{"id":22689011,"url":"https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group","last_synced_at":"2026-03-07T13:04:37.241Z","repository":{"id":182494636,"uuid":"665903362","full_name":"terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group","owner":"terraform-ibm-modules","description":"Creates a secret group in an IBM Cloud Secrets Manager instance.","archived":false,"fork":false,"pushed_at":"2024-12-22T22:41:01.000Z","size":422,"stargazers_count":0,"open_issues_count":2,"forks_count":0,"subscribers_count":16,"default_branch":"main","last_synced_at":"2024-12-26T15:04:09.034Z","etag":null,"topics":["core-team","graduated","ibm-cloud","secret-group","secret-manager","supported","terraform","terraform-module"],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/terraform-ibm-modules.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-07-13T08:59:03.000Z","updated_at":"2024-12-26T14:59:45.000Z","dependencies_parsed_at":"2023-07-25T23:15:17.601Z","dependency_job_id":"568b295e-cb8a-43c4-930d-c086d0a78437","html_url":"https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group","commit_stats":null,"previous_names":["terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group"],"tags_count":10,"template":false,"template_full_name":"terraform-ibm-modules/terraform-ibm-module-template","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/terraform-ibm-modules%2Fterraform-ibm-secrets-manager-secret-group","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/terraform-ibm-modules%2Fterraform-ibm-secrets-manager-secret-group/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/terraform-ibm-modules%2Fterraform-ibm-secrets-manager-secret-group/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/terraform-ibm-modules%2Fterraform-ibm-secrets-manager-secret-group/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/terraform-ibm-modules","download_url":"https://codeload.github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246207507,"owners_count":20740723,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["core-team","graduated","ibm-cloud","secret-group","secret-manager","supported","terraform","terraform-module"],"created_at":"2024-12-10T00:17:14.718Z","updated_at":"2026-03-07T13:04:37.234Z","avatar_url":"https://github.com/terraform-ibm-modules.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Secrets Manager secret group module\n\n[![Graduated (Supported)](https://img.shields.io/badge/Status-Graduated%20(Supported)-brightgreen)](https://terraform-ibm-modules.github.io/documentation/#/badge-status)\n[![pre-commit](https://img.shields.io/badge/pre--commit-enabled-brightgreen?logo=pre-commit\u0026logoColor=white)](https://github.com/pre-commit/pre-commit)\n[![latest release](https://img.shields.io/github/v/release/terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group?logo=GitHub\u0026sort=semver)](https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group/releases/latest)\n[![Renovate enabled](https://img.shields.io/badge/renovate-enabled-brightgreen.svg)](https://renovatebot.com/)\n[![semantic-release](https://img.shields.io/badge/%20%20%F0%9F%93%A6%F0%9F%9A%80-semantic--release-e10079.svg)](https://github.com/semantic-release/semantic-release)\n[![Terraform Registry](https://img.shields.io/badge/terraform-registry-623CE4?logo=terraform)](https://registry.terraform.io/modules/terraform-ibm-modules/secrets-manager-secret-group/ibm/latest)\n\nThis module creates a secret group in an IBM Cloud Secrets Manager instance. For more information, see [Best practices for organizing secrets and assigning access](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-best-practices-organize-secrets#best-practices-secret-groups).\n\n![Secrets Manager secret group module](./images/sm_secret-group.svg)\n\n\u003c!-- BEGIN OVERVIEW HOOK --\u003e\n## Overview\n* [terraform-ibm-secrets-manager-secret-group](#terraform-ibm-secrets-manager-secret-group)\n* [Examples](./examples)\n:information_source: Ctrl/Cmd+Click or right-click on the Schematics deploy button to open in a new tab\n    * \u003ca href=\"./examples/basic\"\u003eBasic example\u003c/a\u003e \u003ca href=\"https://cloud.ibm.com/schematics/workspaces/create?workspace_name=secrets-manager-secret-group-basic-example\u0026repository=https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group/tree/main/examples/basic\"\u003e\u003cimg src=\"https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm\u0026logoColor=white\u0026labelColor=0f62fe\" alt=\"Deploy with IBM Cloud Schematics\" style=\"height: 16px; vertical-align: text-bottom; margin-left: 5px;\"\u003e\u003c/a\u003e\n    * \u003ca href=\"./examples/private\"\u003ePrivate-Only Secret Manager example\u003c/a\u003e \u003ca href=\"https://cloud.ibm.com/schematics/workspaces/create?workspace_name=secrets-manager-secret-group-private-example\u0026repository=https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group/tree/main/examples/private\"\u003e\u003cimg src=\"https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm\u0026logoColor=white\u0026labelColor=0f62fe\" alt=\"Deploy with IBM Cloud Schematics\" style=\"height: 16px; vertical-align: text-bottom; margin-left: 5px;\"\u003e\u003c/a\u003e\n* [Contributing](#contributing)\n\u003c!