---
title: cloud hosted deployments set-deployment-es-resource-keystore cli command
description: Add or remove items from the Elasticsearch resource keystore Behaviour flags: --dry-run — validate all inputs and exit without performing any action 
url: https://www.elastic.co/elastic/docs-builder/docs/4118/reference/elastic-cli/cli/cloud/hosted/deployments/set-deployment-es-resource-keystore
applies_to:
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Preview
---

# cloud hosted deployments set-deployment-es-resource-keystore cli command
<cli-modifiers>
</cli-modifiers>

```bash
elastic cloud hosted deployments set-deployment-es-resource-keystore \
  --deployment-id <deployment-id> \
  --ref-id <ref-id> \
  --secrets <secrets> \
  [options]
```

Add or remove items from the Elasticsearch resource keystore
**Behaviour flags:**
`--dry-run` — validate all inputs and exit without performing any action

## Options

<definitions>
  <definition term="--deployment-id string required">
    Identifier for the Deployment
  </definition>
  <definition term="--ref-id string required">
    User-specified RefId for the Resource (or '_main' if there is only one)
  </definition>
  <definition term="--secrets string required">
  </definition>
  <definition term="--validate-only">
    When `true`, does nothing except return the entries' allowlist and reloadability statuses.
  </definition>
  <definition term="--input-file string">
    path to a JSON file to use as command input
  </definition>
  <definition term="--dry-run">
    validate all inputs and exit without performing any action (preview changes without applying them)
  </definition>
  <definition term="--yes">
    confirm destructive action without prompting
  </definition>
</definitions>


## Global Options

<definitions>
  <definition term="--json">
    output as JSON
  </definition>
</definitions>