adSecretBackend.csharp.md

adSecretBackend Submodule

Constructs

AdSecretBackend

Represents a {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend vault_ad_secret_backend}.

Initializers

using HashiCorp.Cdktf.Providers.Vault;

new AdSecretBackend(Construct Scope, string Id, AdSecretBackendConfig Config);

Name	Type	Description
Scope	Constructs.Construct	The scope in which to define this construct.
Id	string	The scoped construct ID.
Config	AdSecretBackendConfig	No description.

---

Scope^Required

• Type: Constructs.Construct

The scope in which to define this construct.

---

Id^Required

• Type: string

The scoped construct ID.

Must be unique amongst siblings in the same scope

---

Config^Required

• Type: AdSecretBackendConfig

---

Methods

Name	Description
ToString	Returns a string representation of this construct.
AddOverride	No description.
OverrideLogicalId	Overrides the auto-generated logical ID with a specific ID.
ResetOverrideLogicalId	Resets a previously passed logical Id to use the auto-generated logical id again.
ToHclTerraform	No description.
ToMetadata	No description.
ToTerraform	Adds this resource to the terraform JSON output.
AddMoveTarget	Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.
GetAnyMapAttribute	No description.
GetBooleanAttribute	No description.
GetBooleanMapAttribute	No description.
GetListAttribute	No description.
GetNumberAttribute	No description.
GetNumberListAttribute	No description.
GetNumberMapAttribute	No description.
GetStringAttribute	No description.
GetStringMapAttribute	No description.
HasResourceMove	No description.
ImportFrom	No description.
InterpolationForAttribute	No description.
MoveFromId	Move the resource corresponding to "id" to this resource.
MoveTo	Moves this resource to the target resource given by moveTarget.
MoveToId	Moves this resource to the resource corresponding to "id".
ResetAnonymousGroupSearch	No description.
ResetBackend	No description.
ResetCaseSensitiveNames	No description.
ResetCertificate	No description.
ResetClientTlsCert	No description.
ResetClientTlsKey	No description.
ResetDefaultLeaseTtlSeconds	No description.
ResetDenyNullBind	No description.
ResetDescription	No description.
ResetDisableRemount	No description.
ResetDiscoverdn	No description.
ResetGroupattr	No description.
ResetGroupdn	No description.
ResetGroupfilter	No description.
ResetId	No description.
ResetInsecureTls	No description.
ResetLastRotationTolerance	No description.
ResetLocal	No description.
ResetMaxLeaseTtlSeconds	No description.
ResetMaxTtl	No description.
ResetNamespace	No description.
ResetPasswordPolicy	No description.
ResetRequestTimeout	No description.
ResetStarttls	No description.
ResetTlsMaxVersion	No description.
ResetTlsMinVersion	No description.
ResetTtl	No description.
ResetUpndomain	No description.
ResetUrl	No description.
ResetUsePre111GroupCnBehavior	No description.
ResetUserattr	No description.
ResetUserdn	No description.
ResetUseTokenGroups	No description.

---

ToString

private string ToString()

Returns a string representation of this construct.

AddOverride

private void AddOverride(string Path, object Value)

Path^Required

• Type: string

---

Value^Required

• Type: object

---

OverrideLogicalId

private void OverrideLogicalId(string NewLogicalId)

Overrides the auto-generated logical ID with a specific ID.

NewLogicalId^Required

• Type: string

The new logical ID to use for this stack element.

---

ResetOverrideLogicalId

private void ResetOverrideLogicalId()

Resets a previously passed logical Id to use the auto-generated logical id again.

ToHclTerraform

private object ToHclTerraform()

ToMetadata

private object ToMetadata()

ToTerraform

private object ToTerraform()

Adds this resource to the terraform JSON output.

AddMoveTarget

private void AddMoveTarget(string MoveTarget)

Adds a user defined moveTarget string to this resource to be later used in .moveTo(moveTarget) to resolve the location of the move.

MoveTarget^Required

• Type: string

The string move target that will correspond to this resource.

