expireAfter | string | Required | How long a newly rotated key remains valid, as an ISO 8601 duration. Must be at least 'P28D'. |
keyName | string | Required, Identifier | The name of the Managed HSM key the rotation policy applies to. |
id | string | Read-only | The URI of the key the rotation policy applies to. |
managedHsmUri | string | Identifier | The URI of the Managed HSM holding the key. Defaults to the 'managedHsmUri' supplied in the extension configuration. |
notifyBeforeExpiry | string | | How long before expiry to raise a notification event, as an ISO 8601 duration. |
timeAfterCreation | string | | Rotate the key this long after it was created, as an ISO 8601 duration. Exactly one of 'timeAfterCreation' or 'timeBeforeExpiry' must be supplied. |
timeBeforeExpiry | string | | Rotate the key this long before it expires, as an ISO 8601 duration. Exactly one of 'timeAfterCreation' or 'timeBeforeExpiry' must be supplied. |