# The CredentialInfo object

## Attributes

- `name` (string)
  The credential name. The name must be unique among storage and service
   credentials within the metastore.
- `aws_iam_role` (object)
  The AWS IAM role configuration.
  - `role_arn` (string)
    The Amazon Resource Name (ARN) of the AWS IAM role used to vend temporary credentials.
  - `unity_catalog_iam_arn` (string)
    The Amazon Resource Name (ARN) of the AWS IAM user managed by <Databricks>.
     This is the identity that is going to assume the AWS IAM role.
  - `external_id` (string)
    The external ID used in role assumption to prevent the confused deputy problem.
- `azure_service_principal` (object)
  The Azure service principal configuration.
  - `directory_id` (string)
    The directory ID corresponding to the Azure Active Directory (AAD) tenant of the application.
  - `application_id` (string)
    The application ID of the application registration within the referenced AAD tenant.
  - `client_secret` (string)
    The client secret generated for the above app ID in AAD.
- `gcp_service_account_key` (object)
  - `email` (string)
    The email of the service account.
  - `private_key_id` (string)
    The ID of the service account's private key.
  - `private_key` (string)
    The service account's RSA private key.
- `azure_managed_identity` (object)
  The Azure managed identity configuration.
  - `access_connector_id` (string)
    The Azure resource ID of the Azure Databricks Access Connector. Use the format
     `/subscriptions/{guid}/resourceGroups/{rg-name}/providers/Microsoft.Databricks/accessConnectors/{connector-name}`.
  - `managed_identity_id` (string)
    The Azure resource ID of the managed identity. Use the format,
     `/subscriptions/{guid}/resourceGroups/{rg-name}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identity-name}`
     This is only available for user-assgined identities. For system-assigned identities, the access_connector_id is used to identify the identity.
     If this field is not provided, then we assume the AzureManagedIdentity is using the system-assigned identity.
  - `credential_id` (string)
    The <Databricks> internal ID that represents this managed identity.
- `databricks_gcp_service_account` (object)
  The <Databricks> managed GCP service account configuration.
  - `email` (string)
    The email of the service account.
  - `private_key_id` (string)
    The ID that represents the private key for this Service Account
  - `credential_id` (string)
    The <Databricks> internal ID that represents this managed identity.
- `comment` (string)
  Comment associated with the credential.
- `read_only` (boolean)
  Whether the credential is usable only for read operations. Only applicable
   when purpose is **STORAGE**.
- `owner` (string)
  Username of current owner of credential.
- `id` (string)
  The unique identifier of the credential.
- `metastore_id` (string)
  Unique identifier of the parent metastore.
- `created_at` (int64)
  Time at which this credential was created, in epoch milliseconds.
- `created_by` (string)
  Username of credential creator.
- `updated_at` (int64)
  Time at which this credential was last modified, in epoch milliseconds.
- `updated_by` (string)
  Username of user who last modified the credential.
- `used_for_managed_storage` (boolean)
  Whether this credential is the current metastore's root storage credential.
   Only applicable when purpose is **STORAGE**.
- `full_name` (string)
  The full name of the credential.
- `isolation_mode` (string)
  Whether the current securable is accessible from all workspaces or a
   specific set of workspaces.
  Possible values: `ISOLATION_MODE_UNSPECIFIED`, `ISOLATION_MODE_OPEN`, `ISOLATION_MODE_ISOLATED`

## Example

```json
{
  "name": "string",
  "aws_iam_role": {
    "role_arn": "string",
    "unity_catalog_iam_arn": "string",
    "external_id": "string"
  },
  "azure_service_principal": {
    "directory_id": "string",
    "application_id": "string",
    "client_secret": "string"
  },
  "gcp_service_account_key": {
    "email": "string",
    "private_key_id": "string",
    "private_key": "string"
  },
  "azure_managed_identity": {
    "access_connector_id": "string",
    "managed_identity_id": "string",
    "credential_id": "string"
  },
  "databricks_gcp_service_account": {
    "email": "string",
    "private_key_id": "string",
    "credential_id": "string"
  },
  "comment": "string",
  "read_only": true,
  "owner": "string",
  "id": "string",
  "metastore_id": "string",
  "created_at": 0,
  "created_by": "string",
  "updated_at": 0,
  "updated_by": "string",
  "used_for_managed_storage": true,
  "full_name": "string",
  "isolation_mode": "string"
}
```