@robinmordasiewicz/f5xc-terraform-mcp 2.3.0 → 2.4.3

package/dist/docs/resources/cloud_connect.md

@@ -0,0 +1,260 @@
+---
+page_title: "f5xc_cloud_connect Resource - terraform-provider-f5xc"
+subcategory: "Networking"
+description: |-
+  [Category: Networking] [Namespace: required] Manages a Cloud Connect resource in F5 Distributed Cloud for establishing connectivity to cloud provider networks.
+---
+
+# f5xc_cloud_connect (Resource)
+
+[Category: Networking] [Namespace: required] Manages a Cloud Connect resource in F5 Distributed Cloud for establishing connectivity to cloud provider networks.
+
+~> **Note** Please refer to [Cloud Connect API docs](https://docs.cloud.f5.com/docs-v2/api/cloud-connect) to learn more.
+
+## Example Usage
+
+```terraform
+# Cloud Connect Resource Example
+# [Category: Networking] [Namespace: required] Manages a Cloud Connect resource in F5 Distributed Cloud for establishing connectivity to cloud provider networks.
+
+# Basic Cloud Connect configuration
+resource "f5xc_cloud_connect" "example" {
+  name      = "example-cloud-connect"
+  namespace = "system"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Resource-specific configuration
+  # [OneOf: aws_tgw_site, azure_vnet_site] AWS TGW Site Type....
+  aws_tgw_site {
+    # Configure aws_tgw_site settings
+  }
+  # Object reference. This type establishes a direct referenc...
+  cred {
+    # Configure cred settings
+  }
+  # Object reference. This type establishes a direct referenc...
+  site {
+    # Configure site settings
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the Cloud Connect. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the Cloud Connect will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+-> **One of the following:**
+&#x2022; <a id="aws-tgw-site"></a>[`aws_tgw_site`](#aws-tgw-site) - Optional Block<br>AWS TGW Site Type. Cloud Connect AWS TGW Site Type<br>See [AWS TGW Site](#aws-tgw-site) below for details.
+<br><br>&#x2022; <a id="azure-vnet-site"></a>[`azure_vnet_site`](#azure-vnet-site) - Optional Block<br>Azure VNET Site Type. Cloud Connect Azure VNET Site Type<br>See [Azure VNET Site](#azure-vnet-site) below for details.
+
+<a id="segment"></a>&#x2022; [`segment`](#segment) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Segment](#segment) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### AWS TGW Site
+
+An [`aws_tgw_site`](#aws-tgw-site) block supports the following:
+
+<a id="aws-tgw-site-cred"></a>&#x2022; [`cred`](#aws-tgw-site-cred) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Cred](#aws-tgw-site-cred) below.
+
+<a id="aws-tgw-site-site"></a>&#x2022; [`site`](#aws-tgw-site-site) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Site](#aws-tgw-site-site) below.
+
+<a id="aws-tgw-site-vpc-attachments"></a>&#x2022; [`vpc_attachments`](#aws-tgw-site-vpc-attachments) - Optional Block<br>VPC Attachments<br>See [VPC Attachments](#aws-tgw-site-vpc-attachments) below.
+
+#### AWS TGW Site Cred
+
+A [`cred`](#aws-tgw-site-cred) block (within [`aws_tgw_site`](#aws-tgw-site)) supports the following:
+
+<a id="aws-tgw-site-cred-name"></a>&#x2022; [`name`](#aws-tgw-site-cred-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="aws-tgw-site-cred-namespace"></a>&#x2022; [`namespace`](#aws-tgw-site-cred-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="aws-tgw-site-cred-tenant"></a>&#x2022; [`tenant`](#aws-tgw-site-cred-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### AWS TGW Site Site
+
+A [`site`](#aws-tgw-site-site) block (within [`aws_tgw_site`](#aws-tgw-site)) supports the following:
+
+<a id="aws-tgw-site-site-name"></a>&#x2022; [`name`](#aws-tgw-site-site-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="aws-tgw-site-site-namespace"></a>&#x2022; [`namespace`](#aws-tgw-site-site-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="aws-tgw-site-site-tenant"></a>&#x2022; [`tenant`](#aws-tgw-site-site-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### AWS TGW Site VPC Attachments
+
+A [`vpc_attachments`](#aws-tgw-site-vpc-attachments) block (within [`aws_tgw_site`](#aws-tgw-site)) supports the following:
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list"></a>&#x2022; [`vpc_list`](#aws-tgw-site-vpc-attachments-vpc-list) - Optional Block<br>VPC List<br>See [VPC List](#aws-tgw-site-vpc-attachments-vpc-list) below.
