Service Accounts in Google Cloud - IAM in GCP.

Service accounts are important topic in GCP IAM and they are special accounts that belongs to your application or VM rather an user. In this video, I demonstrate how to create a service account and attach it to a VM. Best practices of using service accounts and different types of roles in GCP

Important link:

My notes:

----------
- Questions? Thoughts? Disagreements? Tell us here in the comments.
----------

[Afdac]

For people to find this Better you should use "using Google apis with your external app" this will save a lot of people time I had no idea what a service account is until I had to dig in the docs

[vamsikrishnag]

This video helped me a lot to learn in-depth of service account. Thanks GK.

[lizamiller]

Oh my god. I love you . Hands down the great explanation . I was struggling a lot with this concept, please make more videos .

[jagdishbelapure]

I tried multiple online courses (Udemy, LA, coursera ..etc) on GCP ACE, but this is far better than any other course/content, thank you so much !! :)

[thatisrikanth]

Thanks GK, I cleared my doubt by watching your video, its clear, In aws it does not have all this scrap
it has neat way like IAM role policy and the group thats it here in gcp it has lot of confusion things

[faisalraj]

For instance 4, I did not see you creating SSH key or are you using public Key that you have defined in META DATA in previous video?. Is the public key defined in the Meta Data is at the Project level? Meaning, all the VM that are being created within the project uses this Meta data key?

[Summersolt]

Thanks for this. How do we modify the role of an existing service account?

[adamtechdays]

thank you sir, you have clarified service accounts clearly here!

[AniruddhaSinharokzzz]

You explained things in a very composed way keeping best practices in mind!

[SowjiSreeni]

Thanks! you may missed to add scenario of "edit the instance and add or update service account"?

[easy-waytolearn]

Thank you very much, very simple and nice explanation, easy to understand. Please make more videos on gcp.

[abhilashshetty]

Thank you for this GK.. Great lecture and keep the rhythm on to inspire others.. we need More classes 🙂

[comradeiyer]

Great demo. Simple and structured presentation.

[pratikbhandari]

Very clean and perfect demo.. thanks alot.. you saved my day

[gcpchannelforbegineers]

Sir I have one doubt. You have created one service account and that has role of storage object viewer and creater role. Later you assigned this SVC while creation of VM. My concern while copying the files why it is getting error bcoz already we give the roles of it. I'm thinking that storage object creater role means makes a bucket, copy a bucket and etc. Can you explain plz?

[aka]

Thank you . This is good info. Can a default service account of a VM can create a storage object by default? Usually a default service account will have a project editor role right? In that case, it should have the permission to create the object by default correct
?

[subesingh]

very good explanation and demo. Thanks!

[Hummingbird]

Can you put a demo on using Workload Identity, which is the recommended way of accessing Google Cloud APIs from pods, instead of service accounts?

[debasishsaha]

Thank you for the video. I just got a query, you associated service account named "demoaccount" on the instance-4 but you logged in as "gkrishna25" into same. Does it mean the roles associated with the service account distributed as instance level as well?

[shashankraj]

Hi, Can we use google service account to implement/use google maps APIs. If yes, please suggest how to do or provide a reference link. Thanks...