Step 1: Download service account IaC template (Web UI)

Before you can create a Cloud Environment, you must download an infrastructure as code (IaC) template declaring a tightly-scoped Google service account that gives Snyk permission to scan the configuration of resources in your Google Project.

The template also enables a set of Google service APIs for your Google Cloud Project. This ensures that Snyk can use the necessary APIs to scan your Project's resources.

You will use this IaC template to provision the role in Step 2: Create the Google service account.

Download the IaC template

1. In the Snyk Web UI, navigate to Integrations > Cloud platforms.

2. Select Google Cloud.

3. In the Add Google Cloud Environment modal, select the Terraform button to download a snyk-permissions-google.tf file:

The Add Google Cloud Environment modal

You can now proceed to Step 2: Create the Google service account.

You can also add a cloud environment from Organization Settings (cog icon) > Cloud environments. See View Environments, Add a Cloud environment.