---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_ec2_verified_access_endpoint{% #aws_ec2_verified_access_endpoint %}

## `account_id`{% #account_id %}

**Type**: `STRING`

## `application_domain`{% #application_domain %}

**Type**: `STRING`**Provider name**: `ApplicationDomain`**Description**: The DNS name for users to reach your application.

## `attachment_type`{% #attachment_type %}

**Type**: `STRING`**Provider name**: `AttachmentType`**Description**: The type of attachment used to provide connectivity between the Amazon Web Services Verified Access endpoint and the application.

## `cidr_options`{% #cidr_options %}

**Type**: `STRUCT`**Provider name**: `CidrOptions`**Description**: The options for a CIDR endpoint.

- `cidr`**Type**: `STRING`**Provider name**: `Cidr`**Description**: The CIDR.
- `port_ranges`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `PortRanges`**Description**: The port ranges.
  - `from_port`**Type**: `INT32`**Provider name**: `FromPort`**Description**: The start of the port range.
  - `to_port`**Type**: `INT32`**Provider name**: `ToPort`**Description**: The end of the port range.
- `protocol`**Type**: `STRING`**Provider name**: `Protocol`**Description**: The protocol.
- `subnet_ids`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `SubnetIds`**Description**: The IDs of the subnets.

## `creation_time`{% #creation_time %}

**Type**: `STRING`**Provider name**: `CreationTime`**Description**: The creation time.

## `deletion_time`{% #deletion_time %}

**Type**: `STRING`**Provider name**: `DeletionTime`**Description**: The deletion time.

## `description`{% #description %}

**Type**: `STRING`**Provider name**: `Description`**Description**: A description for the Amazon Web Services Verified Access endpoint.

## `device_validation_domain`{% #device_validation_domain %}

**Type**: `STRING`**Provider name**: `DeviceValidationDomain`**Description**: Returned if endpoint has a device trust provider attached.

## `domain_certificate_arn`{% #domain_certificate_arn %}

**Type**: `STRING`**Provider name**: `DomainCertificateArn`**Description**: The ARN of a public TLS/SSL certificate imported into or created with ACM.

## `endpoint_domain`{% #endpoint_domain %}

**Type**: `STRING`**Provider name**: `EndpointDomain`**Description**: A DNS name that is generated for the endpoint.

## `endpoint_type`{% #endpoint_type %}

**Type**: `STRING`**Provider name**: `EndpointType`**Description**: The type of Amazon Web Services Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified.

## `last_updated_time`{% #last_updated_time %}

**Type**: `STRING`**Provider name**: `LastUpdatedTime`**Description**: The last updated time.

## `load_balancer_options`{% #load_balancer_options %}

**Type**: `STRUCT`**Provider name**: `LoadBalancerOptions`**Description**: The load balancer details if creating the Amazon Web Services Verified Access endpoint as `load-balancer`type.

- `load_balancer_arn`**Type**: `STRING`**Provider name**: `LoadBalancerArn`**Description**: The ARN of the load balancer.
- `port`**Type**: `INT32`**Provider name**: `Port`**Description**: The IP port number.
- `port_ranges`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `PortRanges`**Description**: The port ranges.
  - `from_port`**Type**: `INT32`**Provider name**: `FromPort`**Description**: The start of the port range.
  - `to_port`**Type**: `INT32`**Provider name**: `ToPort`**Description**: The end of the port range.
- `protocol`**Type**: `STRING`**Provider name**: `Protocol`**Description**: The IP protocol.
- `subnet_ids`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `SubnetIds`**Description**: The IDs of the subnets.

## `network_interface_options`{% #network_interface_options %}

**Type**: `STRUCT`**Provider name**: `NetworkInterfaceOptions`**Description**: The options for network-interface type endpoint.

