Create a Google Cloud Storage V2 connection to securely read data from or write data to Google Cloud Storage files.
You can use a Google Cloud Storage V2 connection to specify sources and targets in mappings and mapping tasks.
Prerequisites for Service Account authentication
Before you configure a Google Cloud Storage V2 connection to use Service Account authentication, complete the following prerequisite tasks.
1Ensure that you have a Google service account to access Google Cloud Storage.
2Ensure that you have the client email, project ID, and private key values for the service account. Enter these details when you create a Google Cloud Storage V2 connection.
3Enable the Google Cloud Storage JSON API for your service account. Google Cloud Storage V2 Connector uses the Google API to integrate with Google Cloud Storage.
Connect to Google Cloud Storage V2
Let's configure the Google Cloud Storage V2 connection properties to connect to Google Cloud Storage.
Connection details
The following table describes the Google Cloud Storage V2 connection properties:
Property
Description
Connection Name
Name of the connection.
Each connection name must be unique within the organization. Connection names can contain alphanumeric characters, spaces, and the following special characters: _ . + -,
Maximum length is 255 characters.
Description
Description of the connection. Maximum length is 4000 characters.
Use Secret Vault
Stores sensitive credentials for this connection in the secrets manager that is configured for your organization.
This property appears only if secrets manager is set up for your organization.
When you enable the secret vault in the connection, you can select the credentials that the Secure Agent retrieves from the secrets manager. If you don't enable this option, the credentials are stored in the repository or on a local Secure Agent, depending on how your organization is configured.
Note:
If you’re using this connection to apply data access policies through pushdown or proxy services, you cannot use the Secret Vault configuration option.
The name of the runtime environment where you want to run tasks.
Authentication types
You can connect to Google Cloud Storage with a service account key or with Workload Identity Federation (WIF).
The following table describes the authentication types that you can select in the connection:
Authentication Type
Description
Service Account
Authenticate with the credentials in a Google service account key file.
WIF (Client Credentials)
Authenticate with WIF and an identity provider that uses the OAuth 2.0 client credentials grant. The connection doesn't require a user to sign in. You can also impersonate a service account and access Google Cloud Storage resources in a different project. You can configure Microsoft Entra ID as the identity provider.
The default is Service Account.
After you select an authentication type, configure the properties for that type.
Service Account authentication
Configure the basic and advanced connection properties for Service Account authentication to Google Cloud Storage.
Service Account authentication requires a service account email, a service account key, and a project ID.
The following table describes the basic connection properties for Service Account authentication:
Property
Description
Service Account Email
The client_email value from the Google service account key JSON file.
Service Account Key
The private_key value from the Google service account key JSON file.
Enter the entire block of text within the double quotation marks in the private_key field.
Start with -----BEGIN PRIVATE KEY-----\n and end with -----END PRIVATE KEY-----\n.
Project ID
The project_id value from the Google service account key JSON file.
If you created multiple projects with the same service account, enter the ID of the project that contains the bucket.
Optimize Object Metadata Import
Imports metadata for the selected object without parsing other objects, folders, or subfolders in the bucket.
Importing only the selected object reduces the time that the connector spends parsing the bucket.
Default is not selected.
Advanced settings
The following table describes the advanced connection properties for Service Account authentication:
Property
Description
Service Account Private Key ID
Service Account Client ID
Is Encrypted File
Bucket Name
The name of the Google Cloud Storage bucket that you want to connect to.
When you select a source object , the Package Explorer lists files and folders available in the specified Google Cloud Storage bucket.
If you don't specify a bucket name, you can select a bucket from the Package Explorer to select a source.
Proxy server settings
If your organization uses an outgoing proxy server to connect to the Internet, the Secure Agent connects to Informatica®Intelligent Data Management Cloud™ (IDMC) through the proxy server.
You can configure the Secure Agent to use the proxy server on Windows and Linux. You can connect to Google Cloud Storage through an authenticated or unauthenticated HTTP proxy server.
To configure the proxy settings for the Secure Agent, perform the following tasks:
•Configure the Secure Agent through the Secure Agent Manager on Windows or shell command on Linux.