Connect Google Cloud
Grant CloudVision360 read-only access to a Google Cloud project, folder or organization.
Online version, always current: https://cloudvision360.com/docs/platform/connect-gcp/
CloudVision360 reads Google Cloud through a read-only service account. It uses Cloud Asset Inventory, Recommender, the BigQuery billing export and Cloud Monitoring.
What access is requested
A service account with viewer-level roles (such as Cloud Asset Viewer, Security Reviewer, Recommender Viewer) at the project, folder or organization scope you choose. Billing data is read from a BigQuery billing export you point the connection at.
Connect with Terraform (recommended)
- In CloudVision360, open Inventory → Cloud connections, choose Connect a cloud, then Google Cloud.
- Download the Terraform module and review the roles it grants.
- Apply it at the project, folder or organization level you want covered.
- Supply the service account key (or configure workload identity federation) and the billing export dataset back in the connection form.
Billing export
Cost data depends on the BigQuery billing export being enabled for your billing account. The connection form links to the exact setting; without it, posture and identity still work but cost will be empty.
Scope
Connect at a folder or organization to cover projects beneath it. New projects under that scope are picked up on the next scan.
Verify
The first assessment runs within minutes. Any missing role or a billing export that is not yet populated is reported in the connection’s health panel.