All Questions

Filter by
Sorted by
Tagged with
1 vote
1 answer
3k views

Display Existing Policy Bindings for GCP Service Account

I'm setting up a service account to access a CloudSQL DB from GKE. I've created both the GSA and the KSA, and have executed the command to associate the two (gcloud iam service-accounts add-iam-...
Lowell Boone's user avatar
1 vote
1 answer
1k views

How to grant access for a Google Cloud Service Account to have all the same permissions as a another Service Account?

So I have a Google Cloud Service Account one [email protected] that has access to roles A and B. There is Service Account two sa-2@myproject.iam.gserviceaccount.com which I need ...
engineer-x's user avatar
0 votes
1 answer
10k views

Service account does not have storage.buckets.create access

I have created a Service Account for Terraform. Apart of our process is to create some storage buckets and maintain them through Terraform. However, when we run terraform apply we get the following ...
Andrew Ellis's user avatar
0 votes
1 answer
19k views

Access denied (SA doesn't have storage.objects.create access) when trying to upload using a preSigned url to google cloud storage

Having issues trying to allow a client to upload a file via a presigned url. Error received <?xml version='1.0' encoding='UTF-8'?> <Error> <Code>AccessDenied</Code> <Message&...
James's user avatar
  • 1
0 votes
1 answer
58 views

Can a service account access all APIs?

For an api-key, one can define which APIs can be accessed with that api-key, but for service accounts, you seemingly can't. I thought maybe I could create a new role that only allows access to the ...
ASA's user avatar
  • 129