CODEWITHSUNDEEP
google-cloud-platformgoogle-cloud-sql
mark
mark

Reputation: 2063

GCP Cloud SQL required proxy permissions

What are the actual set of permissions required for a service account used to authenticate the Cloud SQL proxy? The documentation says that the proxy needs the Project Editor role, but I find it hard to believe that a simple proxy could require such a broad permission scope.

Also, does a dedicated service account need to be created or can the Compute Engine default service account just be used to provide this authentication?

Upvotes: 2

Views: 901

Answers (1)

ajsmith007
ajsmith007

Reputation: 106

According to the docs CloudSQL Client role should have enough permissions. https://cloud.google.com/sql/docs/mysql/connect-admin-proxy#service-account

Upvotes: 0

Related Questions