OptionaldescriptionOptional human description carried onto both resources.
PRINTABLE ASCII ONLY. Temporal Cloud validates this server-side with
go-playground's printasciiws tag (0x20–0x7E plus whitespace), and rejects
anything else with Field validation for 'Description' failed on the 'printasciiws' tag — which names neither the character nor its offset. An
em dash, curly quote or ellipsis picked up from surrounding prose is the
usual culprit.
Namespace id the service account is scoped to — <name>.<account>, e.g.
platform-dev.qebt8. namespaceScopedAccess is immutable after creation
and mutually exclusive with account-level access, so this identity can
never be widened to another namespace without being recreated.
OptionalnameDisplay-name suffix disambiguating environments, e.g. the stack name.
Appended as <name>-<suffix> on the Temporal-side resources.
OptionalpermissionNamespace-scoped permission. Default "write" — services either start
workflows or poll and complete them; none is read-only.
Temporal Cloud provider, configured with a namespace-scoped admin key.
Expiry stamped on the API key, ISO 8601. Deliberately a value you pass in from stack config rather than compute: a
new Date()would differ on every preview, so Pulumi would plan a replacement on every run. Bumping it IS the rotation. Temporal caps key lifetime at two years.