---

GetAnyMapAttribute

private System.Collections.Generic.IDictionary<string, object> GetAnyMapAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetBooleanAttribute

private IResolvable GetBooleanAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetBooleanMapAttribute

private System.Collections.Generic.IDictionary<string, bool> GetBooleanMapAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetListAttribute

private string[] GetListAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetNumberAttribute

private double GetNumberAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetNumberListAttribute

private double[] GetNumberListAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetNumberMapAttribute

private System.Collections.Generic.IDictionary<string, double> GetNumberMapAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetStringAttribute

private string GetStringAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

GetStringMapAttribute

private System.Collections.Generic.IDictionary<string, string> GetStringMapAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

HasResourceMove

private object HasResourceMove()

ImportFrom

private void ImportFrom(string Id, TerraformProvider Provider = null)

Id^Required

• Type: string

---

Provider^Optional

• Type: HashiCorp.Cdktf.TerraformProvider

---

InterpolationForAttribute

private IResolvable InterpolationForAttribute(string TerraformAttribute)

TerraformAttribute^Required

• Type: string

---

MoveFromId

private void MoveFromId(string Id)

Move the resource corresponding to "id" to this resource.

Note that the resource being moved from must be marked as moved using it's instance function.

Id^Required

• Type: string

Full id of resource being moved from, e.g. "aws_s3_bucket.example".

---

MoveTo

private void MoveTo(string MoveTarget, object Index = null)

Moves this resource to the target resource given by moveTarget.

MoveTarget^Required

• Type: string

The previously set user defined string set by .addMoveTarget() corresponding to the resource to move to.

---

Index^Optional

• Type: object

Optional The index corresponding to the key the resource is to appear in the foreach of a resource to move to.

---

MoveToId

private void MoveToId(string Id)

Moves this resource to the resource corresponding to "id".

Id^Required

• Type: string

Full id of resource to move to, e.g. "aws_s3_bucket.example".

---

ResetAnonymousGroupSearch

private void ResetAnonymousGroupSearch()

ResetBackend

private void ResetBackend()

ResetCaseSensitiveNames

private void ResetCaseSensitiveNames()

ResetCertificate

private void ResetCertificate()

ResetClientTlsCert

private void ResetClientTlsCert()

ResetClientTlsKey

private void ResetClientTlsKey()

ResetDefaultLeaseTtlSeconds

private void ResetDefaultLeaseTtlSeconds()

ResetDenyNullBind

private void ResetDenyNullBind()

ResetDescription

private void ResetDescription()

ResetDisableRemount

private void ResetDisableRemount()

ResetDiscoverdn

private void ResetDiscoverdn()

ResetGroupattr

private void ResetGroupattr()

ResetGroupdn

private void ResetGroupdn()

ResetGroupfilter

private void ResetGroupfilter()

ResetId

private void ResetId()

ResetInsecureTls

private void ResetInsecureTls()

ResetLastRotationTolerance

private void ResetLastRotationTolerance()

ResetLocal

private void ResetLocal()

ResetMaxLeaseTtlSeconds

private void ResetMaxLeaseTtlSeconds()

ResetMaxTtl

private void ResetMaxTtl()

ResetNamespace

private void ResetNamespace()

ResetPasswordPolicy

private void ResetPasswordPolicy()

ResetRequestTimeout

private void ResetRequestTimeout()

ResetStarttls

private void ResetStarttls()

ResetTlsMaxVersion

private void ResetTlsMaxVersion()

ResetTlsMinVersion

private void ResetTlsMinVersion()

ResetTtl

private void ResetTtl()

ResetUpndomain

private void ResetUpndomain()

ResetUrl

private void ResetUrl()

ResetUsePre111GroupCnBehavior

private void ResetUsePre111GroupCnBehavior()

ResetUserattr

private void ResetUserattr()

ResetUserdn

private void ResetUserdn()

ResetUseTokenGroups

private void ResetUseTokenGroups()

Static Functions

Name	Description
IsConstruct	Checks if x is a construct.
IsTerraformElement	No description.
IsTerraformResource	No description.
GenerateConfigForImport	Generates CDKTF code for importing a AdSecretBackend resource upon running "cdktf plan ".

---

IsConstruct

using HashiCorp.Cdktf.Providers.Vault;

AdSecretBackend.IsConstruct(object X);

Checks if x is a construct.

Use this method instead of instanceof to properly detect Construct instances, even when the construct library is symlinked.

Explanation: in JavaScript, multiple copies of the constructs library on disk are seen as independent, completely different libraries. As a consequence, the class Construct in each copy of the constructs library is seen as a different class, and an instance of one class will not test as instanceof the other class. npm install will not create installations like this, but users may manually symlink construct libraries together or use a monorepo tool: in those cases, multiple copies of the constructs library can be accidentally installed, and instanceof will behave unpredictably. It is safest to avoid using instanceof, and using this type-testing method instead.

X^Required

• Type: object

Any object.

