---
title: Workload Identity Pool
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Workload Identity Pool
---

# Workload Identity Pool

A Workload Identity Pool in Google Cloud lets you securely federate identities from external identity providers without creating long-lived service account keys. It allows workloads running outside Google Cloud, such as on-premises systems or other clouds, to authenticate to Google Cloud services using short-lived credentials.

```gdscript3
gcp.iam_workload_identity_pool
```

## Fields

| Title                              | ID   | Type          | Data Type                                                                                                                                                                                             | Description |
| ---------------------------------- | ---- | ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key                               | core | string        |
| ancestors                          | core | array<string> |
| datadog_display_name               | core | string        |
| description                        | core | string        | Optional. A description of the pool. Cannot exceed 256 characters.                                                                                                                                    |
| disabled                           | core | bool          | Optional. Whether the pool is disabled. You cannot use a disabled pool to exchange tokens, or use existing tokens to access resources. If the pool is re-enabled, existing tokens grant access again. |
| expire_time                        | core | timestamp     | Output only. Time after which the workload identity pool will be permanently purged and cannot be recovered.                                                                                          |
| gcp_display_name                   | core | string        | Optional. A display name for the pool. Cannot exceed 32 characters.                                                                                                                                   |
| inline_certificate_issuance_config | core | json          | Optional. Defines the Certificate Authority (CA) pool resources and configurations required for issuance and rotation of mTLS workload certificates.                                                  |
| inline_trust_config                | core | json          | Optional. Represents config to add additional trusted trust domains.                                                                                                                                  |
| labels                             | core | array<string> |
| mode                               | core | string        | Immutable. The mode the pool is operating in.                                                                                                                                                         |
| name                               | core | string        | Identifier. The resource name of the pool.                                                                                                                                                            |
| organization_id                    | core | string        |
| parent                             | core | string        |
| project_id                         | core | string        |
| project_number                     | core | string        |
| region_id                          | core | string        |
| resource_name                      | core | string        |
| state                              | core | string        | Output only. The state of the pool.                                                                                                                                                                   |
| tags                               | core | hstore_csv    |
| zone_id                            | core | string        |