GCP Integration (Old Flow)
Connect GCP Using Previous Methods
These methods apply to organisations that integrated Google Cloud Platform (GCP) before the Workload Identity Federation (WIF) upgrade introduced on December 6, 2024.
The legacy integration uses service account JSON keys for authentication. This method requires periodic key rotation and is less secure than the WIF-based integration.
Sprinto recommends migrating to the Workload Identity Federation (WIF) method whenever possible.
Before continuing, complete the steps in Navigate to the GCP integration in Sprinto.
Legacy Method 1: Cloud Shell (JSON Key-Based)
This method automatically creates the required service account and permissions using a setup script executed in Google Cloud Shell.
Step 1: Run Bash Script in Cloud Shell
Enter the Project Id.
Select the Use Google Cloud Shell check box.
Click Continue.
Copy the provided script.
Run it in Google Cloud Shell.
The script creates:
Service account
Security Reviewer role assignment
Required APIs
Step 2: Download JSON Key
When prompted:
Download the generated JSON private key file.
Step 3: Upload Key in Sprinto
Upload the JSON file in Sprinto.
The Connect button becomes active.
Click Connect.
Legacy Method 2: Manual (JSON Key-Based)
Use this method if you prefer to create the service account and permissions manually in Google Cloud.
Step 1: Create Service Account
Enter the Project Id.
Select the Set up service account manually check box.
Click Continue.
Log in to GCP.
Navigate to IAM & Admin → Service Accounts.
Click Create service account.
Assign roles:
Security Reviewer
Compute Viewer
Monitoring Editor
Click Done.
Step 2: Create Access Keys
Open the newly created service account.
Click Actions → Manage Keys.
Click Add Key → Create new key.
Select JSON.
Click Create.
Download the key file.
Step 3: Enable Required APIs
Enable the required APIs in each production project.
Step 4: Upload JSON Key in Sprinto
Upload the downloaded JSON key file.
Click Connect.
Last updated