action conjur_get_secret {
  label: "Fetches the value of a secret from the specified Secret."
  description: "Fetches the value of a secret from the specified Secret. The latest version\nwill be retrieved unless the version parameter is specified. The twenty most recent secret versions are retained.\n\nThe secret data is returned in the response body.\n\nNote: Conjur will allow you to add a secret to any resource, but the best practice is to store\nand retrieve secret data only using Secret resources.\n"
  provider: conjur
  method: GET
  path: "/secrets/{account}/{kind}/{identifier}"
  encoding: json
  input: {
    type: "object"
    properties: {
      account: {
        type: "string"
        description: "Conjur account name"
      }
      identifier: {
        type: "string"
        description: "Resource identifier. Requires to be encoded when in path.\n\n##### Examples:\n\n- `myapp-01` -> `myapp-01` (unchanged)\n- `alice@devops` -> `alice%40devops`\n- `prod/aws/db-password` -> `prod%2Faws%2Fdb-password`\n- `research+development` -> `research%2Bdevelopment`\n- `sales&marketing` -> `sales%26marketing`\n"
      }
      kind: {
        type: "string"
      }
      version: {
        type: "integer"
        description: "Version of the resource (Conjur keeps the last 20 versions of a secret)"
      }
    }
    required: ["account", "identifier", "kind"]
    additionalProperties: false
  }
  output: {
    type: "object"
    additionalProperties: true
  }
}