Keyless AuthN

[davidkhala]

On-premises or another cloud provider

• Use workload-identity-federation than service account key
  • For AWS or Azure, Configure workload identity federation
  • Unlike a service account key, a credential configuration file doesn't contain a private key and doesn't need to be kept confidential. Details about the credential configuration file are available at https://google.aip.dev/auth/4117.

[davidkhala]

• creating a new pool for each non-Google Cloud environment that needs to access Google Cloud resources, such as development, staging, or production environments.

[davidkhala]

If you're running Windows Server workloads in an Active Directory environment