Credential List Schema

Properties

@odata.nextLink

• string (Optional): URL if the page length and number of items match.

supplemental

• object (Required): ListResponseSupplementalSchema
  • count (integer Required): Number of items returned
  • kind (string Required): Type of items in the list
  • operation (string Required): Operation type. Should always say 'list'
  • pagination (object Required): PaginationInfoSchema
    • end (integer Required): Position of the last item in the list
    • records (integer Required): Total number of items returned in the list
    • start (integer Required): Position of the first item in the list
    • total (integer Required): Total number of items in the project

subscription

• object (Optional): ProjectInfoSchema
  • id (string Required): Project ID
  • name (string Required): Project name

value

• list of objects (Required): CredentialSchemaGet

metadata

• object (Required): SasTokenMetadataSchema
  • created (string Optional, format: date-time): The time when the resource was created
  • createdBy (string Optional, format: uuid): ID of the user who created the resource
  • createdByEmail (string Optional): Email of the user who created the resource
  • id (string Required, format: uuid): The ID of the resource
  • updated (string Optional, format: date-time): The time when the resource was last updated
  • updatedBy (string Optional, format: uuid): ID of the user who last updated the resource
  • updatedByEmail (string Optional): Email of the user who last updated the resource

spec

• object (Required): The specification of the credential.
  • Discriminated by type. Select one variant:
    • Microsoft.Storage
      • object AzureCredentialSpecRead
      • credential object AzureCredentialRead
        • sasToken (string Required, pattern: ^?([a-z]+=[^&]+)(&[a-z]+=[^&]+)+$): SAS Token for Azure Storage Account, including leading ?
        • signedExpiry (string Required, format: date-time): The expiry time of the token.
        • signedStart (string or null Required, format: date-time): The start time of the token.
        • type (enum or null Required): The type of the credential. Allowed values: Microsoft.Storage, AWS.S3, Google.Storage
    • AWS.S3
      • object AWSCredentialSpec
      • credential object AWSCredential
        • accessKeyId (string Required, pattern: ^A[KS]IA[0-9A-Z]{16}$): The access key ID for the bucket.
        • secretAccessKey (string Required, pattern: ^[A-Za-z0-9+/=]{40}$): The secret access key for the bucket.
        • type (enum or null Required): The type of the credential. Allowed values: Microsoft.Storage, AWS.S3, Google.Storage
    • Google.Storage
      • object GoogleCredentialSpec
      • credential object GoogleCredential
        • gac (map from strings to string Required): Google Application Credentials in JSON format.

Generation

• You can generate this from the command line with gcloud iam service-accounts keys create key.json --iam-account=<service_account>@<project>.iam.gserviceaccount.com
• Or download it from the GCP console.

Type

• enum or null Required: The type of the credential. Allowed values: Microsoft.Storage, AWS.S3, Google.Storage.