Enum ProviderTarget 

pub enum ProviderTarget {
    Aws {
        role_arn: String,
        region: Option<String>,
        duration_seconds: Option<i64>,
    },
    Gcp {
        workload_identity_provider: String,
        service_account: Option<String>,
        scope: String,
    },
    Azure {
        tenant_id: String,
        client_id: String,
        scope: String,
    },
}

Where a federated identity is being exchanged, and for what.

Variants

Aws

Fields

role_arn: String

region: Option<String>

duration_seconds: Option<i64>

Gcp

Fields

workload_identity_provider: String

Full resource name of the workload identity pool provider, //iam.googleapis.com/projects/…/workloadIdentityPools/…/providers/….

service_account: Option<String>

Set only when impersonating a service account after the exchange. Leaving it unset is the better pattern: granting the federated principal IAM directly keeps the original identity in audit logs.

scope: String

Azure

Fields

tenant_id: String

client_id: String

scope: String

Trait Implementations

impl Clone for ProviderTarget

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProviderTarget

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ProviderTarget

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ProviderTarget

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.