mirror of
				https://github.com/optim-enterprises-bv/vault.git
				synced 2025-11-04 04:28:08 +00:00 
			
		
		
		
	[Docs] Add documentation for username_template feature in AWS Secrets Engine (#12310)
* add username_template docs * remove backticks * update default template to be readable * undo markdown block * add md block to render indents
This commit is contained in:
		@@ -58,6 +58,22 @@ valid AWS credentials with proper permissions.
 | 
			
		||||
 | 
			
		||||
- `sts_endpoint` `(string: <optional>)` – Specifies a custom HTTP STS endpoint to use.
 | 
			
		||||
 | 
			
		||||
- `username_template` `(string: <optional>)` - [Template](/docs/concepts/username-templating) describing how
 | 
			
		||||
  dynamic usernames are generated. The username template is used to generate both IAM usernames (capped at 64 characters) 
 | 
			
		||||
  and STS usernames (capped at 32 characters). Longer usernames result in a 500 error.
 | 
			
		||||
 | 
			
		||||
  To ensure generated usernames are within length limits for both STS/IAM, the template must adequately handle
 | 
			
		||||
  both conditional cases (see [Conditional Templates](https://pkg.go.dev/text/template)). As an example, if no template
 | 
			
		||||
  is provided the field defaults to the template:
 | 
			
		||||
 | 
			
		||||
  ```
 | 
			
		||||
  {{ if (eq .Type "STS") }}
 | 
			
		||||
      {{ printf "vault-%s-%s" (unix_time) (random 20) | truncate 32 }}
 | 
			
		||||
  {{ else }}
 | 
			
		||||
      {{ printf "vault-%s-%s-%s" (printf "%s-%s" (.DisplayName) (.PolicyName) | truncate 42) (unix_time) (random 20) | truncate 64 }}
 | 
			
		||||
  {{ end }}
 | 
			
		||||
  ```
 | 
			
		||||
 | 
			
		||||
### Sample Payload
 | 
			
		||||
 | 
			
		||||
```json
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user