Creating service accounts

A service account is a non-user account generated by the GCP for services or manually created for our applications. When a service account is attached to an application, it assumes the identity of the service account and thus avoids storing credentials at the application level. The services which can be accessed by the service account can be managed via IAM.

In addition to applications assuming the service account's access, users can also use the service account to access resources. In this recipe, we'll create a service account and use it to verify access to Cloud SQL.

Getting ready

The following are the initial setup verification steps, which are required before the recipe can be executed:

1. Create or select a GCP project.
2. Enable billing and enable the default APIs (some APIs like BigQuery, storage, monitoring, and a few others are enabled automatically).
3. Give a appropriate permission to create service accounts.
4. Verify that the Google Cloud SQL API is enabled.

 

5. Let us...