Oracle Lockbox API

openapi: 3.2.0
info:
  description: 'Use the Managed Access API to approve access requests, create and manage templates, and manage resource approval settings. For more information, see [Managed Access Overview](https://docs.oracle.com/iaas/Content/managed-access/home.htm).


    Use the table of contents and search tool to explore the Managed Access API.

    '
  title: Managed Access Lockbox API
  version: '20220126'
  x-provenance:
    method: harvested
    first_party: true
    publisher: Oracle
    source: https://docs.oracle.com/en-us/iaas/api/specs/f397c9292e6f977d1885091f8a6e9a9c3cdcb882c49d89bc55720e8eec0c02d1.yaml
    harvested: '2026-08-04'
    note: Published by Oracle as the contract for the Managed Access API OCI service and stored verbatim; API Evangelist added only this provenance block.
  x-evidence:
  - url: https://docs.oracle.com/en-us/iaas/api/specs/index.json
    what: Oracle's own index of every OCI service specification
  - url: https://docs.oracle.com/en-us/iaas/api/specs/f397c9292e6f977d1885091f8a6e9a9c3cdcb882c49d89bc55720e8eec0c02d1.yaml
    what: the harvested document for Managed Access API
servers:
- url: http://127.0.0.1/20220126
- url: https://127.0.0.1/20220126
tags:
- name: lockbox
paths:
  /lockboxes:
    get:
      description: 'Returns a list of Lockboxes.

        '
      operationId: ListLockboxes
      parameters:
      - $ref: '#/components/parameters/CompartmentIdQueryParam'
      - $ref: '#/components/parameters/LifecycleStateQueryParam'
      - $ref: '#/components/parameters/DisplayNameQueryParam'
      - $ref: '#/components/parameters/LockboxIdentifierQueryParam'
      - $ref: '#/components/parameters/LockboxResourceIdentifierQueryParam'
      - $ref: '#/components/parameters/LockboxPartnerOptionalQueryParam'
      - $ref: '#/components/parameters/LockboxPartnerIdOptionalQueryParam'
      - $ref: '#/components/parameters/PaginationLimitQueryParam'
      - $ref: '#/components/parameters/PaginationTokenQueryParam'
      - $ref: '#/components/parameters/SortOrderQueryParam'
      - $ref: '#/components/parameters/SortByQueryParam'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        200:
          description: A page of LockboxSummary objects.
          headers:
            opc-next-page:
              description: 'For pagination of a list of items. When paging through a list, if this header appears in the response,

                then a partial list might have been returned. Include this value as the `page` parameter for the

                subsequent GET request to get the next batch of items.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LockboxCollection'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Gets a list of all Lockboxes in a compartment
      tags:
      - lockbox
      x-related-resource: '#/definitions/LockboxCollection'
    post:
      description: 'Creates a new Lockbox.

        '
      operationId: CreateLockbox
      parameters:
      - $ref: '#/components/parameters/RetryTokenHeader'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        201:
          description: Accepted the request. The Lockbox is created.
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            location:
              description: 'this contains the full URI for the get request, e.g. "https://iaas.us-phoenix-1.oraclecloud.com/20210331/lockbox/<some-ocid>"

