---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# gcp_managedidentities_domain{% #gcp_managedidentities_domain %}

## `admin`{% #admin %}

**Type**: `STRING`**Provider name**: `admin`**Description**: Optional. The name of delegated administrator account used to perform Active Directory operations. If not specified, `setupadmin` will be used.

## `ancestors`{% #ancestors %}

**Type**: `UNORDERED_LIST_STRING`

## `audit_logs_enabled`{% #audit_logs_enabled %}

**Type**: `BOOLEAN`**Provider name**: `auditLogsEnabled`**Description**: Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.

## `authorized_networks`{% #authorized_networks %}

**Type**: `UNORDERED_LIST_STRING`**Provider name**: `authorizedNetworks`**Description**: Optional. The full names of the Google Compute Engine [networks](https://docs.datadoghq.com/compute/docs/networks-and-firewalls#networks) the domain instance is connected to. Networks can be added using UpdateDomain. The domain is only available on networks listed in `authorized_networks`. If CIDR subnets overlap between networks, domain creation will fail.

## `create_time`{% #create_time %}

**Type**: `TIMESTAMP`**Provider name**: `createTime`**Description**: Output only. The time the instance was created.

## `fqdn`{% #fqdn %}

**Type**: `STRING`**Provider name**: `fqdn`**Description**: Output only. The fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory set up on an internal network.

## `labels`{% #labels %}

**Type**: `UNORDERED_LIST_STRING`

## `locations`{% #locations %}

**Type**: `UNORDERED_LIST_STRING`**Provider name**: `locations`**Description**: Required. Locations where domain needs to be provisioned. The locations can be specified according to [https://cloud.google.com/compute/docs/regions-zones](https://cloud.google.com/compute/docs/regions-zones), such as `us-west1` or `us-east4`. Each domain supports up to 4 locations, separated by commas. Each location will use a /26 block.

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `name`**Description**: Required. The unique name of the domain using the form: `projects/{project_id}/locations/global/domains/{domain_name}`.

## `organization_id`{% #organization_id %}

**Type**: `STRING`

## `parent`{% #parent %}

**Type**: `STRING`

## `project_id`{% #project_id %}

**Type**: `STRING`

## `project_number`{% #project_number %}

**Type**: `STRING`

## `region_id`{% #region_id %}

**Type**: `STRING`

## `reserved_ip_range`{% #reserved_ip_range %}

**Type**: `STRING`**Provider name**: `reservedIpRange`**Description**: Required. The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].

## `resource_name`{% #resource_name %}

**Type**: `STRING`

## `state`{% #state %}

**Type**: `STRING`**Provider name**: `state`**Description**: Output only. The current state of this domain.**Possible values**:

- `STATE_UNSPECIFIED` - Not set.
- `CREATING` - The domain is being created.
- `READY` - The domain has been created and is fully usable.
- `UPDATING` - The domain's configuration is being updated.
- `DELETING` - The domain is being deleted.
- `REPAIRING` - The domain is being repaired and may be unusable. Details can be found in the `status_message` field.
- `PERFORMING_MAINTENANCE` - The domain is undergoing maintenance.
- `UNAVAILABLE` - The domain is not serving requests.

## `status_message`{% #status_message %}

**Type**: `STRING`**Provider name**: `statusMessage`**Description**: Output only. Additional information about the current status of this domain, if available.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `trusts`{% #trusts %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `trusts`**Description**: Output only. The current trusts associated with the domain.

- `create_time`**Type**: `TIMESTAMP`**Provider name**: `createTime`**Description**: Output only. The time the instance was created.
- `last_trust_heartbeat_time`**Type**: `TIMESTAMP`**Provider name**: `lastTrustHeartbeatTime`**Description**: Output only. The last heartbeat time when the trust was known to be connected.
- `selective_authentication`**Type**: `BOOLEAN`**Provider name**: `selectiveAuthentication`**Description**: Optional. The trust authentication type, which decides whether the trusted side has forest/domain wide access or selective access to an approved set of resources.
- `state`**Type**: `STRING`**Provider name**: `state`**Description**: Output only. The current state of the trust.**Possible values**:
  - `STATE_UNSPECIFIED` - Not set.
  - `CREATING` - The domain trust is being created.
  - `UPDATING` - The domain trust is being updated.
  - `DELETING` - The domain trust is being deleted.
  - `CONNECTED` - The domain trust is connected.
  - `DISCONNECTED` - The domain trust is disconnected.
- `state_description`**Type**: `STRING`**Provider name**: `stateDescription`**Description**: Output only. Additional information about the current state of the trust, if available.
- `target_dns_ip_addresses`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `targetDnsIpAddresses`**Description**: Required. The target DNS server IP addresses which can resolve the remote domain involved in the trust.
- `target_domain_name`**Type**: `STRING`**Provider name**: `targetDomainName`**Description**: Required. The fully qualified target domain name which will be in trust with the current domain.
- `trust_direction`**Type**: `STRING`**Provider name**: `trustDirection`**Description**: Required. The trust direction, which decides if the current domain is trusted, trusting, or both.**Possible values**:
  - `TRUST_DIRECTION_UNSPECIFIED` - Not set.
  - `INBOUND` - The inbound direction represents the trusting side.
  - `OUTBOUND` - The outboud direction represents the trusted side.
  - `BIDIRECTIONAL` - The bidirectional direction represents the trusted / trusting side.
- `trust_handshake_secret`**Type**: `STRING`**Provider name**: `trustHandshakeSecret`**Description**: Required. The trust secret used for the handshake with the target domain. This will not be stored.
- `trust_type`**Type**: `STRING`**Provider name**: `trustType`**Description**: Required. The type of trust represented by the trust resource.**Possible values**:
  - `TRUST_TYPE_UNSPECIFIED` - Not set.
  - `FOREST` - The forest trust.
  - `EXTERNAL` - The external domain trust.
- `update_time`**Type**: `TIMESTAMP`**Provider name**: `updateTime`**Description**: Output only. The last update time.

## `update_time`{% #update_time %}

**Type**: `TIMESTAMP`**Provider name**: `updateTime`**Description**: Output only. The last update time.

## `zone_id`{% #zone_id %}

**Type**: `STRING`