+
+#### AWS TGW Site VPC Attachments VPC List
+
+A [`vpc_list`](#aws-tgw-site-vpc-attachments-vpc-list) block (within [`aws_tgw_site.vpc_attachments`](#aws-tgw-site-vpc-attachments)) supports the following:
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-custom-routing"></a>&#x2022; [`custom_routing`](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing) - Optional Block<br>AWS Route Table List. AWS Route Table List<br>See [Custom Routing](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing) below.
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-default-route"></a>&#x2022; [`default_route`](#aws-tgw-site-vpc-attachments-vpc-list-default-route) - Optional Block<br>Override Default Route Choice. Select Override Default Route Choice<br>See [Default Route](#aws-tgw-site-vpc-attachments-vpc-list-default-route) below.
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-labels"></a>&#x2022; [`labels`](#aws-tgw-site-vpc-attachments-vpc-list-labels) - Optional Block<br>Labels. Add labels for the VPC attachment. These labels can then be used in policies such as enhanced firewall
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-manual-routing"></a>&#x2022; [`manual_routing`](#aws-tgw-site-vpc-attachments-vpc-list-manual-routing) - Optional Block<br>Enable this option
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-vpc-id"></a>&#x2022; [`vpc_id`](#aws-tgw-site-vpc-attachments-vpc-list-vpc-id) - Optional String<br>VPC ID. Enter the VPC ID of the VPC to be attached
+
+#### AWS TGW Site VPC Attachments VPC List Custom Routing
+
+A [`custom_routing`](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing) block (within [`aws_tgw_site.vpc_attachments.vpc_list`](#aws-tgw-site-vpc-attachments-vpc-list)) supports the following:
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-custom-routing-route-tables"></a>&#x2022; [`route_tables`](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing-route-tables) - Optional Block<br>List of route tables. Route Tables<br>See [Route Tables](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing-route-tables) below.
+
+#### AWS TGW Site VPC Attachments VPC List Custom Routing Route Tables
+
+A [`route_tables`](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing-route-tables) block (within [`aws_tgw_site.vpc_attachments.vpc_list.custom_routing`](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing)) supports the following:
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-custom-routing-route-tables-route-table-id"></a>&#x2022; [`route_table_id`](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing-route-tables-route-table-id) - Optional String<br>Route table ID. Route table ID
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-custom-routing-route-tables-static-routes"></a>&#x2022; [`static_routes`](#aws-tgw-site-vpc-attachments-vpc-list-custom-routing-route-tables-static-routes) - Optional List<br>Static Routes. List of Static Routes
+
+#### AWS TGW Site VPC Attachments VPC List Default Route
+
+A [`default_route`](#aws-tgw-site-vpc-attachments-vpc-list-default-route) block (within [`aws_tgw_site.vpc_attachments.vpc_list`](#aws-tgw-site-vpc-attachments-vpc-list)) supports the following:
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-default-route-all-route-tables"></a>&#x2022; [`all_route_tables`](#aws-tgw-site-vpc-attachments-vpc-list-default-route-all-route-tables) - Optional Block<br>Enable this option
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-default-route-selective-route-tables"></a>&#x2022; [`selective_route_tables`](#aws-tgw-site-vpc-attachments-vpc-list-default-route-selective-route-tables) - Optional Block<br>AWS Route Table. AWS Route Table<br>See [Selective Route Tables](#aws-tgw-site-vpc-attachments-vpc-list-default-route-selective-route-tables) below.
