BigQuery Dataset & Tables
Datasets with partitioned/clustered tables, authorized views, CMEK and dataset-level access controls.
Verification
Live-testedReally deployed to a cloud sandbox, verified against its outputs and assertions, then destroyed - with the teardown confirmed.
Conformance
- Static validation (fmt · validate · tflint)
- Security scan clean (Checkov)
- Plan tests (mocked: validation rules · outputs)
Provenance
- SHA-256 checksum
- Cosign signature
Functional
- Live-tested - applied, verified, destroyed
Last verified 2026-06-30 · how we verify
Verify this download
cosign · sha-256Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.
# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub
# 2. This module's Sigstore bundle
curl -o gcp-bigquery-dataset-1.0.0.sigstore.json \
https://www.iac-bazaar.com/api/artifacts/gcp-bigquery-dataset/signature
# 3. Verify the tarball you downloaded
cosign verify-blob \
--key cosign.pub \
--bundle gcp-bigquery-dataset-1.0.0.sigstore.json \
gcp-bigquery-dataset-1.0.0.tar.gz
# → Verified OK
# 4. (optional) confirm the checksum too
echo "ab891b8c8ee005d3b1fb9b99b4be882b67e709b6b11afc5e44da8eb6f61da2e4 gcp-bigquery-dataset-1.0.0.tar.gz" | sha256sum -cUse it from the registry
terraform · opentofumodule "bigquery_dataset" {
source = "www.iac-bazaar.com/iac-bazaar/gcp-bigquery-dataset/gcp"
version = "1.0.0"
}Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.
Inputs & outputs
Create a free account to read this module's contract
The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.
A free account sees the contract of every Free module. This one is Premium, so its contract unlocks when you buy it.
Documentation
gcp-bigquery-dataset
BigQuery dataset and tables done right: partitioned/clustered tables from
typed maps, standard-SQL views, authorized views, dataset-level CMEK and
additive least-privilege access controls. Works with Terraform and
OpenTofu (>= 1.6), Google provider >= 7.0, < 8.0.
Secure defaults:
deletion_protection = trueon every tabledelete_contents_on_destroy = falseon the dataset- Optional CMEK set once at the dataset level and inherited by all tables
- IAM via additive
google_bigquery_dataset_iam_membergrants — no authoritative policy stomping - Authorized views grant other datasets' views read access without exposing the dataset to their consumers
Requirements
- Terraform or OpenTofu
>= 1.6 hashicorp/google>= 7.0, < 8.0- API:
bigquery.googleapis.com
License
Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).
Usage code & full reference unlock after purchase
The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.
- Usage
- Inputs
- Outputs
- Notes
Related modules
AlloyDB for PostgreSQL Cluster
AlloyDB cluster with primary + read-pool instances, PSC connectivity, automated backups and columnar/vector engine flags.
Cloud Bigtable Instance & Table
A single-cluster Cloud Bigtable instance (one 1-node SSD cluster, the smallest footprint) plus a table with column families, IAM-only access, optional CMEK, and deletion protection on.
Cloud SQL (PostgreSQL/MySQL) HA Instance
Regional-HA Cloud SQL with private IP (PSA/PSC), automated backups, PITR, read replicas and IAM database auth.
Cloud Spanner Instance & Database
A regional Cloud Spanner instance at the smallest billable size (100 processing units) plus a database with optional starter schema, drop protection, and Terraform deletion protection on.
Memorystore Redis/Valkey
Private Memorystore instance or cluster (Redis or Valkey) with auth, TLS and maintenance policy on your VPC.