---

IsTerraformElement

using HashiCorp.Cdktf.Providers.Vault;

AdSecretBackend.IsTerraformElement(object X);

X^Required

• Type: object

---

IsTerraformResource

using HashiCorp.Cdktf.Providers.Vault;

AdSecretBackend.IsTerraformResource(object X);

X^Required

• Type: object

---

GenerateConfigForImport

using HashiCorp.Cdktf.Providers.Vault;

AdSecretBackend.GenerateConfigForImport(Construct Scope, string ImportToId, string ImportFromId, TerraformProvider Provider = null);

Generates CDKTF code for importing a AdSecretBackend resource upon running "cdktf plan ".

Scope^Required

• Type: Constructs.Construct

The scope in which to define this construct.

---

ImportToId^Required

• Type: string

The construct id used in the generated config for the AdSecretBackend to import.

---

ImportFromId^Required

• Type: string

The id of the existing AdSecretBackend that should be imported.

Refer to the {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#import import section} in the documentation of this resource for the id to use

---

Provider^Optional

• Type: HashiCorp.Cdktf.TerraformProvider

? Optional instance of the provider where the AdSecretBackend to import is found.

---

Properties

Name	Type	Description
Node	Constructs.Node	The tree node.
CdktfStack	HashiCorp.Cdktf.TerraformStack	No description.
Fqn	string	No description.
FriendlyUniqueId	string	No description.
TerraformMetaArguments	System.Collections.Generic.IDictionary<string, object>	No description.
TerraformResourceType	string	No description.
TerraformGeneratorMetadata	HashiCorp.Cdktf.TerraformProviderGeneratorMetadata	No description.
Connection	object	No description.
Count	object	No description.
DependsOn	string[]	No description.
ForEach	HashiCorp.Cdktf.ITerraformIterator	No description.
Lifecycle	HashiCorp.Cdktf.TerraformResourceLifecycle	No description.
Provider	HashiCorp.Cdktf.TerraformProvider	No description.
Provisioners	object[]	No description.
AnonymousGroupSearchInput	object	No description.
BackendInput	string	No description.
BinddnInput	string	No description.
BindpassInput	string	No description.
CaseSensitiveNamesInput	object	No description.
CertificateInput	string	No description.
ClientTlsCertInput	string	No description.
ClientTlsKeyInput	string	No description.
DefaultLeaseTtlSecondsInput	double	No description.
DenyNullBindInput	object	No description.
DescriptionInput	string	No description.
DisableRemountInput	object	No description.
DiscoverdnInput	object	No description.
GroupattrInput	string	No description.
GroupdnInput	string	No description.
GroupfilterInput	string	No description.
IdInput	string	No description.
InsecureTlsInput	object	No description.
LastRotationToleranceInput	double	No description.
LocalInput	object	No description.
MaxLeaseTtlSecondsInput	double	No description.
MaxTtlInput	double	No description.
NamespaceInput	string	No description.
PasswordPolicyInput	string	No description.
RequestTimeoutInput	double	No description.
StarttlsInput	object	No description.
TlsMaxVersionInput	string	No description.
TlsMinVersionInput	string	No description.
TtlInput	double	No description.
UpndomainInput	string	No description.
UrlInput	string	No description.
UsePre111GroupCnBehaviorInput	object	No description.
UserattrInput	string	No description.
UserdnInput	string	No description.
UseTokenGroupsInput	object	No description.
AnonymousGroupSearch	object	No description.
Backend	string	No description.
Binddn	string	No description.
Bindpass	string	No description.
CaseSensitiveNames	object	No description.
Certificate	string	No description.
ClientTlsCert	string	No description.
ClientTlsKey	string	No description.
DefaultLeaseTtlSeconds	double	No description.
DenyNullBind	object	No description.
Description	string	No description.
DisableRemount	object	No description.
Discoverdn	object	No description.
Groupattr	string	No description.
Groupdn	string	No description.
Groupfilter	string	No description.
Id	string	No description.
InsecureTls	object	No description.
LastRotationTolerance	double	No description.
Local	object	No description.
MaxLeaseTtlSeconds	double	No description.
MaxTtl	double	No description.
Namespace	string	No description.
PasswordPolicy	string	No description.
RequestTimeout	double	No description.
Starttls	object	No description.
TlsMaxVersion	string	No description.
TlsMinVersion	string	No description.
Ttl	double	No description.
Upndomain	string	No description.
Url	string	No description.
UsePre111GroupCnBehavior	object	No description.
Userattr	string	No description.
Userdn	string	No description.
UseTokenGroups	object	No description.

