> ## Documentation Index > Fetch the complete documentation index at: https://infisical.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Rotate Secrets > Rotate the generated credentials for the specified Cloudflare R2 Access Key Rotation. ## OpenAPI ````yaml POST /api/v2/secret-rotations/cloudflare-r2-access-key/{rotationId}/rotate-secrets openapi: 3.0.3 info: title: Infisical API description: List of all available APIs that can be consumed version: 0.0.1 servers: - url: https://us.infisical.com description: Production server (US) - url: https://eu.infisical.com description: Production server (EU) - url: http://localhost:8080 description: Local server security: [] paths: /api/v2/secret-rotations/cloudflare-r2-access-key/{rotationId}/rotate-secrets: post: tags: - Secret Rotations description: >- Rotate the generated credentials for the specified Cloudflare R2 Access Key Rotation. operationId: rotateCloudflareR2AccessKeyRotation parameters: - schema: type: string format: uuid in: path name: rotationId required: true description: >- The ID of the Cloudflare R2 Access Key Rotation to rotate generated credentials for. responses: '200': description: Default Response content: application/json: schema: type: object properties: secretRotation: type: object properties: id: type: string format: uuid name: type: string description: type: string nullable: true isAutoRotationEnabled: type: boolean default: true activeIndex: type: number default: 0 folderId: type: string format: uuid connectionId: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time rotationInterval: type: number rotationStatus: type: string lastRotationAttemptedAt: type: string format: date-time lastRotatedAt: type: string format: date-time lastRotationJobId: type: string nullable: true nextRotationAt: type: string format: date-time nullable: true isLastRotationManual: type: boolean default: true connection: type: object properties: app: type: string enum: - cloudflare name: type: string id: type: string format: uuid required: - app - name - id additionalProperties: false environment: type: object properties: slug: type: string name: type: string id: type: string format: uuid required: - slug - name - id additionalProperties: false projectId: type: string folder: type: object properties: id: type: string path: type: string required: - id - path additionalProperties: false rotateAtUtc: type: object properties: hours: type: number minimum: 0 maximum: 23 minutes: type: number minimum: 0 maximum: 59 required: - hours - minutes additionalProperties: false lastRotationMessage: type: string nullable: true type: type: string enum: - cloudflare-r2-access-key parameters: type: object properties: name: type: string minLength: 1 maxLength: 100 description: >- The name for the generated Cloudflare API token that backs the R2 access key. buckets: type: array items: type: object properties: name: type: string minLength: 1 maxLength: 64 jurisdiction: type: string enum: - default - eu - fedramp default: default required: - name additionalProperties: false minItems: 1 description: >- The R2 buckets the generated access key is scoped to. Each entry is a bucket name plus its jurisdiction (default, eu, or fedramp). accessLevel: type: string enum: - object-read - object-read-write default: object-read description: >- The level of access the generated key has over the selected buckets (object-read for read and list, object-read-write to also write). allowedIps: type: array items: type: string description: >- The IP addresses or CIDR blocks the generated R2 access key is restricted to. disallowedIps: type: array items: type: string description: >- The IP addresses or CIDR blocks the generated R2 access key is denied from. required: - name - buckets additionalProperties: false secretsMapping: type: object properties: accessKeyId: type: string minLength: 1 description: >- The name of the secret that the rotated R2 access key ID will be mapped to. secretAccessKey: type: string minLength: 1 description: >- The name of the secret that the rotated R2 secret access key will be mapped to. required: - accessKeyId - secretAccessKey additionalProperties: false required: - id - name - folderId - connectionId - createdAt - updatedAt - rotationInterval - rotationStatus - lastRotationAttemptedAt - lastRotatedAt - connection - environment - projectId - folder - rotateAtUtc - type - parameters - secretsMapping additionalProperties: false required: - secretRotation additionalProperties: false '400': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 400 message: type: string error: type: string details: {} required: - reqId - statusCode - message - error additionalProperties: false '401': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 401 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '403': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 403 message: type: string details: {} error: type: string required: - reqId - statusCode - message - error additionalProperties: false '404': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 404 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '422': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 422 message: {} error: type: string required: - reqId - statusCode - error additionalProperties: false '500': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 500 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false ````