sdm admin clouds update
Last modified on May 5, 2025
NAME:
sdm admin clouds update - update one or more clouds
USAGE:
sdm admin clouds update command [command options] [arguments...]
COMMANDS:
aws update AWS cloud
awsConsole update AWS Management Console cloud
awsConsoleStaticKeyPair update AWS Management Console (Static key pair) cloud
awsinstanceprofile update AWS (Instance Profile) cloud
azure update Azure (Password) cloud
azurecert update Azure (Certificate) cloud
gcp update GCP cloud
snowsight update Snowsight (Snowflake Web Console) cloud
OPTIONS:
--file value, -f value load from a JSON file
--stdin, -i load from stdin
--filter value filter e.g. 'field:name tag:key=value ...'
--filters-help show valid filter strings and examples
--filter-json value path to JSON based filter
--tags value tags e.g. 'key=value,...'
--delete-tags value delete-tags e.g. 'key,...'
--delete-all-tags
--timeout value set time limit for command
--help, -h show help
aws
NAME:
sdm admin clouds update aws - update AWS cloud
USAGE:
sdm admin clouds update aws [command options] [arguments...]
OPTIONS:
--access-key-id value (secret)
--bind-interface value bind interface (default: "127.0.0.1")
--delete-all-tags
--delete-tags value delete-tags e.g. 'key,...'
--egress-filter value apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
--filter value filter e.g. 'field:name tag:key=value ...'
--filter-json value path to JSON based filter
--filters-help show valid filter strings and examples
--healthcheck-region value Enter the AWS region healthcheck requests should attempt to connect to.
--id value datasource id
--name value datasource name
--port-override value port profile override (default: -1)
--proxy-cluster-id value proxy cluster id
--role-arn value The role to assume after logging in. (secret)
--role-external-id value (secret)
--secret-access-key value (secret)
--secret-store-id value secret store id
--subdomain value This will be used as your local DNS address. (e.g. app-prod1 would turn into app-prod1.<your-org-name>.sdm.network)
--tags value tags e.g. 'key=value,...'
--timeout value set time limit for command
awsConsole
NAME:
sdm admin clouds update awsConsole - update AWS Management Console cloud
USAGE:
sdm admin clouds update awsConsole [command options] [arguments...]
OPTIONS:
--bind-interface value bind interface (default: "127.0.0.1")
--delete-all-tags
--delete-tags value delete-tags e.g. 'key,...'
--egress-filter value apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
--enable-environment-variables Prefer environment variables to authenticate connection even if EC2 roles are configured.
--filter value filter e.g. 'field:name tag:key=value ...'
--filter-json value path to JSON based filter
--filters-help show valid filter strings and examples
--http-subdomain value This will be used as your local DNS address. (e.g. app-prod1 would turn into http://app-prod1.<your-org-name>.sdm.network/)
--id value datasource id
--name value datasource name
--port-override value port profile override (default: -1)
--proxy-cluster-id value proxy cluster id
--region value The AWS region to connect to.
--role-arn value The role to assume after logging in. (secret)
--role-external-id value (secret)
--secret-store-id value secret store id
--session-expiry-seconds value The length of time in seconds AWS console sessions will live before needing to reauthenticate. (default: 0)
--tags value tags e.g. 'key=value,...'
--timeout value set time limit for command
awsConsoleStaticKeyPair
NAME:
sdm admin clouds update awsConsoleStaticKeyPair - update AWS Management Console (Static key pair) cloud
USAGE:
sdm admin clouds update awsConsoleStaticKeyPair [command options] [arguments...]
OPTIONS:
--access-key-id value (secret)
--bind-interface value bind interface (default: "127.0.0.1")
--delete-all-tags
--delete-tags value delete-tags e.g. 'key,...'
--egress-filter value apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
--filter value filter e.g. 'field:name tag:key=value ...'
--filter-json value path to JSON based filter
--filters-help show valid filter strings and examples
--http-subdomain value This will be used as your local DNS address. (e.g. app-prod1 would turn into http://app-prod1.<your-org-name>.sdm.network/)
--id value datasource id
--name value datasource name
--port-override value port profile override (default: -1)
--proxy-cluster-id value proxy cluster id
--region value The AWS region to connect to.
--role-arn value The role to assume after logging in. (secret)
--role-external-id value (secret)
--secret-access-key value (secret)
--secret-store-id value secret store id
--session-expiry-seconds value The length of time in seconds AWS console sessions will live before needing to reauthenticate. (default: 0)
--tags value tags e.g. 'key=value,...'
--timeout value set time limit for command
awsinstanceprofile
NAME:
sdm admin clouds update awsinstanceprofile - update AWS (Instance Profile) cloud
USAGE:
sdm admin clouds update awsinstanceprofile [command options] [arguments...]