---

Node^Required

public Node Node { get; }

• Type: Constructs.Node

The tree node.

---

CdktfStack^Required

public TerraformStack CdktfStack { get; }

• Type: HashiCorp.Cdktf.TerraformStack

---

Fqn^Required

public string Fqn { get; }

• Type: string

---

FriendlyUniqueId^Required

public string FriendlyUniqueId { get; }

• Type: string

---

TerraformMetaArguments^Required

public System.Collections.Generic.IDictionary<string, object> TerraformMetaArguments { get; }

• Type: System.Collections.Generic.IDictionary<string, object>

---

TerraformResourceType^Required

public string TerraformResourceType { get; }

• Type: string

---

TerraformGeneratorMetadata^Optional

public TerraformProviderGeneratorMetadata TerraformGeneratorMetadata { get; }

• Type: HashiCorp.Cdktf.TerraformProviderGeneratorMetadata

---

Connection^Optional

public object Connection { get; }

• Type: object

---

Count^Optional

public object Count { get; }

• Type: object

---

DependsOn^Optional

public string[] DependsOn { get; }

• Type: string[]

---

ForEach^Optional

public ITerraformIterator ForEach { get; }

• Type: HashiCorp.Cdktf.ITerraformIterator

---

Lifecycle^Optional

public TerraformResourceLifecycle Lifecycle { get; }

• Type: HashiCorp.Cdktf.TerraformResourceLifecycle

---

Provider^Optional

public TerraformProvider Provider { get; }

• Type: HashiCorp.Cdktf.TerraformProvider

---

Provisioners^Optional

public object[] Provisioners { get; }

• Type: object[]

