sysdig 1.56.1 published on Thursday, May 8, 2025 by sysdiglabs
sysdig.getSecureTrustedCloudIdentity
Explore with Pulumi AI
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as sysdig from "@pulumi/sysdig";
const trustedIdentity = sysdig.getSecureTrustedCloudIdentity({
    cloudProvider: "aws",
});
import pulumi
import pulumi_sysdig as sysdig
trusted_identity = sysdig.get_secure_trusted_cloud_identity(cloud_provider="aws")
package main
import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/sysdig/sysdig"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sysdig.GetSecureTrustedCloudIdentity(ctx, &sysdig.GetSecureTrustedCloudIdentityArgs{
			CloudProvider: "aws",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sysdig = Pulumi.Sysdig;
return await Deployment.RunAsync(() => 
{
    var trustedIdentity = Sysdig.GetSecureTrustedCloudIdentity.Invoke(new()
    {
        CloudProvider = "aws",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sysdig.SysdigFunctions;
import com.pulumi.sysdig.inputs.GetSecureTrustedCloudIdentityArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var trustedIdentity = SysdigFunctions.getSecureTrustedCloudIdentity(GetSecureTrustedCloudIdentityArgs.builder()
            .cloudProvider("aws")
            .build());
    }
}
variables:
  trustedIdentity:
    fn::invoke:
      function: sysdig:getSecureTrustedCloudIdentity
      arguments:
        cloudProvider: aws
Using getSecureTrustedCloudIdentity
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getSecureTrustedCloudIdentity(args: GetSecureTrustedCloudIdentityArgs, opts?: InvokeOptions): Promise<GetSecureTrustedCloudIdentityResult>
function getSecureTrustedCloudIdentityOutput(args: GetSecureTrustedCloudIdentityOutputArgs, opts?: InvokeOptions): Output<GetSecureTrustedCloudIdentityResult>def get_secure_trusted_cloud_identity(cloud_provider: Optional[str] = None,
                                      id: Optional[str] = None,
                                      timeouts: Optional[GetSecureTrustedCloudIdentityTimeouts] = None,
                                      opts: Optional[InvokeOptions] = None) -> GetSecureTrustedCloudIdentityResult
def get_secure_trusted_cloud_identity_output(cloud_provider: Optional[pulumi.Input[str]] = None,
                                      id: Optional[pulumi.Input[str]] = None,
                                      timeouts: Optional[pulumi.Input[GetSecureTrustedCloudIdentityTimeoutsArgs]] = None,
                                      opts: Optional[InvokeOptions] = None) -> Output[GetSecureTrustedCloudIdentityResult]func GetSecureTrustedCloudIdentity(ctx *Context, args *GetSecureTrustedCloudIdentityArgs, opts ...InvokeOption) (*GetSecureTrustedCloudIdentityResult, error)
func GetSecureTrustedCloudIdentityOutput(ctx *Context, args *GetSecureTrustedCloudIdentityOutputArgs, opts ...InvokeOption) GetSecureTrustedCloudIdentityResultOutput> Note: This function is named GetSecureTrustedCloudIdentity in the Go SDK.