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Lockbox'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        409:
          $ref: '#/components/responses/409'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Creates a new Lockbox
      tags:
      - lockbox
      x-related-resource: '#/definitions/Lockbox'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateLockboxDetails'
        description: Details for the new Lockbox.
        required: true
  /lockboxes/{lockboxId}:
    delete:
      description: Deletes a Lockbox resource by identifier
      operationId: DeleteLockbox
      parameters:
      - $ref: '#/components/parameters/LockboxIdentifierPathParam'
      - $ref: '#/components/parameters/IfMatchHeader'
      - $ref: '#/components/parameters/RequestIdHeader'
      - $ref: '#/components/parameters/RetryTokenHeader'
      responses:
        204:
          description: Lockbox is deleted.
          headers:
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        409:
          $ref: '#/components/responses/409'
        412:
          $ref: '#/components/responses/412'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Delete a provisioned Lockbox
      tags:
      - lockbox
      x-related-resource: '#/definitions/Lockbox'
    get:
      description: Gets a Lockbox by identifier
      operationId: GetLockbox
      parameters:
      - $ref: '#/components/parameters/LockboxIdentifierPathParam'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        200:
          description: Retrieves the Lockbox with the given id
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Lockbox'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Get Lockbox
      tags:
      - lockbox
    put:
      description: Updates the Lockbox
      operationId: UpdateLockbox
      parameters:
      - $ref: '#/components/parameters/LockboxIdentifierPathParam'
      - $ref: '#/components/parameters/IfMatchHeader'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        200:
          description: The Lockbox is updated.
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Lockbox'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        405:
          $ref: '#/components/responses/405'
        412:
          $ref: '#/components/responses/412'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Update the Lockbox identified by the id
      tags:
      - lockbox
      x-related-resource: '#/definitions/Lockbox'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateLockboxDetails'
        description: The information to be updated.
        required: true
  /lockboxes/{lockboxId}/actions/changeCompartment:
    post:
      description: Moves a Lockbox resource from one compartment identifier to another. When provided, If-Match is checked against ETag values of the resource.
      operationId: ChangeLockboxCompartment
      parameters:
      - $ref: '#/components/parameters/LockboxIdentifierPathParam'
      - $ref: '#/components/parameters/IfMatchHeader'
      - $ref: '#/components/parameters/RequestIdHeader'
      - $ref: '#/components/parameters/RetryTokenHeader'
      responses:
        204:
          description: Accepted the request. The Lockbox resource will be moved into a different compartment.
          headers:
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        409:
          $ref: '#/components/responses/409'
        412:
          $ref: '#/components/responses/412'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
      summary: Moves a resource into a different compartment.
      tags:
      - lockbox
      x-related-resource: '#/definitions/Lockbox'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ChangeLockboxCompartmentDetails'
        description: The information to be updated.
        required: true
  /lockboxes/{lockboxId}/internal:
    get:
      description: Gets a LockboxInternal by identifier
      operationId: GetLockboxInternal
      parameters:
      - $ref: '#/components/parameters/LockboxIdentifierPathParam'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        200:
          description: Retrieves the Lockbox internal model with the given id
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LockboxInternal'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Get Lockbox Internal model
      tags:
      - lockbox
  /lockboxes/{lockboxId}/migrate:
    post:
      description: Migrate old lockboxes with different operations
      operationId: MigrateLockbox
      parameters:
      - $ref: '#/components/parameters/LockboxIdentifierPathParam'
      - $ref: '#/components/parameters/IfMatchHeader'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        200:
          description: The Lockbox is migrated.
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Lockbox'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        405:
          $ref: '#/components/responses/405'
        409:
          $ref: '#/components/responses/409'
        412:
          $ref: '#/components/responses/412'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Migrate old lockbox with different operations
      tags:
      - lockbox
      x-related-resource: '#/definitions/Lockbox'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MigrateDetails'
        description: The detailed information to migrate the old lockboxes.
        required: true
components:
  parameters:
    LockboxIdentifierQueryParam:
      description: unique Lockbox identifier
      in: query
      name: id
      x-default-description: 'null'
      schema:
        type: string
    SortByQueryParam:
      description: 'The field to sort by. Only one sort order may be provided. Default order for timeCreated is descending. Default order for displayName is ascending.

        '
      in: query
      name: sortBy
      schema:
        type: string
        enum:
        - timeCreated
        - displayName
        - id
        default: timeCreated
    LockboxResourceIdentifierQueryParam:
      description: The ID of the resource associated with the lockbox.
      in: query
      name: resourceId
      x-default-description: 'null'
      schema:
        type: string
    LifecycleStateQueryParam:
      description: A filter to return only resources their lifecycleState matches the given lifecycleState.
      in: query
      name: lifecycleState
      x-default-description: 'null'
      x-obmcs-enumref: '#/definitions/Lockbox/lifecycleState'
      schema:
        type: string
    LockboxPartnerOptionalQueryParam:
      description: The name of the lockbox partner.
      in: query
      name: lockboxPartner
      x-default-description: 'null'
      x-obmcs-top-level-enum: '#/definitions/LockboxPartner'
      schema:
        type: string
        enum:
        - FAAAS
        - CANARY
    LockboxIdentifierPathParam:
      description: unique Lockbox identifier
      in: path
      name: lockboxId
      required: true
      schema:
        type: string
    SortOrderQueryParam:
      description: The sort order to use, either 'ASC' or 'DESC'.
      in: query
      name: sortOrder
      x-default-description: 'The default value depends upon `sortBy`, and

        in general is ''DESC'' when sorting by time and ''ASC'' otherwise.

