---
title: Workload Identity Pool
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Workload Identity Pool
---

# Workload Identity Pool

A Workload Identity Pool in Google Cloud lets you securely federate identities from external identity providers without creating long‑lived service account keys. It allows workloads running outside Google Cloud, such as on‑premises systems or other clouds, to authenticate to Google Cloud services using short‑lived credentials.

```gdscript3
gcp.iam_workload_identity_pool
```

## Fields

| Title                              | ID   | Type          | Data Type                                                                                                                                                                                             | Description |
| ---------------------------------- | ---- | ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key                               | core | string        |
| ancestors                          | core | array<string> |
| datadog_display_name               | core | string        |
| description                        | core | string        | Optional. A description of the pool. Cannot exceed 256 characters.                                                                                                                                    |
| disabled                           | core | bool          | Optional. Whether the pool is disabled. You cannot use a disabled pool to exchange tokens, or use existing tokens to access resources. If the pool is re-enabled, existing tokens grant access again. |
| expire_time                        | core | timestamp     | Output only. Time after which the workload identity pool will be permanently purged and cannot be recovered.                                                                                          |
| gcp_display_name                   | core | string        | Optional. A display name for the pool. Cannot exceed 32 characters.                                                                                                                                   |
| inline_certificate_issuance_config | core | json          | Optional. Defines the Certificate Authority (CA) pool resources and configurations required for issuance and rotation of mTLS workload certificates.                                                  |
| inline_trust_config                | core | json          | Optional. Represents config to add additional trusted trust domains.                                                                                                                                  |
| labels                             | core | array<string> |
| mode                               | core | string        | Immutable. The mode the pool is operating in.                                                                                                                                                         |
| name                               | core | string        | Identifier. The resource name of the pool.                                                                                                                                                            |
| organization_id                    | core | string        |
| parent                             | core | string        |
| project_id                         | core | string        |
| project_number                     | core | string        |
| region_id                          | core | string        |
| resource_name                      | core | string        |
| state                              | core | string        | Output only. The state of the pool.                                                                                                                                                                   |
| tags                               | core | hstore_csv    |
| zone_id                            | core | string        |