NotificationTopics Object
Relationships
graph LR
NotificationTopics -->|"account"| Accounts
NotificationTopics -->|"encryption_key"| ManagedKeys
Properties
Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
The sender name shown on email notifications. Null when none is set.
Whether messages are encrypted at rest with a key the customer can see.
The key that encrypts the topic. Null when not encrypted, or when the provider names only an alias or bare key id - see unreadable_fields.
The target's id.
Who manages the key that encrypts the topic. provider_managed: the provider's default key inside the customer's key service (on AWS the AWS managed alias/aws/sns key). customer_managed: a key the customer creates and controls. none: not encrypted at rest. unknown: encrypted, but the provider named a bare key id or key ARN, which does not say who manages it; join encryption_key.id to managed_keys (managed_by) to resolve it. Null when the topic attributes were not read. The provider's own value is in remote_data.
provider_managedprovider_ownedcustomer_managedcustomer_suppliednoneunknown
Whether at least one subscription is confirmed. False means a message published to the topic reaches no one.
Whether the topic is a FIFO (ordered, exactly-once) topic.
The topic's name, verbatim.
The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
Which cloud this object was read from.
awsazuregcp
The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
Raw data returned from the remote API call.
Confirmed subscriptions: endpoints that will receive messages.
Subscriptions waiting for the endpoint to confirm. They receive nothing until then.
Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
Explanation of the reason, where one adds anything.
The property on this resource that could not be read.
Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
not_supported_by_providernot_configuredpermission_deniednot_collectedcollection_errorpartially_collectedavailable_on_get
When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.