+
+#### AWS TGW Site VPC Attachments VPC List Default Route Selective Route Tables
+
+A [`selective_route_tables`](#aws-tgw-site-vpc-attachments-vpc-list-default-route-selective-route-tables) block (within [`aws_tgw_site.vpc_attachments.vpc_list.default_route`](#aws-tgw-site-vpc-attachments-vpc-list-default-route)) supports the following:
+
+<a id="aws-tgw-site-vpc-attachments-vpc-list-default-route-selective-route-tables-route-table-id"></a>&#x2022; [`route_table_id`](#aws-tgw-site-vpc-attachments-vpc-list-default-route-selective-route-tables-route-table-id) - Optional List<br>Route table ID. Route table ID
+
+#### Azure VNET Site
+
+An [`azure_vnet_site`](#azure-vnet-site) block supports the following:
+
+<a id="azure-vnet-site-site"></a>&#x2022; [`site`](#azure-vnet-site-site) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Site](#azure-vnet-site-site) below.
+
+<a id="azure-vnet-site-vnet-attachments"></a>&#x2022; [`vnet_attachments`](#azure-vnet-site-vnet-attachments) - Optional Block<br>VNET Attachments<br>See [VNET Attachments](#azure-vnet-site-vnet-attachments) below.
+
+#### Azure VNET Site Site
+
+A [`site`](#azure-vnet-site-site) block (within [`azure_vnet_site`](#azure-vnet-site)) supports the following:
+
+<a id="azure-vnet-site-site-name"></a>&#x2022; [`name`](#azure-vnet-site-site-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="azure-vnet-site-site-namespace"></a>&#x2022; [`namespace`](#azure-vnet-site-site-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="azure-vnet-site-site-tenant"></a>&#x2022; [`tenant`](#azure-vnet-site-site-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Azure VNET Site VNET Attachments
+
+A [`vnet_attachments`](#azure-vnet-site-vnet-attachments) block (within [`azure_vnet_site`](#azure-vnet-site)) supports the following:
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list"></a>&#x2022; [`vnet_list`](#azure-vnet-site-vnet-attachments-vnet-list) - Optional Block<br>VNET List<br>See [VNET List](#azure-vnet-site-vnet-attachments-vnet-list) below.
+
+#### Azure VNET Site VNET Attachments VNET List
+
+A [`vnet_list`](#azure-vnet-site-vnet-attachments-vnet-list) block (within [`azure_vnet_site.vnet_attachments`](#azure-vnet-site-vnet-attachments)) supports the following:
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-custom-routing"></a>&#x2022; [`custom_routing`](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing) - Optional Block<br>List Azure Route Table with Static Route. List Azure Route Table with Static Route<br>See [Custom Routing](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing) below.
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-default-route"></a>&#x2022; [`default_route`](#azure-vnet-site-vnet-attachments-vnet-list-default-route) - Optional Block<br>Override Default Route Choice. Select Override Default Route Choice<br>See [Default Route](#azure-vnet-site-vnet-attachments-vnet-list-default-route) below.