        '
      x-obmcs-top-level-enum: '#/definitions/SortOrder'
      schema:
        type: string
        enum:
        - ASC
        - DESC
    RequestIdHeader:
      description: The client request ID for tracing.
      in: header
      name: opc-request-id
      schema:
        type: string
    PaginationTokenQueryParam:
      description: A token representing the position at which to start retrieving results. This must come from the `opc-next-page` header field of a previous response.
      in: query
      name: page
      x-default-description: 'null'
      schema:
        type: string
        minLength: 1
    DisplayNameQueryParam:
      description: A filter to return only resources that match the entire display name given.
      in: query
      name: displayName
      x-default-description: 'null'
      schema:
        type: string
        maxLength: 255
        minLength: 1
    RetryTokenHeader:
      description: 'A token that uniquely identifies a request so it can be retried in case of a timeout or

        server error without risk of executing that same action again. Retry tokens expire after 24

        hours, but can be invalidated before then due to conflicting operations. For example, if a resource

        has been deleted and purged from the system, then a retry of the original creation request

        might be rejected.

        '
      in: header
      name: opc-retry-token
      required: false
      schema:
        type: string
        maxLength: 64
        minLength: 1
    PaginationLimitQueryParam:
      description: The maximum number of items to return.
      in: query
      name: limit
      schema:
        type: integer
        default: 10
        maximum: 1000
        minimum: 1
    CompartmentIdQueryParam:
      description: The ID of the compartment in which to list resources.
      in: query
      name: compartmentId
      x-default-description: 'null'
      schema:
        type: string
    LockboxPartnerIdOptionalQueryParam:
      description: The ID of the partner.
      in: query
      name: partnerId
      x-default-description: 'null'
      schema:
        type: string
    IfMatchHeader:
      description: 'For optimistic concurrency control. In the PUT or DELETE call

        for a resource, set the `if-match` parameter to the value of the

        etag from a previous GET or POST response for that resource.

        The resource will be updated or deleted only if the etag you

        provide matches the resource''s current etag value.

        '
      in: header
      name: if-match
      required: false
      schema:
        type: string
  schemas:
    AccessContextAttribute:
      description: Defined by partner while creating a lockbox. These attributes provides context for creating access request
      properties:
        defaultValue:
          description: An optional default value used when access request context value is not provided
          maxLength: 255
          minLength: 1
          type: string
        description:
          description: The description of the context attribute
          maxLength: 255
          minLength: 1
          type: string
        name:
          description: The name of the context attribute
          maxLength: 255
          minLength: 1
          type: string
        values:
          description: List of context attribute values.
          items:
            type: string
          type: array
      required:
      - name
      type: object
    CreateLockboxDetails:
      description: The information about new Lockbox.
      properties:
        accessContextAttributeIds:
          description: The list of unique identifier (OCID) of accessContextAttribute resource to create the lockbox
          items:
            type: string
          type: array
        accessContextAttributes:
          $ref: '#/components/schemas/AccessContextAttributeCollection'
        approvalTemplateId:
          description: Approval template ID
          type: string
        compartmentId:
          description: The unique identifier (OCID) of the compartment where the resource is located.
          maxLength: 255
          minLength: 1
          type: string
        countryAccessConfig:
          $ref: '#/components/schemas/CountryAccessConfig'
        definedTags:
          additionalProperties:
            additionalProperties:
              description: 'The value of the tag. Only string type is supported.

                '
              type: object
            description: 'Key-value pair representing predefined tags'' keys and values scoped to a namespace.

              Example: `{"bar-key": "value"}`

              '
            type: object
          description: 'Defined tags for this resource. Each key is predefined and scoped to a namespace.

