Workload Identity
Workload Identity is an identity federation mechanism in Google Cloud that allows external identities such as AWS, Azure, and OIDC to access Google Cloud resources securely without service account keys.
Timeline (last 90 days)
Unlike standalone API keys, Google Cloud IAM authorization depends on the caller's identity (such as a service account, user account, or Workload Identity federated identity), and the credentials themselves do not directly carry permissions.
Service accounts are commonly used for server-side calls, and short-lived tokens can be obtained via a key file or the more secure Workload Identity approach.
All Facts (2)
Unlike standalone API keys, Google Cloud IAM authorization depends on the caller's identity (such as a service account, user account, or Workload Identity federated identity), and the credentials themselves do not directly carry permissions.
50%UnverifiedService accounts are commonly used for server-side calls, and short-lived tokens can be obtained via a key file or the more secure Workload Identity approach.
50%