> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/gcp-entities/workload-identity-pool.md).

# Workload Identity Pool

The **GCPWorkloadIdentityPool** entity represents a Google Cloud Workload Identity Pool: a project-level container for the external workload identities (for example AWS, GitHub Actions or other OIDC/SAML issuers) that can exchange their credentials for Google Cloud access tokens without a service account key. The providers configured in the pool are listed on the [Workload Provider](/forestall/search-and-reports/gcp-entities/workload-provider.md) page.

| Field         | Type    | Possible Operators                                             | Description                                                                                                              |
| ------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
| Guid          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier of the object in Forestall, a combination of the selected scan's GUID and the object's own identifier. |
| FSName        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used by Forestall to identify the object.                                                                   |
| Name          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Full resource name of the workload identity pool.                                                                        |
| DisplayName   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name of the object.                                                                                              |
| State         | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | State of the pool (`ACTIVE` or `DELETED`).                                                                               |
| ProjectId     | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | ID of the project that owns the pool.                                                                                    |
| IsDisabled    | BOOLEAN | N/A (toggle)                                                   | Whether the pool is disabled. A disabled pool cannot be used to exchange external tokens.                                |
| risk          | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Risk score calculated by Forestall.                                                                                      |
| Description   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Description of the object.                                                                                               |
| Location      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Location (region) of the resource.                                                                                       |
| GCPTier       | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | GCP tier classification assigned by Forestall.                                                                           |
| ExposurePoint | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Exposure point score calculated by Forestall.                                                                            |