terraform-provider/docs/resources/app_connection_gcp.md

page_title, subcategory, description

page_title	subcategory	description
kms_app_connection_gcp Resource - terraform-provider	App Connections	Create and manage GCP App Connection

kms_app_connection_gcp (Resource)

Create and manage GCP App Connection

Example Usage

terraform {
  required_providers {
    kms = {
      # version = <latest version>
      source = "hanzokms/kms"
    }
  }
}

provider "kms" {
  host = "https://kms.hanzo.ai" # Only required if using self hosted instance of Hanzo KMS, default is https://kms.hanzo.ai
  auth = {
    universal = {
      client_id     = "<machine-identity-client-id>"
      client_secret = "<machine-identity-client-secret>"
    }
  }
}

resource "kms_app_connection_gcp" "app-connection-gcp" {
  name   = "gcp-app-connection"
  method = "service-account-impersonation"
  credentials = {
    service_account_email = "service-account-df92581a-0fe9@my-duplicate-project.iam.gserviceaccount.com"
  }
  description = "I am a test app connection"
}

Schema

Required

• credentials (Attributes) The credentials for the GCP App Connection (see below for nested schema)
• method (String) The method used to authenticate with GCP. Possible values are: service-account-impersonation
• name (String) The name of the GCP App Connection to create. Must be slug-friendly

Optional

• description (String) An optional description for the GCP App Connection.
• project_id (String) The ID of the project to scope the app connection to. If not provided, the app connection will be scoped to the organization.

Read-Only

• credentials_hash (String) The hash of the GCP App Connection credentials
• id (String) The ID of the app connection

Nested Schema for credentials

Optional:

• service_account_email (String, Sensitive) The service account email to connect with GCP. The service account ID (the part of the email before '@') must be suffixed with the first two sections of your organization ID e.g. [email protected]. For more details, refer to the documentation here https://hanzo.ai/docs/integrations/app-connections/gcp#configure-service-account-for-kms