Jonathan
Jonathan

Reputation: 651

Best practice for credentials and accessing sensitive Big Query data from GCP instance?

The goal is to access Google Cloud Platform project Bigquery data from Google Cloud Platform instance. The way I know how to do this locally is from Google Cloud Platform JSON credentials. I'm reluctant to put JSON credentials on Google Cloud Platform instances.

Can someone point me to documentation or pointers on if this is possible?

Essentially here: https://cloud.google.com/bigquery/docs/reference/libraries#client-libraries-install-python while in a GCP vm.

Upvotes: 2

Views: 170

Answers (1)

Felipe Hoffa
Felipe Hoffa

Reputation: 59375

As your comment says, you can associate service accounts with GCP compute instances. There's no need to distribute secrets, credentials will be part of the environment.

When you create a new instance, you can choose to give it BigQuery access or not:

enter image description here

Upvotes: 1

Related Questions