wrappingTtl

If set, the SecretID response will be response-wrapped and available for the duration specified. Only a single unwrapping of the token is allowed.