Google Cloud (GCP) Credentials & Resources

Updated by CoreSite

What are "Credentials"?

The CoreSite OCX utilizes programmatic access to create Layer 3 connections to the cloud providers and requires users to provide credentials to establish connectivity.

Why are these needed? When users create a layer 3 connection, the CoreSite OCX also creates the cloud resources below on behalf of the customer. To create such cloud resources, CoreSite requires the user/account Credentials to be provided. These access keys are created in the cloud provider console and can be retrieved after creation. The credentials required are limited to what is outlined below and should not be the user’s root credentials.

GCP resources created:

  • Virtual Private Cloud Network
  • Subnet (in created Virtual Private Cloud)
  • Cloud Router
  • VLAN Attachment (1 or 2 depending on option selected)
Helpful Links

The credentials required are limited to what is outlined below and should not be the user’s root credentials. These credentials are created in the cloud provider console and can be retrieved after creation.

GCP credentials required:

GCP Region

This field represents the Google Region in which the Virtual Router will be created in.  CoreSite currently only supports regions in the United States.

GCP Project

This field represents the Google Project in which the Cloud Resources will be created and stored in.

Service Account Credentials

This field requires users to provide their Google service account keys.  The account keys provided serve as authentication allowing CoreSite to create Google Cloud Resources on the user’s behalf.  CoreSite requires information be provided in JSON Format.

Related Content
-Information on GCP Projects
-Information on Service Account Keys

How to obtain your Google Cloud Credentials

Steps to obtaining your GCP Service Account Credentials:

  1. Log into the Google Cloud Console:  https://console.cloud.google.com
  2. Navigate to the Menu pane on the top left corner of the page
    1. Locate the “IAM & Admin” tab
    2. Click “Service Accounts”
  3. Select the Google project that you wish to use.  If you do not have an existing project, you will need to create one.
  4. On the Service accounts page, click the email address of the service account whose keys you want to view.
  5. Click the “Keys” tab. The Google Cloud console will display a list of keys for the service account.

Steps to Creating your GCP Service Account Credentials:

  1. Log into the Google Cloud Console:  https://console.cloud.google.com
  2. Navigate to the Menu pane on the top left corner of the page
    1. Locate the “IAM & Admin” tab
    2. Click “Service Accounts”
  3. Select the Google project that you wish to use.
  4. On the Service accounts page, click the email address of the service account that you want to create a key for.
  5. Click the “Keys” tab.
  6. Click “Add Key”
    1. Then click “Create new key”
  7. Select JSON as the Key type and click “Create”.
    1. NOTE: Clicking Create downloads a service account key file. After you download the key file, you cannot download it again.

How did we do?