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-labels"></a>&#x2022; [`labels`](#azure-vnet-site-vnet-attachments-vnet-list-labels) - Optional Block<br>Labels. Add labels for the VNET attachments. These labels can then be used in policies such as enhanced firewall policies
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-manual-routing"></a>&#x2022; [`manual_routing`](#azure-vnet-site-vnet-attachments-vnet-list-manual-routing) - Optional Block<br>Enable this option
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-subscription-id"></a>&#x2022; [`subscription_id`](#azure-vnet-site-vnet-attachments-vnet-list-subscription-id) - Optional String<br>Subscription ID. Enter the Subscription ID of the VNET to be attached
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-vnet-id"></a>&#x2022; [`vnet_id`](#azure-vnet-site-vnet-attachments-vnet-list-vnet-id) - Optional String<br>VNET ID. Enter the VNET ID of the VNET to be attached in format /`<resource-group-name>`/`<VNET-name>`
+
+#### Azure VNET Site VNET Attachments VNET List Custom Routing
+
+A [`custom_routing`](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing) block (within [`azure_vnet_site.vnet_attachments.vnet_list`](#azure-vnet-site-vnet-attachments-vnet-list)) supports the following:
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-custom-routing-route-tables"></a>&#x2022; [`route_tables`](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing-route-tables) - Optional Block<br>List of route tables with static routes. Route Tables with static routes<br>See [Route Tables](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing-route-tables) below.
+
+#### Azure VNET Site VNET Attachments VNET List Custom Routing Route Tables
+
+A [`route_tables`](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing-route-tables) block (within [`azure_vnet_site.vnet_attachments.vnet_list.custom_routing`](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing)) supports the following:
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-custom-routing-route-tables-route-table-id"></a>&#x2022; [`route_table_id`](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing-route-tables-route-table-id) - Optional String<br>Route table ID. Route table ID in the format /`<resource-group-name>`/`<route-table-name>`
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-custom-routing-route-tables-static-routes"></a>&#x2022; [`static_routes`](#azure-vnet-site-vnet-attachments-vnet-list-custom-routing-route-tables-static-routes) - Optional List<br>Static Routes. List of Static Routes
+
+#### Azure VNET Site VNET Attachments VNET List Default Route
+
+A [`default_route`](#azure-vnet-site-vnet-attachments-vnet-list-default-route) block (within [`azure_vnet_site.vnet_attachments.vnet_list`](#azure-vnet-site-vnet-attachments-vnet-list)) supports the following:
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-default-route-all-route-tables"></a>&#x2022; [`all_route_tables`](#azure-vnet-site-vnet-attachments-vnet-list-default-route-all-route-tables) - Optional Block<br>Enable this option
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-default-route-selective-route-tables"></a>&#x2022; [`selective_route_tables`](#azure-vnet-site-vnet-attachments-vnet-list-default-route-selective-route-tables) - Optional Block<br>Azure Route Table. Azure Route Table<br>See [Selective Route Tables](#azure-vnet-site-vnet-attachments-vnet-list-default-route-selective-route-tables) below.
+
+#### Azure VNET Site VNET Attachments VNET List Default Route Selective Route Tables
+
+A [`selective_route_tables`](#azure-vnet-site-vnet-attachments-vnet-list-default-route-selective-route-tables) block (within [`azure_vnet_site.vnet_attachments.vnet_list.default_route`](#azure-vnet-site-vnet-attachments-vnet-list-default-route)) supports the following:
+
+<a id="azure-vnet-site-vnet-attachments-vnet-list-default-route-selective-route-tables-route-table-id"></a>&#x2022; [`route_table_id`](#azure-vnet-site-vnet-attachments-vnet-list-default-route-selective-route-tables-route-table-id) - Optional List<br>Route table ID. Route table ID in the format /`<resource-group-name>`/`<route-table-name>`
+
+#### Segment
+
+A [`segment`](#segment) block supports the following:
+
+<a id="segment-name"></a>&#x2022; [`name`](#segment-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
+
+<a id="segment-namespace"></a>&#x2022; [`namespace`](#segment-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
+
+<a id="segment-tenant"></a>&#x2022; [`tenant`](#segment-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_cloud_connect.example system/example
+```

package/dist/docs/resources/cloud_credentials.md

@@ -0,0 +1,264 @@
+---
+page_title: "f5xc_cloud_credentials Resource - terraform-provider-f5xc"
+subcategory: "Authentication"
+description: |-
+  [Category: Authentication] [Namespace: not_required] Manages a Cloud Credentials resource in F5 Distributed Cloud for cloud provider credential management for site deployment.
