fix: update spanner terraform doc (#12564) (#20693)

[upstream:ee0266255be4fd1cf6032a52cc1aba003cea8f36] Signed-off-by: Modular Magician <[email protected]>
hashicorp · Dec 13, 2024 · 70d9c1d · 70d9c1d
1 parent e52bdd4
commit 70d9c1d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/.changelog/12564.txt b/.changelog/12564.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+spanner: updated document for IAM policy for Spanner Databases on federated identities
+```
diff --git a/website/docs/r/spanner_instance_iam.html.markdown b/website/docs/r/spanner_instance_iam.html.markdown
@@ -73,6 +73,8 @@ The following arguments are supported:
   * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
   * **user:{emailid}**: An email address that represents a specific Google account. For example, [email protected] or [email protected].
   * **serviceAccount:{emailid}**: An email address that represents a service account. For example, [email protected].
+  * **principal:{principal}**: Federated single identity. For example, principal://iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/PROJECT_ID.svc.id.goog/subject/ns/NAMESPACE/sa/SERVICEACCOUNT
+  * **principalSet:{principalSet}**: Federated identity group. For example, principalSet://iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/PROJECT_ID.svc.id.goog/namespace/NAMESPACE
   * **group:{emailid}**: An email address that represents a Google group. For example, [email protected].
   * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.