NosqlTables Object
Relationships
graph LR
NosqlTables -->|"account"| Accounts
NosqlTables -->|"encryption_key"| ManagedKeys
NosqlTables -->|"replicas"| NosqlTables
Properties
Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
How many days of continuous backups are kept, i.e. how far back point-in-time recovery reaches. 0 when point-in-time recovery is off. On-demand backups are kept until deleted and are not counted here.
When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
Whether the table is protected against deletion.
Whether table data is encrypted at rest. On AWS this is always true: DynamoDB encrypts every table and it cannot be turned off, so the question that matters is encryption_key_type.
The key protecting the table at rest, where it is a key in the customer's own key management service. Null for a provider-owned key, which has no managed_keys row.
The target's id.
Who manages the key protecting the table at rest. provider_owned: a multi-tenant key the service holds outside the customer's key management service (the DynamoDB default). provider_managed: a provider-created key inside the customer's account (aws/dynamodb). customer_managed: a key the customer creates and controls. unknown when the key is in the customer's key service but its owner could not be read - see unreadable_fields.
provider_managedprovider_ownedcustomer_managednoneunknown
The most recent point the table could be restored to.
The table's name, as the provider shows it.
The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
Whether point-in-time restore is enabled for the table.
Which cloud this object was read from.
awsazuregcp
The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
Raw data returned from the remote API call.
Regions, other than this table's own, holding replicas of this table. An empty array means the table is not replicated.
The replica tables themselves, one per region in replica_locations.
The target's id.
The provider's own table state string, verbatim.
Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
Explanation of the reason, where one adds anything.
The property on this resource that could not be read.
Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
not_supported_by_providernot_configuredpermission_deniednot_collectedcollection_errorpartially_collectedavailable_on_get
When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.