+---
+
+# f5xc_cloud_credentials (Resource)
+
+[Category: Authentication] [Namespace: not_required] Manages a Cloud Credentials resource in F5 Distributed Cloud for cloud provider credential management for site deployment.
+
+~> **Note** Please refer to [Cloud Credentials API docs](https://docs.cloud.f5.com/docs-v2/api/cloud-credentials) to learn more.
+
+## Example Usage
+
+```terraform
+# Cloud Credentials Resource Example
+# [Category: Authentication] [Namespace: not_required] Manages a Cloud Credentials resource in F5 Distributed Cloud for cloud provider credential management for site deployment.
+
+# Basic Cloud Credentials configuration
+resource "f5xc_cloud_credentials" "example" {
+  name      = "example-cloud-credentials"
+  namespace = "system"
+
+  labels = {
+    environment = "production"
+    managed_by  = "terraform"
+  }
+
+  annotations = {
+    "owner" = "platform-team"
+  }
+
+  # Cloud Credentials configuration
+  # AWS credentials example
+  aws_secret_key {
+    access_key = "AKIAIOSFODNN7EXAMPLE"
+    secret_key {
+      clear_secret_info {
+        url = "string:///d0phbmVzc2VjcmV0a2V5"
+      }
+    }
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Argument Reference
+
+### Metadata Argument Reference
+
+<a id="name"></a>&#x2022; [`name`](#name) - Required String<br>Name of the Cloud Credentials. Must be unique within the namespace
+
+<a id="namespace"></a>&#x2022; [`namespace`](#namespace) - Required String<br>Namespace where the Cloud Credentials will be created
+
+<a id="annotations"></a>&#x2022; [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
+
+<a id="description"></a>&#x2022; [`description`](#description) - Optional String<br>Human readable description for the object
+
+<a id="disable"></a>&#x2022; [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
+
+<a id="labels"></a>&#x2022; [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
+
+### Spec Argument Reference
+
+-> **One of the following:**
+&#x2022; <a id="aws-assume-role"></a>[`aws_assume_role`](#aws-assume-role) - Optional Block<br>AWS Assume Role to Handle Delegated Access. AWS Assume Role to Handle Delegated Access<br>See [AWS Assume Role](#aws-assume-role) below for details.
+<br><br>&#x2022; <a id="aws-secret-key"></a>[`aws_secret_key`](#aws-secret-key) - Optional Block<br>AWS Programmatic Access Credentials. AWS Programmatic Access Credentials type<br>See [AWS Secret Key](#aws-secret-key) below for details.
+<br><br>&#x2022; <a id="azure-client-secret"></a>[`azure_client_secret`](#azure-client-secret) - Optional Block<br>Azure Client Secret. Azure Credentials Client Secret type<br>See [Azure Client Secret](#azure-client-secret) below for details.
+<br><br>&#x2022; <a id="azure-pfx-certificate"></a>[`azure_pfx_certificate`](#azure-pfx-certificate) - Optional Block<br>Client Certificate. Azure Credentials Client Certificate type<br>See [Azure Pfx Certificate](#azure-pfx-certificate) below for details.
+<br><br>&#x2022; <a id="gcp-cred-file"></a>[`gcp_cred_file`](#gcp-cred-file) - Optional Block<br>GCP Credentials. GCP Credentials type<br>See [GCP Cred File](#gcp-cred-file) below for details.
