Skip to main content

shielded_instance_identity

Creates, updates, deletes, gets or lists a shielded_instance_identity resource.

Overview​

Nameshielded_instance_identity
TypeResource
Idgoogle.compute.shielded_instance_identity

Fields​

The following fields are returned by SELECT queries:

NameDatatypeDescription
eccP256EncryptionKeyobjectAn Endorsement Key (EK) made by the ECC P256 algorithm issued to the Shielded Instance's vTPM. (id: ShieldedInstanceIdentityEntry)
eccP256SigningKeyobjectAn Attestation Key (AK) made by the ECC P256 algorithm issued to the Shielded Instance's vTPM. (id: ShieldedInstanceIdentityEntry)
encryptionKeyobjectAn Endorsement Key (EK) made by the RSA 2048 algorithm issued to the Shielded Instance's vTPM. (id: ShieldedInstanceIdentityEntry)
kindstringOutput only. [Output Only] Type of the resource. Alwayscompute#shieldedInstanceIdentity for shielded Instance identity entry. (default: compute#shieldedInstanceIdentity)
signingKeyobjectAn Attestation Key (AK) made by the RSA 2048 algorithm issued to the Shielded Instance's vTPM. (id: ShieldedInstanceIdentityEntry)

Methods​

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
get_shielded_instance_identityselectproject, zone, instanceReturns the Shielded Instance Identity of an instance

Parameters​

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
instancestring
projectstring
zonestring

SELECT examples​

Returns the Shielded Instance Identity of an instance

SELECT
eccP256EncryptionKey,
eccP256SigningKey,
encryptionKey,
kind,
signingKey
FROM google.compute.shielded_instance_identity
WHERE project = '{{ project }}' -- required
AND zone = '{{ zone }}' -- required
AND instance = '{{ instance }}' -- required
;