---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# gcp_securesourcemanager_instance{% #gcp_securesourcemanager_instance %}

## `ancestors`{% #ancestors %}

**Type**: `UNORDERED_LIST_STRING`

## `create_time`{% #create_time %}

**Type**: `TIMESTAMP`**Provider name**: `createTime`**Description**: Output only. Create timestamp.

## `host_config`{% #host_config %}

**Type**: `STRUCT`**Provider name**: `hostConfig`**Description**: Output only. A list of hostnames for this instance.

- `api`**Type**: `STRING`**Provider name**: `api`**Description**: Output only. API hostname.
- `git_http`**Type**: `STRING`**Provider name**: `gitHttp`**Description**: Output only. Git HTTP hostname.
- `git_ssh`**Type**: `STRING`**Provider name**: `gitSsh`**Description**: Output only. Git SSH hostname.
- `html`**Type**: `STRING`**Provider name**: `html`**Description**: Output only. HTML hostname.

## `kms_key`{% #kms_key %}

**Type**: `STRING`**Provider name**: `kmsKey`**Description**: Optional. Immutable. Customer-managed encryption key name, in the format projects/*/locations/*/keyRings/*/cryptoKeys/*.

## `labels`{% #labels %}

**Type**: `UNORDERED_LIST_STRING`

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `name`**Description**: Optional. A unique identifier for an instance. The name should be of the format: `projects/{project_number}/locations/{location_id}/instances/{instance_id}` `project_number`: Maps to a unique int64 id assigned to each project. `location_id`: Refers to the region where the instance will be deployed. Since Secure Source Manager is a regional service, it must be one of the valid GCP regions. `instance_id`: User provided name for the instance, must be unique for a project_number and location_id combination.

## `organization_id`{% #organization_id %}

**Type**: `STRING`

## `parent`{% #parent %}

**Type**: `STRING`

## `private_config`{% #private_config %}

**Type**: `STRUCT`**Provider name**: `privateConfig`**Description**: Optional. Private settings for private instance.

- `ca_pool`**Type**: `STRING`**Provider name**: `caPool`**Description**: Optional. Immutable. CA pool resource, resource must in the format of `projects/{project}/locations/{location}/caPools/{ca_pool}`.
- `http_service_attachment`**Type**: `STRING`**Provider name**: `httpServiceAttachment`**Description**: Output only. Service Attachment for HTTP, resource is in the format of `projects/{project}/regions/{region}/serviceAttachments/{service_attachment}`.
- `is_private`**Type**: `BOOLEAN`**Provider name**: `isPrivate`**Description**: Required. Immutable. Indicate if it's private instance.
- `psc_allowed_projects`**Type**: `UNORDERED_LIST_STRING`**Provider name**: `pscAllowedProjects`**Description**: Optional. Additional allowed projects for setting up PSC connections. Instance host project is automatically allowed and does not need to be included in this list.
- `ssh_service_attachment`**Type**: `STRING`**Provider name**: `sshServiceAttachment`**Description**: Output only. Service Attachment for SSH, resource is in the format of `projects/{project}/regions/{region}/serviceAttachments/{service_attachment}`.

## `project_id`{% #project_id %}

**Type**: `STRING`

## `project_number`{% #project_number %}

**Type**: `STRING`

## `region_id`{% #region_id %}

**Type**: `STRING`

## `resource_name`{% #resource_name %}

**Type**: `STRING`

## `state`{% #state %}

**Type**: `STRING`**Provider name**: `state`**Description**: Output only. Current state of the instance.**Possible values**:

- `STATE_UNSPECIFIED` - Not set. This should only be the case for incoming requests.
- `CREATING` - Instance is being created.
- `ACTIVE` - Instance is ready.
- `DELETING` - Instance is being deleted.
- `PAUSED` - Instance is paused.
- `UNKNOWN` - Instance is unknown, we are not sure if it's functioning.

## `state_note`{% #state_note %}

**Type**: `STRING`**Provider name**: `stateNote`**Description**: Output only. An optional field providing information about the current instance state.**Possible values**:

- `STATE_NOTE_UNSPECIFIED` - STATE_NOTE_UNSPECIFIED as the first value of State.
- `PAUSED_CMEK_UNAVAILABLE` - CMEK access is unavailable.
- `INSTANCE_RESUMING` - INSTANCE_RESUMING indicates that the instance was previously paused and is under the process of being brought back.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `update_time`{% #update_time %}

**Type**: `TIMESTAMP`**Provider name**: `updateTime`**Description**: Output only. Update timestamp.

## `workforce_identity_federation_config`{% #workforce_identity_federation_config %}

**Type**: `STRUCT`**Provider name**: `workforceIdentityFederationConfig`**Description**: Optional. Configuration for Workforce Identity Federation to support third party identity provider. If unset, defaults to the Google OIDC IdP.

- `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: Optional. Immutable. Whether Workforce Identity Federation is enabled.

## `zone_id`{% #zone_id %}

**Type**: `STRING`