DataWarehouses Object
Relationships
graph LR
DataWarehouses -->|"account"| Accounts
DataWarehouses -->|"encryption_key"| ManagedKeys
Properties
Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
How many days the provider keeps automatic (scheduled) snapshots or backups. 0 means automatic snapshots are turned off. On AWS Redshift this is AutomatedSnapshotRetentionPeriod.
When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
Whether the data warehouse's stored data is encrypted at rest.
The key that protects the data warehouse at rest. Null when it is not encrypted, or when the provider names no key object the customer can see (for example an AWS owned key).
The target's id.
Who manages the key that encrypts the data warehouse at rest. provider_owned: a key the provider holds outside the customer's account, with no key object the customer can see. provider_managed: the provider's default key that lives inside the customer's key service but that the customer cannot manage (for example an AWS managed aws/ key). customer_managed: a key the customer creates and controls in the key service. none: not encrypted at rest. unknown: encrypted, but who manages the key was not resolved - unreadable_fields says why. On AWS, DescribeClusters names a KMS key ARN without saying whether it is the AWS managed aws/redshift key or a customer managed key (join encryption_key.id to managed_keys (managed_by) to resolve it), and names no key at all for the AWS owned default key.
provider_managedprovider_ownedcustomer_managednoneunknown
How many days a manual snapshot is kept by default before the provider deletes it. -1 means manual snapshots are kept until someone deletes them (the AWS default). This is the default for new manual snapshots only; snapshots already taken keep their own retention. On AWS Redshift this is ManualSnapshotRetentionPeriod.
The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
Which cloud this object was read from.
awsazuregcp
The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
The provider's public-network-access flag, not proven reachability: true doesn't mean reachable, and false doesn't mean safe — actual exposure also depends on routing.
Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
Raw data returned from the remote API call.
The provider's own status string for the data warehouse, verbatim (on AWS Redshift, for example available, paused, modifying or resizing).
Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
Explanation of the reason, where one adds anything.
The property on this resource that could not be read.
Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
not_supported_by_providernot_configuredpermission_deniednot_collectedcollection_errorpartially_collectedavailable_on_get
When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
The provider's own identifier for the data warehouse, verbatim (a Redshift cluster identifier, an Azure Synapse dedicated SQL pool name, a BigQuery dataset id).