---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_ec2_verified_access_trust_provider{% #aws_ec2_verified_access_trust_provider %}

## `account_id`{% #account_id %}

**Type**: `STRING` 

## `creation_time`{% #creation_time %}

**Type**: `STRING` **Provider name**: `CreationTime` **Description**: The creation time. 

## `description`{% #description %}

**Type**: `STRING` **Provider name**: `Description` **Description**: A description for the Amazon Web Services Verified Access trust provider. 

## `device_options`{% #device_options %}

**Type**: `STRUCT` **Provider name**: `DeviceOptions` **Description**: The options for device-identity trust provider. 

- `public_signing_key_url`**Type**: `STRING`**Provider name**: `PublicSigningKeyUrl`**Description**: The URL Amazon Web Services Verified Access will use to verify the authenticity of the device tokens.
- `tenant_id`**Type**: `STRING`**Provider name**: `TenantId`**Description**: The ID of the tenant application with the device-identity provider.

## `device_trust_provider_type`{% #device_trust_provider_type %}

**Type**: `STRING` **Provider name**: `DeviceTrustProviderType` **Description**: The type of device-based trust provider. 

## `last_updated_time`{% #last_updated_time %}

**Type**: `STRING` **Provider name**: `LastUpdatedTime` **Description**: The last updated time. 

## `native_application_oidc_options`{% #native_application_oidc_options %}

**Type**: `STRUCT` **Provider name**: `NativeApplicationOidcOptions` **Description**: The OpenID Connect (OIDC) options. 

- `authorization_endpoint`**Type**: `STRING`**Provider name**: `AuthorizationEndpoint`**Description**: The authorization endpoint of the IdP.
- `client_id`**Type**: `STRING`**Provider name**: `ClientId`**Description**: The OAuth 2.0 client identifier.
- `issuer`**Type**: `STRING`**Provider name**: `Issuer`**Description**: The OIDC issuer identifier of the IdP.
- `public_signing_key_endpoint`**Type**: `STRING`**Provider name**: `PublicSigningKeyEndpoint`**Description**: The public signing key endpoint.
- `scope`**Type**: `STRING`**Provider name**: `Scope`**Description**: The set of user claims to be requested from the IdP.
- `token_endpoint`**Type**: `STRING`**Provider name**: `TokenEndpoint`**Description**: The token endpoint of the IdP.
- `user_info_endpoint`**Type**: `STRING`**Provider name**: `UserInfoEndpoint`**Description**: The user info endpoint of the IdP.

## `oidc_options`{% #oidc_options %}

**Type**: `STRUCT` **Provider name**: `OidcOptions` **Description**: The options for an OpenID Connect-compatible user-identity trust provider. 

- `authorization_endpoint`**Type**: `STRING`**Provider name**: `AuthorizationEndpoint`**Description**: The OIDC authorization endpoint.
- `client_id`**Type**: `STRING`**Provider name**: `ClientId`**Description**: The client identifier.
- `client_secret`**Type**: `STRING`**Provider name**: `ClientSecret`**Description**: The client secret.
- `issuer`**Type**: `STRING`**Provider name**: `Issuer`**Description**: The OIDC issuer.
- `scope`**Type**: `STRING`**Provider name**: `Scope`**Description**: The OpenID Connect (OIDC) scope specified.
- `token_endpoint`**Type**: `STRING`**Provider name**: `TokenEndpoint`**Description**: The OIDC token endpoint.
- `user_info_endpoint`**Type**: `STRING`**Provider name**: `UserInfoEndpoint`**Description**: The OIDC user info endpoint.

## `policy_reference_name`{% #policy_reference_name %}

**Type**: `STRING` **Provider name**: `PolicyReferenceName` **Description**: The identifier to be used when working with policy rules. 

## `sse_specification`{% #sse_specification %}

**Type**: `STRUCT` **Provider name**: `SseSpecification` **Description**: The options in use for server side encryption. 

- `customer_managed_key_enabled`**Type**: `BOOLEAN`**Provider name**: `CustomerManagedKeyEnabled`**Description**: Indicates whether customer managed KMS keys are in use for server side encryption. Valid values: `True` | `False`
- `kms_key_arn`**Type**: `STRING`**Provider name**: `KmsKeyArn`**Description**: The ARN of the KMS key.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING` 

## `trust_provider_type`{% #trust_provider_type %}

**Type**: `STRING` **Provider name**: `TrustProviderType` **Description**: The type of Verified Access trust provider. 

## `user_trust_provider_type`{% #user_trust_provider_type %}

**Type**: `STRING` **Provider name**: `UserTrustProviderType` **Description**: The type of user-based trust provider. 

## `verified_access_trust_provider_id`{% #verified_access_trust_provider_id %}

**Type**: `STRING` **Provider name**: `VerifiedAccessTrustProviderId` **Description**: The ID of the Amazon Web Services Verified Access trust provider.