All Products
Search
Document Center

Resource Orchestration Service:DATASOURCE::KMS::Secrets

Last Updated:Jun 18, 2026

Queries all secrets created by the current account in the current region.

Syntax

{
  "Type": "DATASOURCE::KMS::Secrets",
  "Properties": {
    "RefreshOptions": String
  }
}

Properties

Property

Type

Required

Editable

Description

Constraint

RefreshOptions

String

No

Yes

The refresh policy for data source resources when the stack is updated.

Valid values:

  • Never (default): Does not refresh data source resources when the stack is updated.

  • Always: Refreshes data source resources when the stack is updated.

Return values

Fn::GetAtt

  • Secrets: The details of the secrets.

  • SecretNames: The names of the secrets.

Property

Type

Description

Constraint

SecretNames

List

The names of the secrets.

None.

Secrets

List

Details of the secrets.

None.

UpdateTime

String

The time when the secret was last updated.

None.

Tags

List

The tags of the secret.

Example:

[ {
      "TagValue" : "val1",
      "TagKey" : "key1"
    } ]

SecretType

String

The type of the secret.

Valid values:

  • Rds: managed ApsaraDB RDS secret

  • Generic: generic secret

SecretName

String

The name of the secret.

None.

PlannedDeleteTime

String

The scheduled time when the secret will be deleted.

None.

CreateTime

String

The time when the secret was created.

None.

Examples

ROSTemplateFormatVersion: '2015-09-01'
Resources:
  ExtensionDataSource:
    Properties: {}
    Type: DATASOURCE::KMS::Secrets
Outputs:
  SecretNames:
    Description: The list of secret names.
    Value:
      Fn::GetAtt:
      - ExtensionDataSource
      - SecretNames
  Secrets:
    Description: The list of secrets.
    Value:
      Fn::GetAtt:
      - ExtensionDataSource
      - Secrets
{
  "ROSTemplateFormatVersion": "2015-09-01",
  "Resources": {
    "ExtensionDataSource": {
      "Type": "DATASOURCE::KMS::Secrets",
      "Properties": {}
    }
  },
  "Outputs": {
    "Secrets": {
      "Description": "The list of secrets.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "Secrets"
        ]
      }
    },
    "SecretNames": {
      "Description": "The list of secret names.",
      "Value": {
        "Fn::GetAtt": [
          "ExtensionDataSource",
          "SecretNames"
        ]
      }
    }
  }
}