Credential Access Boundaries

Related topics

• Credential Access Boundaries secures Cloud Storage From the official documentation: “This page explains how to use Credential Access Boundaries to create an OAuth 2.0 access token with downscoped Cloud Storage permissions.”
• Cloud Storage works with Credential Access Boundaries From the official documentation: “Only Cloud Storage supports Credential Access Boundaries; other Google Cloud services don't support this feature.”
• Credential Access Boundaries works with IAM Conditions From the official documentation: “You can also use [IAM Conditions](/iam/docs/conditions-overview) to specify which Cloud Storage objects a principal can access.”
• Cloud SQL works with Cloud Storage From the official documentation: “When ingesting data from Cloud SQL, data is first staged to a Cloud Storage bucket.”
• Cloud SQL works with Identity and Access Management From the official documentation: “This page describes how Cloud SQL is integrated with IAM .”
• IAM Conditions secures Cloud SQL From the official documentation: “IAM Conditions let you impose fine-grain access control to Cloud SQL instances.”
• Cloud SQL works with Secret Manager From the official documentation: “Secret Manager attempts to update the credentials in your Cloud SQL instance.”
• Cloud Storage works with Identity and Access Management From the official documentation: “To learn how to use IAM with Cloud Storage, see [Using IAM Permissions](/storage/docs/access-control/using-iam-permissions).”
• IAM Conditions is part of Identity and Access Management From the official documentation: “A feature of IAM is [IAM Conditions](/iam/docs/conditions-overview).”
• Identity and Access Management secures Secret Manager From the official documentation: “Secret Manager uses Identity and Access Management (IAM) for authorization.”
• VPC Service Controls secures Cloud Storage From the official documentation: “Storage Transfer Service supports transfers to Cloud Storage buckets protected by VPC Service Controls.”
• Identity and Access Management secures Cloud Storage From the official documentation: “Cloud Storage uses Identity and Access Management (IAM) for authorization.”
• VPC Service Controls secures Cloud SQL From the official documentation: “VPC Service Controls perimeters protect the Cloud SQL Admin API.”
• Identity and Access Management configures Secret Manager From the official documentation: “This page describes the Identity and Access Management (IAM) roles you can use to configure Secret Manager.”
• Identity and Access Management works with VPC Service Controls From the official documentation: “VPC Service Controls perimeters and Identity and Access Management (IAM) roles work together.”
• Cloud Load Balancing works with Cloud Storage From the official documentation: “Use a Cloud Storage bucket as a load balancer backend:”
• Cloud Load Balancing works with IAM Conditions From the official documentation: “When used with Cloud Load Balancing, IAM Conditions let you conditionally grant predefined roles — such as Load Balancer Admin or Network Admin — or custom roles.”
• Cloud Load Balancing works with Identity and Access Management From the official documentation: “Cloud Load Balancing caches IAM permissions for five minutes, so it takes up to five minutes for a role change to become effective.”
• Cloud SQL depends on Cloud Storage From the official documentation: “When ingesting data from Cloud SQL, data is first staged to a Cloud Storage bucket.”
• Cloud SQL works with VPC Service Controls From the official documentation: “Make sure that you configure VPC Service Controls so that the project that hosts the CA Service CA pool and CA<br>and the project that hosts Cloud SQL belong to the same service perimeter.”
• Cloud Storage works with IAM Conditions From the official documentation: “For more information about using IAM Conditions with Cloud Storage, see [Conditions](/storage/docs/access-control/iam#conditions).”
• Cloud Storage is an alternative to Secret Manager From the official documentation: “Your provisioning tools might need to be adapted to use Google Cloud Storage or Secret Manager to read such custom configuration lists.”
• IAM Conditions secures Secret Manager From the official documentation: “[IAM Conditions](/iam/docs/conditions-overview) allow you to define and enforce conditional, attribute-based access control for some Google Cloud resources, including Secret Manager resources.”
• IAM Conditions is an alternative to VPC Service Controls From the official documentation: “If you need to grant access to services in other projects while maintaining IP-based restrictions, consider using features like [VPC Service Controls](/vpc-service-controls/docs/overview) or [IAM](/iam/docs/overview) conditions.”
• VPC Service Controls secures Secret Manager From the official documentation: “In addition to IAM controls, you can limit access to the Secret Manager API with network-based controls by setting up a [VPC Service Controls perimeter](/vpc-service-controls/docs/overview) for your organization.”