version.

createdTime String: Date and time this version of the secret was created.
lastAccessedDate String: Date that this version of the secret was last accessed.
versionId String: Unique version identifier of this version of the secret.
versionStages List<String>: List of staging labels attached to the version.

createdTime string: Date and time this version of the secret was created.
lastAccessedDate string: Date that this version of the secret was last accessed.
versionId string: Unique version identifier of this version of the secret.
versionStages string[]: List of staging labels attached to the version.

created_time str: Date and time this version of the secret was created.
last_accessed_date str: Date that this version of the secret was last accessed.
version_id str: Unique version identifier of this version of the secret.
version_stages Sequence[str]: List of staging labels attached to the version.

createdTime String: Date and time this version of the secret was created.
lastAccessedDate String: Date that this version of the secret was last accessed.
versionId String: Unique version identifier of this version of the secret.
versionStages List<String>: List of staging labels attached to the version.