GCP Connection

Create a new service account with an ID that follows this requirement:

Your service account ID must end with the first two sections of your Infisical organization ID.

Example:

• Infisical organization ID: df92581a-0fe9-42b5-b526-0a1e88ec8085
• Required service account ID suffix: df92581a-0fe9

• Secret Sync

After configuring the appropriate roles, press “DONE”.

To enable service account impersonation, you’ll need to grant the Service Account Token Creator role to the Infisical instance’s service account. This configuration allows Infisical to securely impersonate the new service account.

• Navigate to the IAM & Admin > Service Accounts section in your Google Cloud Console
• Select the newly created service account
• Click on the “PERMISSIONS” tab
• Click “Grant Access” to add a new principal

If you’re using Infisical Cloud US, use the following service account: [email protected]

If you’re using Infisical Cloud EU, use the following service account: [email protected]

Navigate to the App Connections tab on the Organization Settings page.

Select the GCP Connection option from the connection options modal.

Select the Service Account Impersonation method and click Connect to GCP.

Your GCP Connection is now available for use.