pulumi-gcp-kotlin/com.pulumi.gcp.bigquery.kotlin/BigqueryFunctions/getDefaultServiceAccount

getDefaultServiceAccount

suspend fun getDefaultServiceAccount(argument: GetDefaultServiceAccountPlainArgs): GetDefaultServiceAccountResult

Get the email address of a project's unique BigQuery service account. Each Google Cloud project has a unique service account used by BigQuery. When using BigQuery with customer-managed encryption keys, this account needs to be granted the cloudkms.cryptoKeyEncrypterDecrypter IAM role on the customer-managed Cloud KMS key used to protect the data. For more information see the API reference.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.bigquery.BigqueryFunctions;
import com.pulumi.gcp.bigquery.inputs.GetDefaultServiceAccountArgs;
import com.pulumi.gcp.kms.CryptoKeyIAMMember;
import com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var bqSa = BigqueryFunctions.getDefaultServiceAccount();
        var keySaUser = new CryptoKeyIAMMember("keySaUser", CryptoKeyIAMMemberArgs.builder()
            .cryptoKeyId(google_kms_crypto_key.key().id())
            .role("roles/cloudkms.cryptoKeyEncrypterDecrypter")
            .member(String.format("serviceAccount:%s", bqSa.applyValue(getDefaultServiceAccountResult -> getDefaultServiceAccountResult.email())))
            .build());
    }
}
Content copied to clipboard

Return

A collection of values returned by getDefaultServiceAccount.

Parameters

argument

A collection of arguments for invoking getDefaultServiceAccount.

suspend fun getDefaultServiceAccount(project: String? = null): GetDefaultServiceAccountResult

Return

A collection of values returned by getDefaultServiceAccount.

Parameters

project

The project the unique service account was created for. If it is not provided, the provider project is used.

See also

.

suspend fun getDefaultServiceAccount(argument: suspend GetDefaultServiceAccountPlainArgsBuilder.() -> Unit): GetDefaultServiceAccountResult

Return

A collection of values returned by getDefaultServiceAccount.

Parameters

argument

Builder for com.pulumi.gcp.bigquery.kotlin.inputs.GetDefaultServiceAccountPlainArgs.

See also

.