---

AnonymousGroupSearchInput^Optional

public object AnonymousGroupSearchInput { get; }

• Type: object

---

BackendInput^Optional

public string BackendInput { get; }

• Type: string

---

BinddnInput^Optional

public string BinddnInput { get; }

• Type: string

---

BindpassInput^Optional

public string BindpassInput { get; }

• Type: string

---

CaseSensitiveNamesInput^Optional

public object CaseSensitiveNamesInput { get; }

• Type: object

---

CertificateInput^Optional

public string CertificateInput { get; }

• Type: string

---

ClientTlsCertInput^Optional

public string ClientTlsCertInput { get; }

• Type: string

---

ClientTlsKeyInput^Optional

public string ClientTlsKeyInput { get; }

• Type: string

---

DefaultLeaseTtlSecondsInput^Optional

public double DefaultLeaseTtlSecondsInput { get; }

• Type: double

---

DenyNullBindInput^Optional

public object DenyNullBindInput { get; }

• Type: object

---

DescriptionInput^Optional

public string DescriptionInput { get; }

• Type: string

---

DisableRemountInput^Optional

public object DisableRemountInput { get; }

• Type: object

---

DiscoverdnInput^Optional

public object DiscoverdnInput { get; }

• Type: object

---

GroupattrInput^Optional

public string GroupattrInput { get; }

• Type: string

---

GroupdnInput^Optional

public string GroupdnInput { get; }

• Type: string

---

GroupfilterInput^Optional

public string GroupfilterInput { get; }

• Type: string

---

IdInput^Optional

public string IdInput { get; }

• Type: string

---

InsecureTlsInput^Optional

public object InsecureTlsInput { get; }

• Type: object

---

LastRotationToleranceInput^Optional

public double LastRotationToleranceInput { get; }

• Type: double

---

LocalInput^Optional

public object LocalInput { get; }

• Type: object

---

MaxLeaseTtlSecondsInput^Optional

public double MaxLeaseTtlSecondsInput { get; }

• Type: double

---

MaxTtlInput^Optional

public double MaxTtlInput { get; }

• Type: double

---

NamespaceInput^Optional

public string NamespaceInput { get; }

• Type: string

---

PasswordPolicyInput^Optional

public string PasswordPolicyInput { get; }

• Type: string

---

RequestTimeoutInput^Optional

public double RequestTimeoutInput { get; }

• Type: double

---

StarttlsInput^Optional

public object StarttlsInput { get; }

• Type: object

---

TlsMaxVersionInput^Optional

public string TlsMaxVersionInput { get; }

• Type: string

---

TlsMinVersionInput^Optional

public string TlsMinVersionInput { get; }

• Type: string

---

TtlInput^Optional

public double TtlInput { get; }

• Type: double

---

UpndomainInput^Optional

public string UpndomainInput { get; }

• Type: string

---

UrlInput^Optional

public string UrlInput { get; }

• Type: string

---

UsePre111GroupCnBehaviorInput^Optional

public object UsePre111GroupCnBehaviorInput { get; }

• Type: object

---

UserattrInput^Optional

public string UserattrInput { get; }

• Type: string

---

UserdnInput^Optional

public string UserdnInput { get; }

• Type: string

---

UseTokenGroupsInput^Optional

public object UseTokenGroupsInput { get; }

• Type: object

---

AnonymousGroupSearch^Required

public object AnonymousGroupSearch { get; }

• Type: object

---

Backend^Required

public string Backend { get; }

• Type: string

---

Binddn^Required

public string Binddn { get; }

• Type: string

---

Bindpass^Required

public string Bindpass { get; }

• Type: string

---

CaseSensitiveNames^Required

public object CaseSensitiveNames { get; }

• Type: object

---

Certificate^Required

public string Certificate { get; }

• Type: string

---

ClientTlsCert^Required

public string ClientTlsCert { get; }

• Type: string

---

ClientTlsKey^Required

public string ClientTlsKey { get; }

• Type: string

---

DefaultLeaseTtlSeconds^Required

public double DefaultLeaseTtlSeconds { get; }

• Type: double

---

DenyNullBind^Required

public object DenyNullBind { get; }

• Type: object

---

Description^Required

public string Description { get; }

• Type: string

---

DisableRemount^Required

public object DisableRemount { get; }

• Type: object

---

Discoverdn^Required

public object Discoverdn { get; }

• Type: object

---

Groupattr^Required

public string Groupattr { get; }

• Type: string

---

Groupdn^Required

public string Groupdn { get; }

• Type: string

---

Groupfilter^Required

public string Groupfilter { get; }

• Type: string

---

Id^Required

public string Id { get; }

• Type: string

---

InsecureTls^Required

public object InsecureTls { get; }

• Type: object

---

LastRotationTolerance^Required

public double LastRotationTolerance { get; }

• Type: double

---

Local^Required

public object Local { get; }

• Type: object

---

MaxLeaseTtlSeconds^Required

public double MaxLeaseTtlSeconds { get; }

• Type: double

---

MaxTtl^Required

public double MaxTtl { get; }

• Type: double

---

Namespace^Required

public string Namespace { get; }

• Type: string

---

PasswordPolicy^Required

public string PasswordPolicy { get; }

• Type: string

---

RequestTimeout^Required

public double RequestTimeout { get; }

• Type: double

---

Starttls^Required

public object Starttls { get; }

• Type: object

---

TlsMaxVersion^Required

public string TlsMaxVersion { get; }

• Type: string

---

TlsMinVersion^Required

public string TlsMinVersion { get; }

• Type: string

---

Ttl^Required

public double Ttl { get; }

• Type: double

---

Upndomain^Required

public string Upndomain { get; }

• Type: string

---

Url^Required

public string Url { get; }

• Type: string

---

UsePre111GroupCnBehavior^Required

public object UsePre111GroupCnBehavior { get; }

• Type: object

---

Userattr^Required

public string Userattr { get; }

• Type: string

---

Userdn^Required

public string Userdn { get; }

• Type: string

---

UseTokenGroups^Required

public object UseTokenGroups { get; }

• Type: object

---

Constants

Name	Type	Description
TfResourceType	string	No description.

---

TfResourceType^Required

public string TfResourceType { get; }

• Type: string

---

Structs

AdSecretBackendConfig

Initializer

using HashiCorp.Cdktf.Providers.Vault;

new AdSecretBackendConfig {
    object Connection = null,
    object Count = null,
    ITerraformDependable[] DependsOn = null,
    ITerraformIterator ForEach = null,
    TerraformResourceLifecycle Lifecycle = null,
    TerraformProvider Provider = null,
    object[] Provisioners = null,
    string Binddn,
    string Bindpass,
    object AnonymousGroupSearch = null,
    string Backend = null,
    object CaseSensitiveNames = null,
    string Certificate = null,
    string ClientTlsCert = null,
    string ClientTlsKey = null,
    double DefaultLeaseTtlSeconds = null,
    object DenyNullBind = null,
    string Description = null,
    object DisableRemount = null,
    object Discoverdn = null,
    string Groupattr = null,
    string Groupdn = null,
    string Groupfilter = null,
    string Id = null,
    object InsecureTls = null,
    double LastRotationTolerance = null,
    object Local = null,
    double MaxLeaseTtlSeconds = null,
    double MaxTtl = null,
    string Namespace = null,
    string PasswordPolicy = null,
    double RequestTimeout = null,
    object Starttls = null,
    string TlsMaxVersion = null,
    string TlsMinVersion = null,
    double Ttl = null,
    string Upndomain = null,
    string Url = null,
    object UsePre111GroupCnBehavior = null,
    string Userattr = null,
    string Userdn = null,
    object UseTokenGroups = null
};

