BigqueryDataTransferConfigSensitiveParams class

sensitive_params block (max=1) — credential slot for the amazon_s3 data source (and any future DTS connector that needs out-of-band secrets). The block is named "sensitive_params" because the keys it carries logically belong to the parent GoogleBigqueryDataTransferConfig.params map; placing them here instead lets the provider flag them sensitive (so they are masked in plan output) and prevents accidental disclosure via state inspection.

Credentials must NOT also be supplied in GoogleBigqueryDataTransferConfig.params — the provider rejects configurations that double-specify the same logical secret and errors at apply time.

Only the plaintext secretAccessKey is schema-flagged sensitive (round-trips through the wrapper's sensitiveFields set, synth masks it). Prefer the write-only siblings (secretAccessKeyWo + secretAccessKeyWoVersion) on Terraform 1.11+: the plaintext never enters Terraform state, and bumping the integer secretAccessKeyWoVersion slot forces a credential rotation on next apply.

Annotations
  • @immutable

Constructors

BigqueryDataTransferConfigSensitiveParams({TfArg<String>? secretAccessKey, TfArg<String>? secretAccessKeyWo, TfArg<num>? secretAccessKeyWoVersion})
const

Properties

hashCode → int
The hash code for this object.
no setterinherited
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited
secretAccessKey → TfArg<String>?
AWS secret access key for the amazon_s3 data source. Sensitive — masked from plan output and surfaced in sensitiveFields. The matching access key id (non-secret) goes in the parent GoogleBigqueryDataTransferConfig.params map under the key 'access_key_id'.
final
secretAccessKeyWo → TfArg<String>?
Write-only sibling of secretAccessKey (Terraform 1.11+). The plaintext never enters Terraform state. Bump secretAccessKeyWoVersion to rotate.
final
secretAccessKeyWoVersion → TfArg<num>?
Monotonic counter that triggers a rotation of secretAccessKeyWo. Schema-typed as a number; pass any TfArg<num> (integer values are recommended for parity with rotation tracking elsewhere in the provider).
final

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toArgMap() → Map<String, Object?>
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited