Step 3: Create and scan a Cloud Environment for Google (Web UI)
Last updated
Last updated
More information
Snyk privacy policy© 2024 Snyk Limited | All product and company names and logos are trademarks of their respective owners.
Recap You have created the Google service account for Snyk. Now you can create and scan a Cloud Environment.
To create and scan a Cloud Environment for Google, you must provide the Google service account's email address and your project ID.
In the Snyk Web UI Add Google Cloud Environment modal where you downloaded the service account template, enter your service account email in the Service account email field.
For example, "snyk-cloud-mt-us-abcd1234@my-project.iam.gserviceaccount.com"
Enter the identity provider in the Identity provider field. This must be a full URL including workload identity pool ID, identity provider ID, and project ID.
For example, "https://iam.googleapis.com/projects/12345567/locations/global/workloadIdentityPools/workload-identity-123456/providers/identity-provider-123456"
Optionally, enter an environment name. If one is not provided, Snyk will use your Google Project name.
Select Approve and begin scan.
You will see a confirmation message: Google Cloud environment successfully added. Select Add another environment to return to the Add Google Cloud Environment modal and onboard a new account, or select Go to settings if you are finished:
It can take Google 60 seconds or more to create your service account. If you try to create an environment immediately after you create a service account and you receive a could not validate credentials error, wait at least 60 seconds and try again.
What's next?
You can now do the following:
View the cloud configuration issues Snyk finds. See Cloud and IaC+ issues.
Prioritize your vulnerabilities with cloud context.