-- END OVERVIEW HOOK --\u003e\n\n## terraform-ibm-secrets-manager-secret-group\n\n### Usage\n```hcl\nprovider \"ibm\" {\n  ibmcloud_api_key = \"XXXXXXXXXX\"\n  region           = \"us-south\"\n}\n\nmodule \"sm_secret_group_module\" {\n  source                   = \"terraform-ibm-modules/secrets-manager-secret-group/ibm\"\n  version                  = \"X.X.X\" # Replace \"X.X.X\" with a release version to lock into a specific release\n  region                   = \"us-south\"\n  secrets_manager_guid     = \"79c6dxxx-xxxx-xxxx-xxxx-xxxxXX38667\"\n  secret_group_name        = \"example-group\"\n  secret_group_description = \"secret group description\"\n}\n```\n\n## Required IAM access policies\nYou need the following permissions to run this module.\n\n- Account Management\n    - **Resource Group** service\n        - `Viewer` platform access\n- IAM Services\n    - **Secrets Manager** service\n        - `Editor` platform access\n        - `Manager` service access\n\n\u003c!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n### Requirements\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"requirement_terraform\"\u003e\u003c/a\u003e [terraform](#requirement\\_terraform) | \u003e= 1.9.0 |\n| \u003ca name=\"requirement_ibm\"\u003e\u003c/a\u003e [ibm](#requirement\\_ibm) | \u003e= 1.79.0, \u003c2.0.0 |\n\n### Modules\n\n| Name | Source | Version |\n|------|--------|---------|\n| \u003ca name=\"module_iam_access_groups\"\u003e\u003c/a\u003e [iam\\_access\\_groups](#module\\_iam\\_access\\_groups) | terraform-ibm-modules/iam-access-group/ibm | 1.7.2 |\n\n### Resources\n\n| Name | Type |\n|------|------|\n| [ibm_sm_secret_group.secret_group](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/resources/sm_secret_group) | resource |\n\n### Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| \u003ca name=\"input_access_group_name\"\u003e\u003c/a\u003e [access\\_group\\_name](#input\\_access\\_group\\_name) | Name of the access group to create. If null is passed, the name will be set as '{secret\\_group\\_name}-access-group' | `string` | `null` | no |\n| \u003ca name=\"input_access_group_roles\"\u003e\u003c/a\u003e [access\\_group\\_roles](#input\\_access\\_group\\_roles) | Roles to be given to the created access group. | `list(string)` | `null` | no |\n| \u003ca name=\"input_access_group_tags\"\u003e\u003c/a\u003e [access\\_group\\_tags](#input\\_access\\_group\\_tags) | Tags that should be applied to the access group. Only applies if create\\_access\\_group is true. | `list(string)` | `[]` | no |\n| \u003ca name=\"input_create_access_group\"\u003e\u003c/a\u003e [create\\_access\\_group](#input\\_create\\_access\\_group) | Whether to create an access group for the secrets group. | `bool` | `false` | no |\n| \u003ca name=\"input_endpoint_type\"\u003e\u003c/a\u003e [endpoint\\_type](#input\\_endpoint\\_type) | The service endpoint type to communicate with the provided secrets manager instance. Possible values are `public` or `private` | `string` | `\"public\"` | no |\n| \u003ca name=\"input_region\"\u003e\u003c/a\u003e [region](#input\\_region) | Region which the Secret Manager is deployed. | `string` | n/a | yes |\n| \u003ca name=\"input_secret_group_description\"\u003e\u003c/a\u003e [secret\\_group\\_description](#input\\_secret\\_group\\_description) | Description of the Secret Group to be created. | `string` | n/a | yes |\n| \u003ca name=\"input_secret_group_name\"\u003e\u003c/a\u003e [secret\\_group\\_name](#input\\_secret\\_group\\_name) | Name of the Secret Group to be created. | `string` | n/a | yes |\n| \u003ca name=\"input_secrets_manager_guid\"\u003e\u003c/a\u003e [secrets\\_manager\\_guid](#input\\_secrets\\_manager\\_guid) | Instance ID of Secrets Manager instance in which the Secret will be added. | `string` | n/a | yes |\n\n### Outputs\n\n| Name | Description |\n|------|-------------|\n| \u003ca name=\"output_access_group_id\"\u003e\u003c/a\u003e [access\\_group\\_id](#output\\_access\\_group\\_id) | ID of the created Access Group |\n| \u003ca name=\"output_secret_group_id\"\u003e\u003c/a\u003e [secret\\_group\\_id](#output\\_secret\\_group\\_id) | ID of the created Secret Group |\n| \u003ca name=\"output_secret_group_name\"\u003e\u003c/a\u003e [secret\\_group\\_name](#output\\_secret\\_group\\_name) | Name of the created Secret Group |\n\u003c!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n\n\u003c!-- BEGIN CONTRIBUTING HOOK --\u003e\n\n\u003c!-- Leave this section as is so that your module has a link to local development environment set up steps for contributors to follow --\u003e\n## Contributing\n\nYou can report issues and request features for this module in GitHub issues in the module repo. See [Report an issue or request a feature](https://github.com/terraform-ibm-modules/.github/blob/main/.github/SUPPORT.md).\n\nTo set up your local development environment, see [Local development setup](https://terraform-ibm-modules.github.io/documentation/#/local-dev-setup) in the project documentation.\n\u003c!-- Source for this readme file: https://github.com/terraform-ibm-modules/common-dev-assets/tree/main/module-assets/ci/module-template-automation --\u003e\n\u003c!-- END CONTRIBUTING HOOK --\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fterraform-ibm-modules%2Fterraform-ibm-secrets-manager-secret-group","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fterraform-ibm-modules%2Fterraform-ibm-secrets-manager-secret-group","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fterraform-ibm-modules%2Fterraform-ibm-secrets-manager-secret-group/lists"}