Skip to main content
NEW · Blast Radius: a field playbook for leaked API keys on AWS, GCP and Azure
Documentation menu

Integrations

Google Cloud projects

Set up a Workload Identity Federation connection for a Google Cloud project.

Connect a project

Prepare the Google Cloud project ID and its numeric project number. This connection uses Workload Identity Federation instead of a service-account key file.

  1. From Cloud connections, select Connect cloud.
  2. Choose GCP.
  3. Enter Project ID.
  4. Enter Project number.
  5. Under Install, choose Standard or Minimal.
  6. Select the scanning or analysis features under Capabilities.
  7. Select Create connection.

Standard installation installs the released read permissions together; Cremit controls which features are used. Minimal installation installs permissions for the selected features. Review the permissions listed below each capability.

Apply the project setup

  1. In the new connection's Setup, choose Script or Terraform.
  2. Select Download to save that setup file.
  3. Review its project ID and permissions.
  4. Run or apply the downloaded setup in Google Cloud.
  5. Return to Cremit and select Verify.

Check Google Cloud's Workload Identity Federation guidance and your organization policy. Review the verification result and each feature's usage state in the connection detail.

Google Cloud project connection
Google Cloud project connection