> ## Documentation Index > Fetch the complete documentation index at: https://infisical.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Create > Create an AWS IAM User Secret Rotation for the specified project. Check out the configuration docs for [AWS IAM User Secret Rotations](/documentation/platform/secret-rotation/aws-iam-user-secret) to learn how to obtain the required parameters. ## OpenAPI ````yaml POST /api/v2/secret-rotations/aws-iam-user-secret openapi: 3.0.3 info: title: Infisical API description: List of all available APIs that can be consumed version: 0.0.1 servers: - url: https://us.infisical.com description: Production server (US) - url: https://eu.infisical.com description: Production server (EU) - url: http://localhost:8080 description: Local server security: [] paths: /api/v2/secret-rotations/aws-iam-user-secret: post: tags: - Secret Rotations description: Create an AWS IAM User Secret Rotation for the specified project. operationId: createAWSIAMUserSecretRotation requestBody: required: true content: application/json: schema: type: object properties: name: type: string minLength: 1 maxLength: 64 description: >- The name of the AWS IAM User Secret Rotation to create. Must be slug-friendly. projectId: type: string minLength: 1 description: The ID of the project to create the rotation in. description: type: string maxLength: 256 nullable: true description: >- An optional description for the AWS IAM User Secret Rotation. connectionId: type: string format: uuid description: The ID of the AWS Connection to use for rotation. environment: type: string minLength: 1 maxLength: 64 description: >- The slug of the project environment to create the rotation in. secretPath: type: string minLength: 1 description: The secret path of the project to create the rotation in. isAutoRotationEnabled: type: boolean default: true description: >- Whether secrets should be automatically rotated when the specified rotation interval has elapsed. rotationInterval: type: number minimum: 1 description: The interval, in days, to automatically rotate secrets. rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false description: >- The hours and minutes rotation should occur at in UTC. Defaults to Midnight (00:00) UTC. parameters: type: object properties: userName: type: string minLength: 1 description: The name of the client to rotate credentials for. region: type: string enum: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - us-gov-east-1 - us-gov-west-1 - af-south-1 - ap-east-1 - ap-south-1 - ap-south-2 - ap-northeast-1 - ap-northeast-2 - ap-northeast-3 - ap-southeast-1 - ap-southeast-2 - ap-southeast-3 - ap-southeast-4 - ca-central-1 - eu-central-1 - eu-central-2 - eu-west-1 - eu-west-2 - eu-west-3 - eu-south-1 - eu-south-2 - eu-north-1 - me-south-1 - me-central-1 - sa-east-1 description: The AWS region the client is present in. required: - userName additionalProperties: false secretsMapping: type: object properties: accessKeyId: type: string minLength: 1 description: >- The name of the secret that the access key ID will be mapped to. secretAccessKey: type: string minLength: 1 description: >- The name of the secret that the rotated secret access key will be mapped to. required: - accessKeyId - secretAccessKey additionalProperties: false required: - name - projectId - connectionId - environment - secretPath - rotationInterval - parameters - secretsMapping additionalProperties: false responses: '200': description: Default Response content: application/json: schema: type: object properties: secretRotation: type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - aws name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - aws-iam-user-secret parameters: type: object properties: userName: type: string minLength: 1 description: The name of the client to rotate credentials for. region: type: string enum: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - us-gov-east-1 - us-gov-west-1 - af-south-1 - ap-east-1 - ap-south-1 - ap-south-2 - ap-northeast-1 - ap-northeast-2 - ap-northeast-3 - ap-southeast-1 - ap-southeast-2 - ap-southeast-3 - ap-southeast-4 - ca-central-1 - eu-central-1 - eu-central-2 - eu-west-1 - eu-west-2 - eu-west-3 - eu-south-1 - eu-south-2 - eu-north-1 - me-south-1 - me-central-1 - sa-east-1 description: The AWS region the client is present in. required: - userName additionalProperties: false secretsMapping: type: object properties: accessKeyId: type: string minLength: 1 description: >- The name of the secret that the access key ID will be mapped to. secretAccessKey: type: string minLength: 1 description: >- The name of the secret that the rotated secret access key will be mapped to. required: - accessKeyId - secretAccessKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false required: - secretRotation additionalProperties: false '400': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 400 message: type: string error: type: string details: {} required: - reqId - statusCode - message - error additionalProperties: false '401': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 401 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '403': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 403 message: type: string details: {} error: type: string required: - reqId - statusCode - message - error additionalProperties: false '404': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 404 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '422': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 422 message: {} error: type: string required: - reqId - statusCode - error additionalProperties: false '500': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 500 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false ````