            Example: `{"foo-namespace": {"bar-key": "value"}}`

            '
          type: object
        displayName:
          description: Lockbox Identifier
          maxLength: 255
          minLength: 1
          type: string
        freeformTags:
          additionalProperties:
            type: string
          description: 'Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only.

            Example: `{"bar-key": "value"}`

            '
          type: object
        lockboxPartner:
          description: The partner using this lockbox to lock a resource.
          enum:
          - FAAAS
          - CANARY
          type: string
          x-obmcs-top-level-enum: '#/definitions/LockboxPartner'
        maxAccessDuration:
          description: The maximum amount of time operator has access to associated resources.
          example: PT10M5S
          format: x-obmcs-duration
          type: string
        parentLockboxId:
          description: The unique identifier (OCID) of lockbox resource using to reference parent lockbox in hybrid oma setup
          type: string
        partnerCompartmentId:
          description: Compartment Identifier
          maxLength: 255
          minLength: 1
          type: string
        partnerId:
          description: The unique identifier (OCID) of partner resource using this lockbox to lock a resource
          type: string
        resourceId:
          description: The unique identifier (OCID) of the customer's resource.
          maxLength: 255
          minLength: 1
          type: string
      required:
      - resourceId
      - compartmentId
      type: object
    UpdateLockboxDetails:
      description: The information to be updated.
      properties:
        approvalTemplateId:
          description: Approval template ID
          type: string
        countryAccessConfig:
          $ref: '#/components/schemas/CountryAccessConfig'
        definedTags:
          additionalProperties:
            additionalProperties:
              description: 'The value of the tag. Only string type is supported.

                '
              type: object
            description: 'Key-value pair representing predefined tags'' keys and values scoped to a namespace.

              Example: `{"bar-key": "value"}`

              '
            type: object
          description: 'Defined tags for this resource. Each key is predefined and scoped to a namespace.

            Example: `{"foo-namespace": {"bar-key": "value"}}`

            '
          type: object
        displayName:
          description: Lockbox Identifier
          maxLength: 255
          minLength: 1
          type: string
        freeformTags:
          additionalProperties:
            type: string
          description: 'Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only.

            Example: `{"bar-key": "value"}`

            '
          type: object
        maxAccessDuration:
          description: The maximum amount of time operator has access to associated resources.
          example: PT10M5S
          format: x-obmcs-duration
          type: string
      type: object
    AccessContextAttributeCollection:
      description: Contains context attribute entries defined while creating or updating a lockbox.
      properties:
        items:
          description: List of context attributes.
          items:
            $ref: '#/components/schemas/AccessContextAttribute'
          type: array
      required:
      - items
      type: object
    LockboxCollection:
      description: Results of a lockbox search. Contains both LockboxSummary items and other information, such as metadata.
      properties:
        items:
          description: List of lockboxes.
          items:
            $ref: '#/components/schemas/LockboxSummary'
          type: array
      required:
      - items
      type: object
    Lockbox:
      description: Description of Lockbox.
      properties:
        accessContextAttributeIds:
          description: The list of unique identifier (OCID) of accessContextAttribute resource to create the lockbox
          items:
            type: string
          type: array
        accessContextAttributes:
          $ref: '#/components/schemas/AccessContextAttributeCollection'
        approvalTemplateId:
          description: Approval template ID
          type: string
        compartmentId:
          description: Compartment Identifier
          type: string
        countryAccessConfig:
          $ref: '#/components/schemas/CountryAccessConfig'
        definedTags:
          additionalProperties:
            additionalProperties:
              description: 'The value of the tag. Only string type is supported.

                '
              type: object
            description: 'Key-value pair representing predefined tags'' keys and values scoped to a namespace.

              Example: `{"bar-key": "value"}`

              '
            type: object
          description: 'Defined tags for this resource. Each key is predefined and scoped to a namespace.

            Example: `{"foo-namespace": {"bar-key": "value"}}`

            '
          type: object
        displayName:
          description: Lockbox Identifier, can be renamed
          type: string
        freeformTags:
          additionalProperties:
            type: string
          description: 'Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only.