public static class GetSecureTrustedCloudIdentity 
{
    public static Task<GetSecureTrustedCloudIdentityResult> InvokeAsync(GetSecureTrustedCloudIdentityArgs args, InvokeOptions? opts = null)
    public static Output<GetSecureTrustedCloudIdentityResult> Invoke(GetSecureTrustedCloudIdentityInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetSecureTrustedCloudIdentityResult> getSecureTrustedCloudIdentity(GetSecureTrustedCloudIdentityArgs args, InvokeOptions options)
public static Output<GetSecureTrustedCloudIdentityResult> getSecureTrustedCloudIdentity(GetSecureTrustedCloudIdentityArgs args, InvokeOptions options)
fn::invoke:
  function: sysdig:index/getSecureTrustedCloudIdentity:getSecureTrustedCloudIdentity
  arguments:
    # arguments dictionaryThe following arguments are supported:
- CloudProvider string
- The cloud provider in which the trusted identity will be used. Currently supported providers are aws,gcpandazure
- Id string
- Timeouts
GetSecure Trusted Cloud Identity Timeouts 
- CloudProvider string
- The cloud provider in which the trusted identity will be used. Currently supported providers are aws,gcpandazure
- Id string
- Timeouts
GetSecure Trusted Cloud Identity Timeouts 
- cloudProvider String
- The cloud provider in which the trusted identity will be used. Currently supported providers are aws,gcpandazure
- id String
- timeouts
GetSecure Trusted Cloud Identity Timeouts 
- cloudProvider string
- The cloud provider in which the trusted identity will be used. Currently supported providers are aws,gcpandazure
- id string
- timeouts
GetSecure Trusted Cloud Identity Timeouts 
- cloud_provider str
- The cloud provider in which the trusted identity will be used. Currently supported providers are aws,gcpandazure
- id str
- timeouts
GetSecure Trusted Cloud Identity Timeouts 
- cloudProvider String
- The cloud provider in which the trusted identity will be used. Currently supported providers are aws,gcpandazure
- id String
- timeouts Property Map
getSecureTrustedCloudIdentity Result
The following output properties are available:
- AwsAccount stringId 
- If identityis an AWS ARN, this attribute contains the AWS Account ID to which the ARN belongs, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- AwsGov stringAccount Id 
- If gov_identityis an AWS GOV IAM Role ARN, this attribute contains the AWS GOV Account ID to which the ARN belongs, otherwise it contains the empty string. Currently supported onaws.
- AwsGov stringRole Name 
- If gov_identityis a AWS GOV IAM Role ARN, this attribute contains the name of the GOV role, otherwise it contains the empty string. Currently supported onaws.
- AwsRole stringName 
- If identityis a AWS IAM Role ARN, this attribute contains the name of the role, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- AzureService stringPrincipal Id 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's ID.cloud_providermust be equal toazure.
- AzureTenant stringId 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's Tenant ID.cloud_providermust be equal toazure.
- CloudProvider string
- GovIdentity string
- Sysdig's identity for regulatory workloads (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your regulated cloud account. Currently supported on aws.
- Id string
- Identity string
- Sysdig's identity (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your cloud account.
- Timeouts
GetSecure Trusted Cloud Identity Timeouts 
- AwsAccount stringId 
- If identityis an AWS ARN, this attribute contains the AWS Account ID to which the ARN belongs, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- AwsGov stringAccount Id 
- If gov_identityis an AWS GOV IAM Role ARN, this attribute contains the AWS GOV Account ID to which the ARN belongs, otherwise it contains the empty string. Currently supported onaws.
- AwsGov stringRole Name 
- If gov_identityis a AWS GOV IAM Role ARN, this attribute contains the name of the GOV role, otherwise it contains the empty string. Currently supported onaws.
- AwsRole stringName 
- If identityis a AWS IAM Role ARN, this attribute contains the name of the role, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- AzureService stringPrincipal Id 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's ID.cloud_providermust be equal toazure.
- AzureTenant stringId 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's Tenant ID.cloud_providermust be equal toazure.
- CloudProvider string
- GovIdentity string
- Sysdig's identity for regulatory workloads (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your regulated cloud account. Currently supported on aws.
- Id string
- Identity string
- Sysdig's identity (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your cloud account.
- Timeouts
GetSecure Trusted Cloud Identity Timeouts 
- awsAccount StringId 
- If identityis an AWS ARN, this attribute contains the AWS Account ID to which the ARN belongs, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- awsGov StringAccount Id 
- If gov_identityis an AWS GOV IAM Role ARN, this attribute contains the AWS GOV Account ID to which the ARN belongs, otherwise it contains the empty string. Currently supported onaws.
- awsGov StringRole Name 
- If gov_identityis a AWS GOV IAM Role ARN, this attribute contains the name of the GOV role, otherwise it contains the empty string. Currently supported onaws.
- awsRole StringName 
- If identityis a AWS IAM Role ARN, this attribute contains the name of the role, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- azureService StringPrincipal Id 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's ID.cloud_providermust be equal toazure.
