---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_ec2_verified_access_trust_provider{% #aws_ec2_verified_access_trust_provider %}

## `account_id`{% #account_id %}

**Type**: `STRING`

## `creation_time`{% #creation_time %}

**Type**: `STRING`**Provider name**: `CreationTime`**Description**: The creation time.

## `description`{% #description %}

**Type**: `STRING`**Provider name**: `Description`**Description**: A description for the Amazon Web Services Verified Access trust provider.

## `device_options`{% #device_options %}

**Type**: `STRUCT`**Provider name**: `DeviceOptions`**Description**: The options for device-identity trust provider.

- `public_signing_key_url`**Type**: `STRING`**Provider name**: `PublicSigningKeyUrl`**Description**: The URL Amazon Web Services Verified Access will use to verify the authenticity of the device tokens.
- `tenant_id`**Type**: `STRING`**Provider name**: `TenantId`**Description**: The ID of the tenant application with the device-identity provider.

## `device_trust_provider_type`{% #device_trust_provider_type %}

**Type**: `STRING`**Provider name**: `DeviceTrustProviderType`**Description**: The type of device-based trust provider.

## `last_updated_time`{% #last_updated_time %}

**Type**: `STRING`**Provider name**: `LastUpdatedTime`**Description**: The last updated time.

## `native_application_oidc_options`{% #native_application_oidc_options %}

**Type**: `STRUCT`**Provider name**: `NativeApplicationOidcOptions`**Description**: The OpenID Connect (OIDC) options.

- `authorization_endpoint`**Type**: `STRING`**Provider name**: `AuthorizationEndpoint`**Description**: The authorization endpoint of the IdP.
- `client_id`**Type**: `STRING`**Provider name**: `ClientId`**Description**: The OAuth 2.0 client identifier.
- `issuer`**Type**: `STRING`**Provider name**: `Issuer`**Description**: The OIDC issuer identifier of the IdP.
- `public_signing_key_endpoint`**Type**: `STRING`**Provider name**: `PublicSigningKeyEndpoint`**Description**: The public signing key endpoint.
- `scope`**Type**: `STRING`**Provider name**: `Scope`**Description**: The set of user claims to be requested from the IdP.
- `token_endpoint`**Type**: `STRING`**Provider name**: `TokenEndpoint`**Description**: The token endpoint of the IdP.
- `user_info_endpoint`**Type**: `STRING`**Provider name**: `UserInfoEndpoint`**Description**: The user info endpoint of the IdP.

## `oidc_options`{% #oidc_options %}

**Type**: `STRUCT`**Provider name**: `OidcOptions`**Description**: The options for an OpenID Connect-compatible user-identity trust provider.

- `authorization_endpoint`**Type**: `STRING`**Provider name**: `AuthorizationEndpoint`**Description**: The OIDC authorization endpoint.
- `client_id`**Type**: `STRING`**Provider name**: `ClientId`**Description**: The client identifier.
- `client_secret`**Type**: `STRING`**Provider name**: `ClientSecret`**Description**: The client secret.
- `issuer`**Type**: `STRING`**Provider name**: `Issuer`**Description**: The OIDC issuer.
- `scope`**Type**: `STRING`**Provider name**: `Scope`**Description**: The OpenID Connect (OIDC) scope specified.
- `token_endpoint`**Type**: `STRING`**Provider name**: `TokenEndpoint`**Description**: The OIDC token endpoint.
- `user_info_endpoint`**Type**: `STRING`**Provider name**: `UserInfoEndpoint`**Description**: The OIDC user info endpoint.

## `policy_reference_name`{% #policy_reference_name %}

**Type**: `STRING`**Provider name**: `PolicyReferenceName`**Description**: The identifier to be used when working with policy rules.

## `sse_specification`{% #sse_specification %}

**Type**: `STRUCT`**Provider name**: `SseSpecification`**Description**: The options in use for server side encryption.

- `customer_managed_key_enabled`**Type**: `BOOLEAN`**Provider name**: `CustomerManagedKeyEnabled`**Description**: Indicates whether customer managed KMS keys are in use for server side encryption. Valid values: `True` | `False`
- `kms_key_arn`**Type**: `STRING`**Provider name**: `KmsKeyArn`**Description**: The ARN of the KMS key.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `trust_provider_type`{% #trust_provider_type %}

**Type**: `STRING`**Provider name**: `TrustProviderType`**Description**: The type of Verified Access trust provider.

## `user_trust_provider_type`{% #user_trust_provider_type %}

**Type**: `STRING`**Provider name**: `UserTrustProviderType`**Description**: The type of user-based trust provider.

## `verified_access_trust_provider_id`{% #verified_access_trust_provider_id %}

**Type**: `STRING`**Provider name**: `VerifiedAccessTrustProviderId`**Description**: The ID of the Amazon Web Services Verified Access trust provider.