The GCPWorkloadProvider entity represents a provider inside a Workload Identity Pool. A provider defines which external identity issuer (OIDC, SAML or an AWS account) the pool trusts. Its attribute condition then decides which of that issuer’s identities are accepted.
| Field | Type | Possible Operators | Description |
|---|---|---|---|
| Guid | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique identifier of the object in Forestall, a combination of the selected scan’s GUID and the object’s own identifier. |
| FSName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name used by Forestall to identify the object. |
| Name | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Full resource name of the workload identity pool provider. |
| DisplayName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name of the object. |
| State | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | State of the provider (ACTIVE or DELETED). |
| IsDisabled | BOOLEAN | N/A (toggle) | Whether the provider is disabled. A disabled provider cannot be used to exchange tokens. |
| IssuerUri | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | OIDC issuer URI (OIDC providers only). |
| ProviderType | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Provider type: OIDC, SAML or AWS. |
| AWSAccountID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | AWS account ID trusted by the provider (AWS providers only). |
| risk | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Risk score calculated by Forestall. |
| Description | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Description of the object. |
| Location | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Location (region) of the resource. |
| AttributeCondition | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | CEL condition that external credentials must satisfy to be accepted. Empty means any identity from the issuer is accepted. |
| GCPTier | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | GCP tier classification assigned by Forestall. |
| ExposurePoint | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Exposure point score calculated by Forestall. |