Class GetDefaultServiceAccount

Inheritance
System.Object
GetDefaultServiceAccount
Inherited Members
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
System.Object.ReferenceEquals(System.Object, System.Object)
System.Object.ToString()
Namespace: Pulumi.Gcp.BigQuery
Assembly: Pulumi.Gcp.dll
Syntax
public static class GetDefaultServiceAccount

Methods

View Source

InvokeAsync(GetDefaultServiceAccountArgs, InvokeOptions)

Get the email address of a project's unique BigQuery service account.

Each Google Cloud project has a unique service account used by BigQuery. When using BigQuery with customer-managed encryption keys, this account needs to be granted the cloudkms.cryptoKeyEncrypterDecrypter IAM role on the customer-managed Cloud KMS key used to protect the data.

For more information see the API reference.

{{% examples %}}

Example Usage

{{% example %}}

using Pulumi;
using Gcp = Pulumi.Gcp;

class MyStack : Stack
{
public MyStack()
{
    var bqSa = Output.Create(Gcp.BigQuery.GetDefaultServiceAccount.InvokeAsync());
    var keySaUser = new Gcp.Kms.CryptoKeyIAMMember("keySaUser", new Gcp.Kms.CryptoKeyIAMMemberArgs
    {
        CryptoKeyId = google_kms_crypto_key.Key.Id,
        Role = "roles/cloudkms.cryptoKeyEncrypterDecrypter",
        Member = bqSa.Apply(bqSa => $"serviceAccount:{bqSa.Email}"),
    });
}

}

{{% /example %}} {{% /examples %}}

Declaration
public static Task<GetDefaultServiceAccountResult> InvokeAsync(GetDefaultServiceAccountArgs args = null, InvokeOptions options = null)
Parameters
Type Name Description
GetDefaultServiceAccountArgs args
InvokeOptions options
Returns
Type Description
System.Threading.Tasks.Task<GetDefaultServiceAccountResult>