+
+<a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
+
+### Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+<a id="id"></a>&#x2022; [`id`](#id) - Optional String<br>Unique identifier for the resource
+
+---
+
+#### AWS Assume Role
+
+An [`aws_assume_role`](#aws-assume-role) block supports the following:
+
+<a id="aws-assume-role-custom-external-id"></a>&#x2022; [`custom_external_id`](#aws-assume-role-custom-external-id) - Optional String<br>External ID is Custom ID. External ID is Custom ID
+
+<a id="aws-assume-role-duration-seconds"></a>&#x2022; [`duration_seconds`](#aws-assume-role-duration-seconds) - Optional Number<br>Role Session Duration Seconds. The duration, in seconds of the role session
+
+<a id="aws-assume-role-external-id-is-optional"></a>&#x2022; [`external_id_is_optional`](#aws-assume-role-external-id-is-optional) - Optional Block<br>Enable this option
+
+<a id="aws-assume-role-external-id-is-tenant-id"></a>&#x2022; [`external_id_is_tenant_id`](#aws-assume-role-external-id-is-tenant-id) - Optional Block<br>Enable this option
+
+<a id="aws-assume-role-role-arn"></a>&#x2022; [`role_arn`](#aws-assume-role-role-arn) - Optional String<br>IAM Role ARN. IAM Role ARN to assume the role
+
+<a id="aws-assume-role-session-name"></a>&#x2022; [`session_name`](#aws-assume-role-session-name) - Optional String<br>Role Session Name. Use the role session name to uniquely identify a session, which will be used for deploy, monitor from F5XC console
+
+<a id="aws-assume-role-session-tags"></a>&#x2022; [`session_tags`](#aws-assume-role-session-tags) - Optional Block<br>Role Session Tags. Session tags are key-value pair attributes that you pass when you assume an IAM role
+
+#### AWS Secret Key
+
+An [`aws_secret_key`](#aws-secret-key) block supports the following:
+
+<a id="aws-secret-key-access-key"></a>&#x2022; [`access_key`](#aws-secret-key-access-key) - Optional String<br>Access Key ID. Access key ID for your AWS account
+
+<a id="aws-secret-key-secret-key"></a>&#x2022; [`secret_key`](#aws-secret-key-secret-key) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Secret Key](#aws-secret-key-secret-key) below.
+
+#### AWS Secret Key Secret Key
+
+A [`secret_key`](#aws-secret-key-secret-key) block (within [`aws_secret_key`](#aws-secret-key)) supports the following:
+
+<a id="aws-secret-key-secret-key-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#aws-secret-key-secret-key-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#aws-secret-key-secret-key-blindfold-secret-info) below.
+
+<a id="aws-secret-key-secret-key-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#aws-secret-key-secret-key-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#aws-secret-key-secret-key-clear-secret-info) below.
+
+#### AWS Secret Key Secret Key Blindfold Secret Info
+
+A [`blindfold_secret_info`](#aws-secret-key-secret-key-blindfold-secret-info) block (within [`aws_secret_key.secret_key`](#aws-secret-key-secret-key)) supports the following:
+
+<a id="aws-secret-key-secret-key-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#aws-secret-key-secret-key-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="aws-secret-key-secret-key-blindfold-secret-info-location"></a>&#x2022; [`location`](#aws-secret-key-secret-key-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="aws-secret-key-secret-key-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#aws-secret-key-secret-key-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### AWS Secret Key Secret Key Clear Secret Info
+
+A [`clear_secret_info`](#aws-secret-key-secret-key-clear-secret-info) block (within [`aws_secret_key.secret_key`](#aws-secret-key-secret-key)) supports the following:
+
+<a id="aws-secret-key-secret-key-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#aws-secret-key-secret-key-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="aws-secret-key-secret-key-clear-secret-info-url"></a>&#x2022; [`url`](#aws-secret-key-secret-key-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### Azure Client Secret
+
+An [`azure_client_secret`](#azure-client-secret) block supports the following:
+
+<a id="azure-client-secret-client-id"></a>&#x2022; [`client_id`](#azure-client-secret-client-id) - Optional String<br>Client ID. Client ID for your Azure service principal
+
+<a id="azure-client-secret-client-secret"></a>&#x2022; [`client_secret`](#azure-client-secret-client-secret) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Client Secret](#azure-client-secret-client-secret) below.
