Skip to main content

Google Cloud Prerequisites

Cloudaware connects to GCP using one or more Google service accounts and the associated JSON key files. Before you start the setup steps, make sure the following prerequisites are in place.

Cloudaware Prerequisites​

  • Access to a Cloudaware account.
  • A user with access to the Admin Console and permissions to manage cloud accounts, organizations, and integrations (Cloudaware Administrator).

GCP Organizations, Folders, and Projects​

  • One or more GCP projects containing resources for Cloudaware to onboard.
  • (Optional) A GCP organization and folders if you want to manage discovery at higher levels in the hierarchy.
  • Permissions in GCP to:
    • Create service accounts.
    • Grant IAM roles at the project, folder, or organization level.
    • Enable required APIs in projects.

Service Accounts & Keys​

  • A dedicated service account for Cloudaware (or multiple service accounts if you use different scopes or environments).
  • Minimum role:
    • roles/viewer (Project Viewer) on the projects you plan to monitor.
  • Optional roles for advanced features (see Least Privilege):
    • Organization/folder‑level viewer roles for hierarchical discovery.
    • Billing Account Viewer for billing accounts.
    • Custom roles for backups and tagging.
  • A JSON key for each service account that will be added to Cloudaware.

Required APIs​

Enable the following APIs in the project where the Cloudaware service account has been created (and in other relevant projects as needed):

  • Compute Engine API
  • Identity and Access Management (IAM) API
  • Cloud Resource Manager API
  • Kubernetes Engine API (if using GKE)
  • Cloud Billing API (if using billing integrations)

Additional APIs may be required for specific services; see Google Cloud Services Coverage and GCP documentation for details.

Network & Connectivity​

  • Cloudaware connects to GCP public APIs over the internet; no inbound connectivity from GCP to Cloudaware is required.
  • Ensure that your security policies allow outbound access from Cloudaware to the relevant GCP API endpoints.

Compliance & Approvals​

  • Internal approval to grant the required viewer roles and any optional extended permissions described in Least-Privilege Policies.
  • Any change‑management tickets or reviews required to create service accounts, keys, and IAM roles for Cloudaware.

Once these prerequisites are met, continue with Setup to configure the service account, enable APIs, and onboard GCP into Cloudaware.