analytics-hub/s3-publ-bigquery-analyticshub/bigquery_bq_private_ds.tf

# Copyright 2024 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
# 
#     https://www.apache.org/licenses/LICENSE-2.0
# 
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

resource "google_bigquery_dataset" "private_dataset" {
  dataset_id    = "ahdemo_${var.name_suffix}_private_ds"
  friendly_name = "ahdemo_${var.name_suffix}_private_ds"
  description   = "ahdemo_${var.name_suffix}_private_ds"
  location      = var.location
  project       = data.google_project.publ_bq_shared_ds.project_id

  access {
    role          = "OWNER"
    special_group = "projectOwners"
  }
  access {
    role          = "READER"
    special_group = "projectReaders"
  }
  access {
    role          = "WRITER"
    special_group = "projectWriters"
  }

  access {
    dataset {
      dataset {
        project_id = google_bigquery_dataset.shared_dataset.project
        dataset_id = google_bigquery_dataset.shared_dataset.dataset_id
      }
      target_types = ["VIEWS"]
    }
  }
  
  access {
    dataset {
      dataset {
        project_id = google_bigquery_dataset.bqah_shared_dataset.project
        dataset_id = google_bigquery_dataset.bqah_shared_dataset.dataset_id
      }
      target_types = ["VIEWS"]
    }
  }
}

resource "google_bigquery_table" "private_src_table" {
  dataset_id          = google_bigquery_dataset.private_dataset.dataset_id
  table_id            = "ahdemo_${var.name_suffix}_src_table"
  deletion_protection = false
  project             = data.google_project.publ_bq_shared_ds.project_id
  schema              = var.publ_enable_policy_tags ? templatefile("./bigquery/schema_src.json.tpl", {policy_tag_name = google_data_catalog_policy_tag.child_policy_errorcode_shared_ds.name}) : file("./bigquery/schema_src.json")

  encryption_configuration {
    kms_key_name = google_kms_crypto_key.shared_ds_crypto_key.id
  }
}