+
+<a id="azure-client-secret-subscription-id"></a>&#x2022; [`subscription_id`](#azure-client-secret-subscription-id) - Optional String<br>Subscription ID. Subscription ID for your Azure service principal
+
+<a id="azure-client-secret-tenant-id"></a>&#x2022; [`tenant_id`](#azure-client-secret-tenant-id) - Optional String<br>Tenant ID. Tenant ID for your Azure service principal
+
+#### Azure Client Secret Client Secret
+
+A [`client_secret`](#azure-client-secret-client-secret) block (within [`azure_client_secret`](#azure-client-secret)) supports the following:
+
+<a id="azure-client-secret-client-secret-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#azure-client-secret-client-secret-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#azure-client-secret-client-secret-blindfold-secret-info) below.
+
+<a id="azure-client-secret-client-secret-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#azure-client-secret-client-secret-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#azure-client-secret-client-secret-clear-secret-info) below.
+
+#### Azure Client Secret Client Secret Blindfold Secret Info
+
+A [`blindfold_secret_info`](#azure-client-secret-client-secret-blindfold-secret-info) block (within [`azure_client_secret.client_secret`](#azure-client-secret-client-secret)) supports the following:
+
+<a id="azure-client-secret-client-secret-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#azure-client-secret-client-secret-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="azure-client-secret-client-secret-blindfold-secret-info-location"></a>&#x2022; [`location`](#azure-client-secret-client-secret-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="azure-client-secret-client-secret-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#azure-client-secret-client-secret-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### Azure Client Secret Client Secret Clear Secret Info
+
+A [`clear_secret_info`](#azure-client-secret-client-secret-clear-secret-info) block (within [`azure_client_secret.client_secret`](#azure-client-secret-client-secret)) supports the following:
+
+<a id="azure-client-secret-client-secret-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#azure-client-secret-client-secret-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="azure-client-secret-client-secret-clear-secret-info-url"></a>&#x2022; [`url`](#azure-client-secret-client-secret-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### Azure Pfx Certificate
+
+An [`azure_pfx_certificate`](#azure-pfx-certificate) block supports the following:
+
+<a id="azure-pfx-certificate-certificate-url"></a>&#x2022; [`certificate_url`](#azure-pfx-certificate-certificate-url) - Optional String<br>URL for Client Certificate. URL for Client Certificate in '.pfx' or '.p12' whose certificate is linked to service principal object Certificate URL can contain client certificate in string:///`<Base64 of certificate>` format. Here `<Base64 of certificate>` is base64 of '.pfx' or '.p12' binary file
+
+<a id="azure-pfx-certificate-client-id"></a>&#x2022; [`client_id`](#azure-pfx-certificate-client-id) - Optional String<br>Client ID. Client ID for your Azure service principal
+
+<a id="azure-pfx-certificate-password"></a>&#x2022; [`password`](#azure-pfx-certificate-password) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Password](#azure-pfx-certificate-password) below.
+
+<a id="azure-pfx-certificate-subscription-id"></a>&#x2022; [`subscription_id`](#azure-pfx-certificate-subscription-id) - Optional String<br>Subscription ID. Subscription ID for your Azure service principal
+
+<a id="azure-pfx-certificate-tenant-id"></a>&#x2022; [`tenant_id`](#azure-pfx-certificate-tenant-id) - Optional String<br>Tenant ID. Tenant ID for your Azure service principal
+
+#### Azure Pfx Certificate Password
+
+A [`password`](#azure-pfx-certificate-password) block (within [`azure_pfx_certificate`](#azure-pfx-certificate)) supports the following:
+
+<a id="azure-pfx-certificate-password-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#azure-pfx-certificate-password-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#azure-pfx-certificate-password-blindfold-secret-info) below.
+
+<a id="azure-pfx-certificate-password-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#azure-pfx-certificate-password-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#azure-pfx-certificate-password-clear-secret-info) below.