- `network_interface_id`**Type**: `STRING`**Provider name**: `NetworkInterfaceId`**Description**: The ID of the network interface.
- `port`**Type**: `INT32`**Provider name**: `Port`**Description**: The IP port number.
- `port_ranges`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `PortRanges`**Description**: The port ranges.
  - `from_port`**Type**: `INT32`**Provider name**: `FromPort`**Description**: The start of the port range.
  - `to_port`**Type**: `INT32`**Provider name**: `ToPort`**Description**: The end of the port range.
- `protocol`**Type**: `STRING`**Provider name**: `Protocol`**Description**: The IP protocol.

## `policy_document`{% #policy_document %}

**Type**: `STRING`**Provider name**: `PolicyDocument`**Description**: The Verified Access policy document.

## `policy_enabled`{% #policy_enabled %}

**Type**: `BOOLEAN`**Provider name**: `PolicyEnabled`**Description**: The status of the Verified Access policy.

## `rds_options`{% #rds_options %}

**Type**: `STRUCT`**Provider name**: `RdsOptions`**Description**: The options for an RDS endpoint.

- `port`**Type**: `INT32`**Provider name**: `Port`**Description**: The port.
- `protocol`**Type**: `STRING`**Provider name**: `Protocol`**Description**: The protocol.
- `rds_db_cluster_arn`**Type**: `STRING`**Provider name**: `RdsDbClusterArn`**Description**: The ARN of the DB cluster.
- `rds_db_instance_arn`**Type**: `STRING`**Provider name**: `RdsDbInstanceArn`**Description**: The ARN of the RDS instance.
- `rds_db_proxy_arn`**Type**: `STRING`**Provider name**: `RdsDbProxyArn`**Description**: The ARN of the RDS proxy.
- `rds_endpoint`**Type**: `STRING`**Provider name**: `RdsEndpoint`**Description**: The RDS endpoint.
- `subnet_ids`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `SubnetIds`**Description**: The IDs of the subnets.

## `security_group_ids`{% #security_group_ids %}

**Type**: `UNORDERED_LIST_STRING`**Provider name**: `SecurityGroupIds`**Description**: The IDs of the security groups for the endpoint.

## `sse_specification`{% #sse_specification %}

**Type**: `STRUCT`**Provider name**: `SseSpecification`**Description**: The options in use for server side encryption.

- `customer_managed_key_enabled`**Type**: `BOOLEAN`**Provider name**: `CustomerManagedKeyEnabled`**Description**: Indicates whether customer managed KMS keys are in use for server side encryption. Valid values: `True` | `False`
- `kms_key_arn`**Type**: `STRING`**Provider name**: `KmsKeyArn`**Description**: The ARN of the KMS key.

## `status`{% #status %}

**Type**: `STRUCT`**Provider name**: `Status`**Description**: The endpoint status.

- `code`**Type**: `STRING`**Provider name**: `Code`**Description**: The status code of the Verified Access endpoint.
- `message`**Type**: `STRING`**Provider name**: `Message`**Description**: The status message of the Verified Access endpoint.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `verified_access_endpoint_id`{% #verified_access_endpoint_id %}

**Type**: `STRING`**Provider name**: `VerifiedAccessEndpointId`**Description**: The ID of the Verified Access endpoint.

## `verified_access_endpoint_target_dns`{% #verified_access_endpoint_target_dns %}

**Type**: `STRING`**Provider name**: `VerifiedAccessEndpointTargetDns`**Description**: The DNS name of the target.

## `verified_access_endpoint_target_ip_address`{% #verified_access_endpoint_target_ip_address %}

**Type**: `STRING`**Provider name**: `VerifiedAccessEndpointTargetIpAddress`**Description**: The IP address of the target.

## `verified_access_group_id`{% #verified_access_group_id %}

**Type**: `STRING`**Provider name**: `VerifiedAccessGroupId`**Description**: The ID of the Amazon Web Services Verified Access group.

## `verified_access_instance_id`{% #verified_access_instance_id %}

**Type**: `STRING`**Provider name**: `VerifiedAccessInstanceId`**Description**: The ID of the Amazon Web Services Verified Access instance.