- azureTenant StringId 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's Tenant ID.cloud_providermust be equal toazure.
- cloudProvider String
- govIdentity String
- Sysdig's identity for regulatory workloads (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your regulated cloud account. Currently supported on aws.
- id String
- identity String
- Sysdig's identity (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your cloud account.
- timeouts
GetSecure Trusted Cloud Identity Timeouts 
- awsAccount stringId 
- If identityis an AWS ARN, this attribute contains the AWS Account ID to which the ARN belongs, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- awsGov stringAccount Id 
- If gov_identityis an AWS GOV IAM Role ARN, this attribute contains the AWS GOV Account ID to which the ARN belongs, otherwise it contains the empty string. Currently supported onaws.
- awsGov stringRole Name 
- If gov_identityis a AWS GOV IAM Role ARN, this attribute contains the name of the GOV role, otherwise it contains the empty string. Currently supported onaws.
- awsRole stringName 
- If identityis a AWS IAM Role ARN, this attribute contains the name of the role, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- azureService stringPrincipal Id 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's ID.cloud_providermust be equal toazure.
- azureTenant stringId 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's Tenant ID.cloud_providermust be equal toazure.
- cloudProvider string
- govIdentity string
- Sysdig's identity for regulatory workloads (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your regulated cloud account. Currently supported on aws.
- id string
- identity string
- Sysdig's identity (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your cloud account.
- timeouts
GetSecure Trusted Cloud Identity Timeouts 
- aws_account_ strid 
- If identityis an AWS ARN, this attribute contains the AWS Account ID to which the ARN belongs, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- aws_gov_ straccount_ id 
- If gov_identityis an AWS GOV IAM Role ARN, this attribute contains the AWS GOV Account ID to which the ARN belongs, otherwise it contains the empty string. Currently supported onaws.
- aws_gov_ strrole_ name 
- If gov_identityis a AWS GOV IAM Role ARN, this attribute contains the name of the GOV role, otherwise it contains the empty string. Currently supported onaws.
- aws_role_ strname 
- If identityis a AWS IAM Role ARN, this attribute contains the name of the role, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- azure_service_ strprincipal_ id 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's ID.cloud_providermust be equal toazure.
- azure_tenant_ strid 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's Tenant ID.cloud_providermust be equal toazure.
- cloud_provider str
- gov_identity str
- Sysdig's identity for regulatory workloads (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your regulated cloud account. Currently supported on aws.
- id str
- identity str
- Sysdig's identity (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your cloud account.
- timeouts
GetSecure Trusted Cloud Identity Timeouts 
- awsAccount StringId 
- If identityis an AWS ARN, this attribute contains the AWS Account ID to which the ARN belongs, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- awsGov StringAccount Id 
- If gov_identityis an AWS GOV IAM Role ARN, this attribute contains the AWS GOV Account ID to which the ARN belongs, otherwise it contains the empty string. Currently supported onaws.
- awsGov StringRole Name 
- If gov_identityis a AWS GOV IAM Role ARN, this attribute contains the name of the GOV role, otherwise it contains the empty string. Currently supported onaws.
- awsRole StringName 
- If identityis a AWS IAM Role ARN, this attribute contains the name of the role, otherwise it contains the empty string.cloud_providermust be equal toawsorgcp.
- azureService StringPrincipal Id 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's ID.cloud_providermust be equal toazure.
- azureTenant StringId 
- If identitycontains credentials for an Azure Service Principal, this attribute contains the service principal's Tenant ID.cloud_providermust be equal toazure.
- cloudProvider String
- govIdentity String
- Sysdig's identity for regulatory workloads (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your regulated cloud account. Currently supported on aws.
- id String
- identity String
- Sysdig's identity (User/Role/etc) that should be used to create a trust relationship allowing Sysdig access to your cloud account.
- timeouts Property Map
Supporting Types
GetSecureTrustedCloudIdentityTimeouts     
- Read string
- Read string
- read String
- read string
- read str
- read String
Package Details
- Repository
- sysdig sysdiglabs/terraform-provider-sysdig
- License
- Notes
- This Pulumi package is based on the sysdigTerraform Provider.