Properties

Name	Type	Description
Connection	object	No description.
Count	object	No description.
DependsOn	HashiCorp.Cdktf.ITerraformDependable[]	No description.
ForEach	HashiCorp.Cdktf.ITerraformIterator	No description.
Lifecycle	HashiCorp.Cdktf.TerraformResourceLifecycle	No description.
Provider	HashiCorp.Cdktf.TerraformProvider	No description.
Provisioners	object[]	No description.
Binddn	string	Distinguished name of object to bind when performing user and group search.
Bindpass	string	LDAP password for searching for the user DN.
AnonymousGroupSearch	object	Use anonymous binds when performing LDAP group searches (if true the initial credentials will still be used for the initial connection test).
Backend	string	The mount path for a backend, for example, the path given in "$ vault auth enable -path=my-ad ad".
CaseSensitiveNames	object	If true, case sensitivity will be used when comparing usernames and groups for matching policies.
Certificate	string	CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.
ClientTlsCert	string	Client certificate to provide to the LDAP server, must be x509 PEM encoded.
ClientTlsKey	string	Client certificate key to provide to the LDAP server, must be x509 PEM encoded.
DefaultLeaseTtlSeconds	double	Default lease duration for secrets in seconds.
DenyNullBind	object	Denies an unauthenticated LDAP bind request if the user's password is empty; defaults to true.
Description	string	Human-friendly description of the mount for the backend.
DisableRemount	object	If set, opts out of mount migration on path updates.
Discoverdn	object	Use anonymous bind to discover the bind DN of a user.
Groupattr	string	LDAP attribute to follow on objects returned by in order to enumerate user group membership.
Groupdn	string	LDAP search base to use for group membership search (eg: ou=Groups,dc=example,dc=org).
Groupfilter	string	Go template for querying group membership of user.
Id	string	Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#id AdSecretBackend#id}.
InsecureTls	object	Skip LDAP server SSL Certificate verification - insecure and not recommended for production use.
LastRotationTolerance	double	The number of seconds after a Vault rotation where, if Active Directory shows a later rotation, it should be considered out-of-band.
Local	object	Mark the secrets engine as local-only.
MaxLeaseTtlSeconds	double	Maximum possible lease duration for secrets in seconds.
MaxTtl	double	In seconds, the maximum password time-to-live.
Namespace	string	Target namespace. (requires Enterprise).
PasswordPolicy	string	Name of the password policy to use to generate passwords.
RequestTimeout	double	Timeout, in seconds, for the connection when making requests against the server before returning back an error.
Starttls	object	Issue a StartTLS command after establishing unencrypted connection.
TlsMaxVersion	string	Maximum TLS version to use. Accepted values are 'tls10', 'tls11', 'tls12' or 'tls13'. Defaults to 'tls12'.
TlsMinVersion	string	Minimum TLS version to use. Accepted values are 'tls10', 'tls11', 'tls12' or 'tls13'. Defaults to 'tls12'.
Ttl	double	In seconds, the default password time-to-live.
Upndomain	string	Enables userPrincipalDomain login with [username]@UPNDomain.
Url	string	LDAP URL to connect to (default: ldap://127.0.0.1). Multiple URLs can be specified by concatenating them with commas; they will be tried in-order.
UsePre111GroupCnBehavior	object	In Vault 1.1.1 a fix for handling group CN values of different cases unfortunately introduced a regression that could cause previously defined groups to not be found due to a change in the resulting name. If set true, the pre-1.1.1 behavior for matching group CNs will be used. This is only needed in some upgrade scenarios for backwards compatibility. It is enabled by default if the config is upgraded but disabled by default on new configurations.
Userattr	string	Attribute used for users (default: cn).
Userdn	string	LDAP domain to use for users (eg: ou=People,dc=example,dc=org).
UseTokenGroups	object	If true, use the Active Directory tokenGroups constructed attribute of the user to find the group memberships.

