getAccountAccessToken

This data source provides a google oauth2 access_token for a different service account than the one initially running the script. For more information see the official documentation as well as iamcredentials.generateAccessToken()

Return

A collection of values returned by getAccountAccessToken.

Parameters

argument

A collection of arguments for invoking getAccountAccessToken.


suspend fun getAccountAccessToken(delegates: List<String>? = null, lifetime: String? = null, scopes: List<String>, targetServiceAccount: String): GetAccountAccessTokenResult

Return

A collection of values returned by getAccountAccessToken.

See also

Parameters

delegates

Delegate chain of approvals needed to perform full impersonation. Specify the fully qualified service account name. (e.g. ["projects/-/serviceAccounts/delegate-svc-account@project-id&#46;iam&#46;gserviceaccount&#46;com"])

lifetime

Lifetime of the impersonated token (defaults to its max: 3600s).

scopes

The scopes the new credential should have (e.g. ["cloud-platform"])

targetServiceAccount

The service account to impersonate (e.g. service_B@your-project-id.iam.gserviceaccount.com)


Return

A collection of values returned by getAccountAccessToken.

See also

Parameters

argument

Builder for com.pulumi.gcp.serviceAccount.kotlin.inputs.GetAccountAccessTokenPlainArgs.