Service Account for GCP (Google GCP)
What is a Service Account in GCP (Google Cloud)? #gcp,#gcpcloud,#googlecloud
A service account is a special kind of account used by an application or a virtual machine (VM) instance, not a person
Service accounts differ from user accounts in a few key ways:
Service accounts do not have passwords, and cannot log in via browsers or cookies.
Service accounts are associated with private/public RSA key-pairs that are used for authentication to Google.
You can let other users or service accounts impersonate a service account.
Service accounts are not members of your Google Workspace domain
Types of Service Account
1.User-managed service accounts
[email protected]
2.Default service accounts
For Compute:
[email protected]
3.Google-managed service accounts
Tasks
1.Create an instance and assign it a new User-managed service accounts with read only for Cloud storage
gsutil ls gs:// -Should work
gsutil rm gs:// -Shoud Not Work
The Service Account User role
The importance of roles/iam.serviceAccountUser
2.Assign a developer a roles/iam.serviceAccountUser so he is able to access the instance