[Yandex Cloud documentation](../../index.md) > [Terraform in Yandex Cloud](../index.md) > Terraform reference > Resources > Lockbox > Resources > lockbox_secret_version

# yandex_lockbox_secret_version (Resource)

Yandex Cloud Lockbox secret version resource. For more information, see [the official documentation](../../lockbox/index.md).

## Example usage

```terraform
//
// Create a new Lockbox Secret Version.
//
resource "yandex_lockbox_secret" "my_secret" {
  name = "test secret"
}

resource "yandex_lockbox_secret_version" "my_version" {
  secret_id = yandex_lockbox_secret.my_secret.id
  entries {
    key        = "key1"
    text_value = "value1" // explicit secret value
  }
  entries {
    key = "k2"
    // value generated by a command won't be visible in Terraform state
    command {
      path = "my_secret_generator.sh"
    }
  }
}
```
```terraform
//
// Create a new Lockbox Secret Version with password.
//
resource "yandex_lockbox_secret" "my_secret" {
  name = "test secret with passowrd"

  password_payload_specification {
    password_key = "some_password"
    length       = 12
  }
}

resource "yandex_lockbox_secret_version" "my_version" {
  secret_id = yandex_lockbox_secret.my_secret.id
}
```

## Arguments & Attributes Reference

- `description` (String). The resource description.
- `id` (String). 
- `secret_id` (**Required**)(String). The Yandex Cloud Lockbox secret ID where to add the version.
- `entries` [Block]. List of entries in the Yandex Cloud Lockbox secret version. Must be omitted for secrets with a payload specification.

{% note warning %}

One either `text_value` or `command` is required.

{% endnote %}


  - `key` (**Required**)(String). The key of the entry.
  - `text_value` (String). The text value of the entry.
  - `command` [Block]. The command that generates the text value of the entry.
    - `args` (List Of String). List of arguments to be passed to the script/command.
    - `env` (Map Of String). Map of environment variables to set before calling the script/command.
    - `path` (**Required**)(String). The path to the script or command to execute.
- `timeouts` [Block]. 
  - `create` (String). 
  - `delete` (String). 
  - `read` (String).