---
search:
  tags:
    - Secret stores
    - PATCH
seo:
  description: >-
    Enterprise. Change a store's settings, credential, allowed paths, cache TTL…
    Reference for the PATCH /api/v2/secret-stores/{name} endpoint in the Anlyon
    API.
sidebar:
  label: Change a secret store
  badge: PATCH
title: Change a secret store
type: openapi-operation
---
Enterprise. Change a store's settings, credential, allowed paths, cache TTL or description. A store's name and type do not change. `config` fields replace the ones they name. New settings or a new credential are checked against the store before they apply, and values cached under the old ones are dropped. Changing where the credential is sent (a Vault store's `address`, `namespace`, `mount`, `auth` or `authMount`; an AWS store's `region`, `auth`, `roleArn` or `externalId`) needs `credential` in the same request, or answers 400: a stored credential is never sent anywhere it was not given for. In a protected environment, changing settings, the credential or the allowed paths needs `confirmProtected=true`.

`PATCH /api/v2/secret-stores/{name}`