The GCPWorkloadIdentityPool entity represents a Google Cloud Workload Identity Pool: a project-level container for the external workload identities (for example AWS, GitHub Actions or other OIDC/SAML issuers) that can exchange their credentials for Google Cloud access tokens without a service account key. The providers configured in the pool are listed on the Workload Provider page.
| Field | Type | Possible Operators | Description |
|---|---|---|---|
| Guid | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique identifier of the object in Forestall, a combination of the selected scan’s GUID and the object’s own identifier. |
| FSName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name used by Forestall to identify the object. |
| Name | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Full resource name of the workload identity pool. |
| DisplayName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name of the object. |
| State | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | State of the pool (ACTIVE or DELETED). |
| ProjectId | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | ID of the project that owns the pool. |
| IsDisabled | BOOLEAN | N/A (toggle) | Whether the pool is disabled. A disabled pool cannot be used to exchange external tokens. |
| risk | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Risk score calculated by Forestall. |
| Description | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Description of the object. |
| Location | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Location (region) of the resource. |
| GCPTier | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | GCP tier classification assigned by Forestall. |
| ExposurePoint | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Exposure point score calculated by Forestall. |