Identity and Access Management (IAM) lets you control access to Eventarc resources by granting specific roles and permissions to service accounts and principals. You can configure access to receive and route events to target destinations such as Cloud Run, GKE, and Workflows.
-
Roles and permissions for an internal HTTP endpoint in a VPC network
Grant Identity and Access Management (IAM) roles to service accounts so that Eventarc can receive events from sources, and deliver the events to an internal HTTP endpoint in a Virtual Private Cloud (VPC) network.
-
Roles and permissions for Cloud Run
Grant Identity and Access Management (IAM) roles to service accounts so that Eventarc can receive events from sources, and deliver the events to a target Cloud Run service.
-
Roles and permissions for GKE
Grant Identity and Access Management (IAM) roles to service accounts so that Eventarc can receive events from sources, and deliver the events to a target Google Kubernetes Engine (GKE) destination (including the public endpoints of private and public services running in a GKE cluster).
-
Roles and permissions for Workflows
Grant Identity and Access Management (IAM) roles to service accounts so that Eventarc can receive events from sources, and deliver the events to a target workflow.
-
Roles and permissions for a cross-project service account
Grant Identity and Access Management (IAM) roles so that you can attach a service account in one project to an Eventarc trigger in another project.