An app's App Attest configuration object. Note that the Team ID registered with your
app is used as part of the validation process. Make sure your google_firebase_apple_app
has a team_id present.
To get more information about AppAttestConfig, see:
resource "google_firebase_apple_app" "default" {
provider = google-beta
project = "my-project-name"
display_name = "Apple app"
bundle_id = "bundle.id.appattest"
team_id = "9987654321"
}
# It takes a while for App Check to recognize the new app
# If your app already exists, you don't have to wait 30 seconds.
resource "time_sleep" "wait_30s" {
depends_on = [google_firebase_apple_app.default]
create_duration = "30s"
}
resource "google_firebase_app_check_app_attest_config" "default" {
provider = google-beta
project = "my-project-name"
app_id = google_firebase_apple_app.default.app_id
depends_on = [time_sleep.wait_30s]
lifecycle {
precondition {
condition = google_firebase_apple_app.default.team_id != ""
error_message = "Provide a Team ID on the Apple App to use App Check"
}
}
}
resource "google_firebase_apple_app" "default" {
provider = google-beta
project = "my-project-name"
display_name = "Apple app"
bundle_id = "bundle.id.appattest"
team_id = "9987654321"
}
# It takes a while for App Check to recognize the new app
# If your app already exists, you don't have to wait 30 seconds.
resource "time_sleep" "wait_30s" {
depends_on = [google_firebase_apple_app.default]
create_duration = "30s"
}
resource "google_firebase_app_check_app_attest_config" "default" {
provider = google-beta
project = "my-project-name"
app_id = google_firebase_apple_app.default.app_id
token_ttl = "7200s"
depends_on = [time_sleep.wait_30s]
lifecycle {
precondition {
condition = google_firebase_apple_app.default.team_id != ""
error_message = "Provide a Team ID on the Apple App to use App Check"
}
}
}
The following arguments are supported:
app_id
-
(Required)
The ID of an
Apple App.token_ttl
-
(Optional)
Specifies the duration for which App Check tokens exchanged from App Attest artifacts will be valid.
If unset, a default value of 1 hour is assumed. Must be between 30 minutes and 7 days, inclusive.
A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
project
- (Optional) The ID of the project in which the resource belongs.
If it is not provided, the provider project is used.
In addition to the arguments listed above, the following computed attributes are exported:
id
- an identifier for the resource with format projects/{{project}}/apps/{{app_id}}/appAttestConfig
name
-
The relative resource name of the App Attest configuration object
This resource provides the following Timeouts configuration options:
create
- Default is 20 minutes.update
- Default is 20 minutes.delete
- Default is 20 minutes.AppAttestConfig can be imported using any of these accepted formats:
projects/{{project}}/apps/{{app_id}}/appAttestConfig
{{project}}/{{app_id}}
{{app_id}}
In Terraform v1.5.0 and later, use an import
block to import AppAttestConfig using one of the formats above. For example:
import {
id = "projects/{{project}}/apps/{{app_id}}/appAttestConfig"
to = google_firebase_app_check_app_attest_config.default
}
When using the terraform import
command, AppAttestConfig can be imported using one of the formats above. For example:
$ terraform import google_firebase_app_check_app_attest_config.default projects/{{project}}/apps/{{app_id}}/appAttestConfig
$ terraform import google_firebase_app_check_app_attest_config.default {{project}}/{{app_id}}
$ terraform import google_firebase_app_check_app_attest_config.default {{app_id}}
This resource supports User Project Overrides.