Workload Provider

The GCPWorkloadProvider entity represents a provider inside a Workload Identity Pool. A provider defines which external identity issuer (OIDC, SAML or an AWS account) the pool trusts. Its attribute condition then decides which of that issuer's identities are accepted.

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique identifier of the object in Forestall, a combination of the selected scan's GUID and the object's own identifier.
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name used by Forestall to identify the object.
Name	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Full resource name of the workload identity pool provider.
DisplayName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name of the object.
State	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	State of the provider (ACTIVE or DELETED).
IsDisabled	BOOLEAN	N/A (toggle)	Whether the provider is disabled. A disabled provider cannot be used to exchange tokens.
IssuerUri	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	OIDC issuer URI (OIDC providers only).
ProviderType	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Provider type: OIDC, SAML or AWS.
AWSAccountID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	AWS account ID trusted by the provider (AWS providers only).
risk	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Risk score calculated by Forestall.
Description	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Description of the object.
Location	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Location (region) of the resource.
AttributeCondition	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	CEL condition that external credentials must satisfy to be accepted. Empty means any identity from the issuer is accepted.
GCPTier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	GCP tier classification assigned by Forestall.
ExposurePoint	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Exposure point score calculated by Forestall.