            Example: `{"bar-key": "value"}`

            '
          type: object
        id:
          description: Unique identifier that is immutable on creation
          type: string
        lifecycleDetails:
          description: A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.
          type: string
        lifecycleState:
          description: The current state of the Lockbox.
          enum:
          - ACTIVE
          - CREATING
          - UPDATING
          - DELETING
          - DELETED
          - FAILED
          type: string
        lockboxPartner:
          description: The partner using this lockbox to lock a resource.
          enum:
          - FAAAS
          - CANARY
          type: string
          x-obmcs-top-level-enum: '#/definitions/LockboxPartner'
        maxAccessDuration:
          description: The maximum amount of time operator has access to associated resources.
          example: PT10M5S
          format: x-obmcs-duration
          type: string
        parentLockboxId:
          description: The unique identifier (OCID) of lockbox resource using to reference parent lockbox in hybrid oma setup
          type: string
        partnerCompartmentId:
          description: Compartment Identifier
          type: string
        partnerId:
          description: The unique identifier (OCID) of partner resource using this lockbox to lock a resource
          type: string
        resourceId:
          description: The unique identifier (OCID) of associated resource that the lockbox is created for.
          type: string
        systemTags:
          additionalProperties:
            additionalProperties:
              description: 'The value of the tag. Only string type is supported.

                '
              type: object
            description: 'Key-value pair representing system tags'' keys and values scoped to a namespace.

              Example: `{"bar-key": "value"}`

              '
            type: object
          description: 'Usage of system tag keys. These predefined keys are scoped to namespaces.

            Example: `{"orcl-cloud": {"free-tier-retained": "true"}}`

            '
          type: object
        timeCreated:
          description: The time the the Lockbox was created. An RFC3339 formatted datetime string
          format: date-time
          type: string
        timeUpdated:
          description: The time the Lockbox was updated. An RFC3339 formatted datetime string
          format: date-time
          type: string
      required:
      - id
      - compartmentId
      - resourceId
      - lifecycleState
      - timeCreated
      - displayName
      - freeformTags
      - definedTags
      type: object
    MigrateDetails:
      description: The base class for all migrate operations.
      discriminator:
        propertyName: migrationType
      properties:
        migrationType:
          description: The migration types associated with each operations.
          enum:
          - LOCKBOX_ATTACH_ACCESSCONTEXTATTRIBUTE
          type: string
          x-obmcs-top-level-enum: '#/definitions/MigrationType'
      required:
      - migrationType
      type: object
    LockboxSummary:
      description: Summary of the Lockbox.
      properties:
        approvalTemplateId:
          description: Approval template ID
          type: string
        compartmentId:
          description: Compartment Identifier
          type: string
        countryAccessConfig:
          $ref: '#/components/schemas/CountryAccessConfig'
        definedTags:
          additionalProperties:
            additionalProperties:
              description: 'The value of the tag. Only string type is supported.

                '
              type: object
            description: 'Key-value pair representing predefined tags'' keys and values scoped to a namespace.

              Example: `{"bar-key": "value"}`

              '
            type: object
          description: 'Defined tags for this resource. Each key is predefined and scoped to a namespace.

            Example: `{"foo-namespace": {"bar-key": "value"}}`

            '
          type: object
        displayName:
          description: Lockbox Identifier, can be renamed
          type: string
        freeformTags:
          additionalProperties:
            type: string
          description: 'Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only.

            Example: `{"bar-key": "value"}`

            '
          type: object
        id:
          description: Unique identifier that is immutable on creation
          type: string
        lifecycleDetails:
          description: A message describing the current state in more detail. For example, can be used to provide actionable information for a resource in Failed state.
          type: string
        lifecycleState:
          description: The current state of the Lockbox.
          type: string
          x-obmcs-enumref: '#/definitions/Lockbox/lifecycleState'
        lockboxPartner:
          description: The partner using this lockbox to lock a resource.
          enum:
          - FAAAS
          - CANARY
          type: string
          x-obmcs-top-level-enum: '#/definitions/LockboxPartner'
        maxAccessDuration:
          description: The maximu

# --- truncated at 32 KB (38 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/oracle/refs/heads/main/openapi/oracle-lockbox-api-openapi.yml