+
+#### Azure Pfx Certificate Password Blindfold Secret Info
+
+A [`blindfold_secret_info`](#azure-pfx-certificate-password-blindfold-secret-info) block (within [`azure_pfx_certificate.password`](#azure-pfx-certificate-password)) supports the following:
+
+<a id="azure-pfx-certificate-password-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#azure-pfx-certificate-password-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="azure-pfx-certificate-password-blindfold-secret-info-location"></a>&#x2022; [`location`](#azure-pfx-certificate-password-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="azure-pfx-certificate-password-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#azure-pfx-certificate-password-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### Azure Pfx Certificate Password Clear Secret Info
+
+A [`clear_secret_info`](#azure-pfx-certificate-password-clear-secret-info) block (within [`azure_pfx_certificate.password`](#azure-pfx-certificate-password)) supports the following:
+
+<a id="azure-pfx-certificate-password-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#azure-pfx-certificate-password-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="azure-pfx-certificate-password-clear-secret-info-url"></a>&#x2022; [`url`](#azure-pfx-certificate-password-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### GCP Cred File
+
+A [`gcp_cred_file`](#gcp-cred-file) block supports the following:
+
+<a id="gcp-cred-file-credential-file"></a>&#x2022; [`credential_file`](#gcp-cred-file-credential-file) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Credential File](#gcp-cred-file-credential-file) below.
+
+#### GCP Cred File Credential File
+
+A [`credential_file`](#gcp-cred-file-credential-file) block (within [`gcp_cred_file`](#gcp-cred-file)) supports the following:
+
+<a id="gcp-cred-file-credential-file-blindfold-secret-info"></a>&#x2022; [`blindfold_secret_info`](#gcp-cred-file-credential-file-blindfold-secret-info) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#gcp-cred-file-credential-file-blindfold-secret-info) below.
+
+<a id="gcp-cred-file-credential-file-clear-secret-info"></a>&#x2022; [`clear_secret_info`](#gcp-cred-file-credential-file-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#gcp-cred-file-credential-file-clear-secret-info) below.
+
+#### GCP Cred File Credential File Blindfold Secret Info
+
+A [`blindfold_secret_info`](#gcp-cred-file-credential-file-blindfold-secret-info) block (within [`gcp_cred_file.credential_file`](#gcp-cred-file-credential-file)) supports the following:
+
+<a id="gcp-cred-file-credential-file-blindfold-secret-info-decryption-provider"></a>&#x2022; [`decryption_provider`](#gcp-cred-file-credential-file-blindfold-secret-info-decryption-provider) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
+
+<a id="gcp-cred-file-credential-file-blindfold-secret-info-location"></a>&#x2022; [`location`](#gcp-cred-file-credential-file-blindfold-secret-info-location) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
+
+<a id="gcp-cred-file-credential-file-blindfold-secret-info-store-provider"></a>&#x2022; [`store_provider`](#gcp-cred-file-credential-file-blindfold-secret-info-store-provider) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+#### GCP Cred File Credential File Clear Secret Info
+
+A [`clear_secret_info`](#gcp-cred-file-credential-file-clear-secret-info) block (within [`gcp_cred_file.credential_file`](#gcp-cred-file-credential-file)) supports the following:
+
+<a id="gcp-cred-file-credential-file-clear-secret-info-provider-ref"></a>&#x2022; [`provider_ref`](#gcp-cred-file-credential-file-clear-secret-info-provider-ref) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
+
+<a id="gcp-cred-file-credential-file-clear-secret-info-url"></a>&#x2022; [`url`](#gcp-cred-file-credential-file-clear-secret-info-url) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
+
+#### Timeouts
+
+A [`timeouts`](#timeouts) block supports the following:
+
+<a id="timeouts-create"></a>&#x2022; [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
+
+<a id="timeouts-delete"></a>&#x2022; [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
+
+<a id="timeouts-read"></a>&#x2022; [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
+
+<a id="timeouts-update"></a>&#x2022; [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# Import using namespace/name format
+terraform import f5xc_cloud_credentials.example system/example
+```