Connector · GCP

GCP Cloud Connect

Connect a Google Cloud project. Discovery uses read-only Google Cloud API calls only — it never creates or changes a resource — to inventory Cloud Run services and Apigee API proxies, then runs the posture checks.

Connect to GCP

Service account with read-only viewer roles.

Project ID

Apigee organization (optional)

Region

Secret Manager resource (holds the discovery SA key)

The discovery credential lives in your Secret Manager — never in the box. At discovery the appliance reads the secret above using its own service account (grant it secretmanager.versions.access), uses it for that call, then discards it. Without access it returns the labelled synthetic catalogue.

Discovery result

No discovery run yet. Connect a project to inventory it.

What gets inventoried

Cloud Run

Deployed services and their public URLs (run.googleapis.com).

Apigee proxies

API proxies fronted by the Apigee gateway.

Posture

Every discovered endpoint is run through the posture checks.