---

Connection^Optional

public object Connection { get; set; }

• Type: object

---

Count^Optional

public object Count { get; set; }

• Type: object

---

DependsOn^Optional

public ITerraformDependable[] DependsOn { get; set; }

• Type: HashiCorp.Cdktf.ITerraformDependable[]

---

ForEach^Optional

public ITerraformIterator ForEach { get; set; }

• Type: HashiCorp.Cdktf.ITerraformIterator

---

Lifecycle^Optional

public TerraformResourceLifecycle Lifecycle { get; set; }

• Type: HashiCorp.Cdktf.TerraformResourceLifecycle

---

Provider^Optional

public TerraformProvider Provider { get; set; }

• Type: HashiCorp.Cdktf.TerraformProvider

---

Provisioners^Optional

public object[] Provisioners { get; set; }

• Type: object[]

---

Binddn^Required

public string Binddn { get; set; }

• Type: string

Distinguished name of object to bind when performing user and group search.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#binddn AdSecretBackend#binddn}

---

Bindpass^Required

public string Bindpass { get; set; }

• Type: string

LDAP password for searching for the user DN.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#bindpass AdSecretBackend#bindpass}

---

AnonymousGroupSearch^Optional

public object AnonymousGroupSearch { get; set; }

• Type: object

Use anonymous binds when performing LDAP group searches (if true the initial credentials will still be used for the initial connection test).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#anonymous_group_search AdSecretBackend#anonymous_group_search}

---

Backend^Optional

public string Backend { get; set; }

• Type: string

The mount path for a backend, for example, the path given in "$ vault auth enable -path=my-ad ad".

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#backend AdSecretBackend#backend}

---

CaseSensitiveNames^Optional

public object CaseSensitiveNames { get; set; }

• Type: object

If true, case sensitivity will be used when comparing usernames and groups for matching policies.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#case_sensitive_names AdSecretBackend#case_sensitive_names}

---

Certificate^Optional

public string Certificate { get; set; }

• Type: string

CA certificate to use when verifying LDAP server certificate, must be x509 PEM encoded.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#certificate AdSecretBackend#certificate}

---

ClientTlsCert^Optional

public string ClientTlsCert { get; set; }

• Type: string

Client certificate to provide to the LDAP server, must be x509 PEM encoded.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#client_tls_cert AdSecretBackend#client_tls_cert}

---

ClientTlsKey^Optional

public string ClientTlsKey { get; set; }

• Type: string

Client certificate key to provide to the LDAP server, must be x509 PEM encoded.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#client_tls_key AdSecretBackend#client_tls_key}

---

DefaultLeaseTtlSeconds^Optional

public double DefaultLeaseTtlSeconds { get; set; }

• Type: double

Default lease duration for secrets in seconds.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#default_lease_ttl_seconds AdSecretBackend#default_lease_ttl_seconds}

---

DenyNullBind^Optional

public object DenyNullBind { get; set; }

• Type: object

Denies an unauthenticated LDAP bind request if the user's password is empty; defaults to true.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#deny_null_bind AdSecretBackend#deny_null_bind}

---

Description^Optional

public string Description { get; set; }

• Type: string

Human-friendly description of the mount for the backend.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#description AdSecretBackend#description}

---

DisableRemount^Optional

public object DisableRemount { get; set; }

• Type: object

If set, opts out of mount migration on path updates.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#disable_remount AdSecretBackend#disable_remount}

---

Discoverdn^Optional

public object Discoverdn { get; set; }

• Type: object

Use anonymous bind to discover the bind DN of a user.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#discoverdn AdSecretBackend#discoverdn}

---

Groupattr^Optional

public string Groupattr { get; set; }

• Type: string

LDAP attribute to follow on objects returned by in order to enumerate user group membership.

Examples: "cn" or "memberOf", etc. Default: cn

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#groupattr AdSecretBackend#groupattr}

---

Groupdn^Optional

public string Groupdn { get; set; }

• Type: string

LDAP search base to use for group membership search (eg: ou=Groups,dc=example,dc=org).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#groupdn AdSecretBackend#groupdn}

---

Groupfilter^Optional

public string Groupfilter { get; set; }

• Type: string

Go template for querying group membership of user.

The template can access the following context variables: UserDN, Username Example: (&(objectClass=group)(member:1.2.840.113556.1.4.1941:={{.UserDN}})) Default: (|(memberUid={{.Username}})(member={{.UserDN}})(uniqueMember={{.UserDN}}))

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#groupfilter AdSecretBackend#groupfilter}

---

Id^Optional

public string Id { get; set; }

• Type: string

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#id AdSecretBackend#id}.

Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2. If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.

---

InsecureTls^Optional

public object InsecureTls { get; set; }

• Type: object

Skip LDAP server SSL Certificate verification - insecure and not recommended for production use.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#insecure_tls AdSecretBackend#insecure_tls}

---

LastRotationTolerance^Optional

public double LastRotationTolerance { get; set; }

• Type: double

The number of seconds after a Vault rotation where, if Active Directory shows a later rotation, it should be considered out-of-band.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#last_rotation_tolerance AdSecretBackend#last_rotation_tolerance}

---

Local^Optional

public object Local { get; set; }

• Type: object

Mark the secrets engine as local-only.

Local engines are not replicated or removed by replication.Tolerance duration to use when checking the last rotation time.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#local AdSecretBackend#local}

---

MaxLeaseTtlSeconds^Optional

public double MaxLeaseTtlSeconds { get; set; }

• Type: double

Maximum possible lease duration for secrets in seconds.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#max_lease_ttl_seconds AdSecretBackend#max_lease_ttl_seconds}

---

MaxTtl^Optional

public double MaxTtl { get; set; }

• Type: double

In seconds, the maximum password time-to-live.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#max_ttl AdSecretBackend#max_ttl}

---

Namespace^Optional

public string Namespace { get; set; }

• Type: string

Target namespace. (requires Enterprise).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#namespace AdSecretBackend#namespace}

---

PasswordPolicy^Optional

public string PasswordPolicy { get; set; }

• Type: string

Name of the password policy to use to generate passwords.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#password_policy AdSecretBackend#password_policy}

---

RequestTimeout^Optional

public double RequestTimeout { get; set; }

• Type: double

Timeout, in seconds, for the connection when making requests against the server before returning back an error.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#request_timeout AdSecretBackend#request_timeout}

---

Starttls^Optional

public object Starttls { get; set; }

• Type: object

Issue a StartTLS command after establishing unencrypted connection.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#starttls AdSecretBackend#starttls}

---

TlsMaxVersion^Optional

public string TlsMaxVersion { get; set; }

• Type: string

Maximum TLS version to use. Accepted values are 'tls10', 'tls11', 'tls12' or 'tls13'. Defaults to 'tls12'.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#tls_max_version AdSecretBackend#tls_max_version}

---

TlsMinVersion^Optional

public string TlsMinVersion { get; set; }

• Type: string

Minimum TLS version to use. Accepted values are 'tls10', 'tls11', 'tls12' or 'tls13'. Defaults to 'tls12'.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#tls_min_version AdSecretBackend#tls_min_version}

---

Ttl^Optional

public double Ttl { get; set; }

• Type: double

In seconds, the default password time-to-live.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#ttl AdSecretBackend#ttl}

---

Upndomain^Optional

public string Upndomain { get; set; }

• Type: string

Enables userPrincipalDomain login with [username]@UPNDomain.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#upndomain AdSecretBackend#upndomain}

---

Url^Optional

public string Url { get; set; }

• Type: string

LDAP URL to connect to (default: ldap://127.0.0.1). Multiple URLs can be specified by concatenating them with commas; they will be tried in-order.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#url AdSecretBackend#url}

---

UsePre111GroupCnBehavior^Optional

public object UsePre111GroupCnBehavior { get; set; }

• Type: object

In Vault 1.1.1 a fix for handling group CN values of different cases unfortunately introduced a regression that could cause previously defined groups to not be found due to a change in the resulting name. If set true, the pre-1.1.1 behavior for matching group CNs will be used. This is only needed in some upgrade scenarios for backwards compatibility. It is enabled by default if the config is upgraded but disabled by default on new configurations.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#use_pre111_group_cn_behavior AdSecretBackend#use_pre111_group_cn_behavior}

---

Userattr^Optional

public string Userattr { get; set; }

• Type: string

Attribute used for users (default: cn).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#userattr AdSecretBackend#userattr}

---

Userdn^Optional

public string Userdn { get; set; }

• Type: string

LDAP domain to use for users (eg: ou=People,dc=example,dc=org).

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#userdn AdSecretBackend#userdn}

---

UseTokenGroups^Optional

public object UseTokenGroups { get; set; }

• Type: object

If true, use the Active Directory tokenGroups constructed attribute of the user to find the group memberships.

This will find all security groups including nested ones.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/vault/4.5.0/docs/resources/ad_secret_backend#use_token_groups AdSecretBackend#use_token_groups}

---