OPTIONS:
--bind-interface value bind interface (default: "127.0.0.1")
--delete-all-tags
--delete-tags value delete-tags e.g. 'key,...'
--egress-filter value apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
--enable-environment-variables Prefer environment variables to authenticate connection even if EC2 roles are configured.
--filter value filter e.g. 'field:name tag:key=value ...'
--filter-json value path to JSON based filter
--filters-help show valid filter strings and examples
--id value datasource id
--name value datasource name
--port-override value port profile override (default: -1)
--proxy-cluster-id value proxy cluster id
--region value The AWS region to connect to.
--role-arn value The role to assume after logging in. (secret)
--role-external-id value (secret)
--secret-store-id value secret store id
--subdomain value This will be used as your local DNS address. (e.g. app-prod1 would turn into app-prod1.<your-org-name>.sdm.network)
--tags value tags e.g. 'key=value,...'
--timeout value set time limit for command
azure
NAME:
sdm admin clouds update azure - update Azure (Password) cloud
USAGE:
sdm admin clouds update azure [command options] [arguments...]
OPTIONS:
--app-id value the application ID to authenticate with (secret)
--bind-interface value bind interface (default: "127.0.0.1")
--delete-all-tags
--delete-tags value delete-tags e.g. 'key,...'
--egress-filter value apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
--filter value filter e.g. 'field:name tag:key=value ...'
--filter-json value path to JSON based filter
--filters-help show valid filter strings and examples
--id value datasource id
--name value datasource name
--password value service principal password (secret)
--port-override value port profile override (default: -1)
--proxy-cluster-id value proxy cluster id
--secret-store-id value secret store id
--subdomain value This will be used as your local DNS address. (e.g. app-prod1 would turn into app-prod1.<your-org-name>.sdm.network)
--tags value tags e.g. 'key=value,...'
--tenant-id value the tenant ID to authenticate to (secret)
--timeout value set time limit for command
azurecert
NAME:
sdm admin clouds update azurecert - update Azure (Certificate) cloud
USAGE:
sdm admin clouds update azurecert [command options] [arguments...]
OPTIONS:
--app-id value the application ID to authenticate with (secret)
--bind-interface value bind interface (default: "127.0.0.1")
--certificate value service Principal certificate file, both private and public key (secret)
--delete-all-tags
--delete-tags value delete-tags e.g. 'key,...'
--egress-filter value apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
--filter value filter e.g. 'field:name tag:key=value ...'
--filter-json value path to JSON based filter
--filters-help show valid filter strings and examples
--id value datasource id
--name value datasource name
--port-override value port profile override (default: -1)
--proxy-cluster-id value proxy cluster id
--secret-store-id value secret store id
--subdomain value This will be used as your local DNS address. (e.g. app-prod1 would turn into app-prod1.<your-org-name>.sdm.network)
--tags value tags e.g. 'key=value,...'
--tenant-id value the tenant ID to authenticate to (secret)
--timeout value set time limit for command
gcp
NAME:
sdm admin clouds update gcp - update GCP cloud
USAGE:
sdm admin clouds update gcp [command options] [arguments...]
OPTIONS:
--bind-interface value bind interface (default: "127.0.0.1")
--delete-all-tags
--delete-tags value delete-tags e.g. 'key,...'
--egress-filter value apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
--filter value filter e.g. 'field:name tag:key=value ...'
--filter-json value path to JSON based filter
--filters-help show valid filter strings and examples
--id value datasource id
--name value datasource name
--port-override value port profile override (default: -1)
--proxy-cluster-id value proxy cluster id
--scopes value Space separated scopes that this login should assume into when authenticating
--secret-store-id value secret store id
--subdomain value This will be used as your local DNS address. (e.g. app-prod1 would turn into app-prod1.<your-org-name>.sdm.network)
--svc-keyfile value The service account keyfile to authenticate with (secret)
--tags value tags e.g. 'key=value,...'
--timeout value set time limit for command
snowsight
NAME:
sdm admin clouds update snowsight - update Snowsight (Snowflake Web Console) cloud
USAGE:
sdm admin clouds update snowsight [command options] [arguments...]
OPTIONS:
--bind-interface value bind interface (default: "127.0.0.1")
--delete-all-tags
--delete-tags value delete-tags e.g. 'key,...'
--egress-filter value apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
--filter value filter e.g. 'field:name tag:key=value ...'
--filter-json value path to JSON based filter
--filters-help show valid filter strings and examples
--healthcheck_username value The StrongDM user email to use for healthchecks
--id value datasource id
--name value datasource name
--port-override value port profile override (default: -1)
--proxy-cluster-id value proxy cluster id
--saml-metadata value The Metadata for your snowflake IDP integration (secret)
--secret-store-id value secret store id
--subdomain value
--tags value tags e.g. 'key=value,...'
--timeout value set time limit for command
--tls-required sdm must use TLS to connect