Workload Identity Pool

The GCPWorkloadIdentityPool entity represents a Google Cloud Workload Identity Pool: a project-level container for the external workload identities (for example AWS, GitHub Actions or other OIDC/SAML issuers) that can exchange their credentials for Google Cloud access tokens without a service account key. The providers configured in the pool are listed on the Workload Provider page.

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique identifier of the object in Forestall, a combination of the selected scan's GUID and the object's own identifier.
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name used by Forestall to identify the object.
Name	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Full resource name of the workload identity pool.
DisplayName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name of the object.
State	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	State of the pool (ACTIVE or DELETED).
ProjectId	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	ID of the project that owns the pool.
IsDisabled	BOOLEAN	N/A (toggle)	Whether the pool is disabled. A disabled pool cannot be used to exchange external tokens.
risk	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Risk score calculated by Forestall.
Description	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Description of the object.
Location	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Location (region) of the resource.
GCPTier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	GCP tier classification assigned by Forestall.
ExposurePoint	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Exposure point score calculated by Forestall.