---
title: Workload Identity Pool Provider Key
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Workload Identity Pool Provider Key
---

# Workload Identity Pool Provider Key

A Workload Identity Pool Provider Key in Google Cloud is a cryptographic key associated with an identity provider inside a workload identity pool. It is used to validate external credentials, such as tokens issued by third‑party identity systems, allowing secure federation into Google Cloud without service account keys.

```gdscript3
gcp.iam_workload_identity_pool_provider_key
```

## Fields

| Title                | ID   | Type          | Data Type                                                                                                                                                                                            | Description |
| -------------------- | ---- | ------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key                 | core | string        |
| ancestors            | core | array<string> |
| datadog_display_name | core | string        |
| expire_time          | core | timestamp     | Output only. Time after which the key will be permanently purged and cannot be recovered. Note that the key may get purged before this timestamp if the total limit of keys per provider is crossed. |
| key_data             | core | json          | Immutable. Public half of the asymmetric key.                                                                                                                                                        |
| labels               | core | array<string> |
| name                 | core | string        | Identifier. The resource name of the key.                                                                                                                                                            |
| organization_id      | core | string        |
| parent               | core | string        |
| project_id           | core | string        |
| project_number       | core | string        |
| region_id            | core | string        |
| resource_name        | core | string        |
| state                | core | string        | Output only. The state of the key.                                                                                                                                                                   |
| tags                 | core | hstore_csv    |
| use                  | core | string        | Required. The purpose of the key.                                                                                                                                                                    |
| zone_id              | core | string        |