Java 8 telah mencapai akhir dukungan
dan akan dihentikan penggunaannya
pada 31 Januari 2026. Setelah penghentian penggunaan, Anda tidak akan dapat men-deploy aplikasi Java 8, meskipun organisasi Anda sebelumnya menggunakan kebijakan organisasi untuk mengaktifkan kembali deployment runtime lama. Aplikasi Java 8 yang ada akan terus berjalan dan menerima traffic setelah
tanggal penghentiannya. Sebaiknya Anda bermigrasi ke versi Java terbaru yang didukung.
Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Setelah Anda membuat aplikasi App Engine, akun layanan default App Engine
akan dibuat dan digunakan sebagai identitas
aplikasi App Engine Anda. Akun layanan default App Engine
dikaitkan dengan project Google Cloud Anda dan menjalankan tugas atas nama
aplikasi Anda yang berjalan di App Engine.
Melihat akun layanan default App Engine
Untuk melihat akun layanan:
Di konsol Google Cloud , buka halaman Service accounts.
Jika Anda menonaktifkan pemberian peran otomatis, Anda harus menentukan peran mana yang akan diberikan ke akun layanan default, lalu memberikan peran tersebut secara manual.
Jika akun layanan default sudah memiliki peran Editor, sebaiknya ganti
peran Editor dengan peran yang kurang permisif.Untuk mengubah peran akun layanan dengan aman, gunakan Policy Simulator untuk melihat dampak
perubahan, lalu berikan dan cabut
peran yang sesuai.
Mengubah izin akun layanan
Anda dapat menggunakan konsol Google Cloud untuk memberikan atau menghapus peran dari akun layanan default. Misalnya, Anda dapat
mendowngrade izin yang digunakan oleh akun layanan default App Engine
dengan mengubah perannya dari Editor ke peran mana pun yang paling sesuai dengan
kebutuhan akses untuk aplikasi App Engine Anda.
Untuk mengubah peran pada akun layanan default App Engine:
Cari akun layanan default App Engine di
daftar Utama. Akun layanan default App Engine akan muncul
dalam daftar jika peran telah diberikan secara otomatis atau manual ke
akun layanan.
Pilih tombol edit untuk mengubah peran yang ditetapkan ke akun layanan.
Menggunakan akun layanan default
Aplikasi App Engine Anda menggunakan kredensial akun
layanan App Engine secara default. Untuk mengetahui informasi selengkapnya, lihat Memberikan akses aplikasi
ke layanan Cloud.
Memulihkan akun layanan default yang telah dihapus
Jika Anda menghapus akun layanan default App Engine, aplikasi App Engine mungkin akan berhenti berfungsi dan kehilangan akses ke layanan
Google Cloud lainnya, seperti Datastore.
Anda dapat memulihkan akun layanan default App Engine yang telah dihapus
dalam 30 hari terakhir dengan mengikuti langkah-langkah untuk
membatalkan penghapusan akun layanan.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-19 UTC."],[[["\u003cp\u003eThe App Engine default service account is automatically created when an App Engine application is created, acting as the identity for the app and executing tasks.\u003c/p\u003e\n"],["\u003cp\u003eThe default service account may be granted the Editor role automatically, however, it is recommended to disable this automatic grant and manually assign less permissive roles if needed.\u003c/p\u003e\n"],["\u003cp\u003eYou can modify the roles assigned to the App Engine default service account via the Google Cloud console's IAM page to adjust its permissions, downgrading it if necessary.\u003c/p\u003e\n"],["\u003cp\u003eDeleting the App Engine default service account can cause the application to malfunction and lose access to other Google Cloud services, so care should be taken when managing it.\u003c/p\u003e\n"],["\u003cp\u003eIf accidentally deleted, the App Engine default service account can be restored within 30 days by following the standard service account undeletion process.\u003c/p\u003e\n"]]],[],null,["# Using the Default App Engine Service Account\n\nAfter you create an App Engine application, the\n*[App Engine default service account](/iam/docs/service-account-types#default)*\nis created and used as the identity of your\nApp Engine app. The App Engine default service account is\nassociated with your Google Cloud project and executes tasks on behalf of your\napps running in App Engine.\n\nViewing the App Engine default service account\n----------------------------------------------\n\nTo view your service accounts:\n\n1. In the Google Cloud console, go to the **Service accounts** page.\n\n [Go to Service accounts](https://console.cloud.google.com/iam-admin/serviceaccounts)\n2. Select your project.\n\n3. In the list, locate the email address of the App Engine default service account: \n\n\n \u003cvar translate=\"no\"\u003eYOUR_PROJECT_ID\u003c/var\u003e`@appspot.gserviceaccount.com`\n\nModifying the default service account\n-------------------------------------\n\n\nDepending on your organization policy configuration, the default service account might\nautomatically be granted the [Editor role](/iam/docs/roles-overview#basic) on your\nproject. We strongly recommend that you disable the automatic role grant by [enforcing the `iam.automaticIamGrantsForDefaultServiceAccounts` organization policy\nconstraint](/resource-manager/docs/organization-policy/restricting-service-accounts#disable_service_account_default_grants). If you created your organization after May 3, 2024, this\nconstraint is enforced by default.\n\n\nIf you disable the automatic role grant, you must decide which roles to grant to the default\nservice accounts, and then [grant these\nroles](/iam/docs/granting-changing-revoking-access) yourself.\n\n\nIf the default service account already has the Editor role, we recommend that you replace the\nEditor role with less permissive roles.To safely modify the service account's roles, use [Policy Simulator](/policy-intelligence/docs/simulate-iam-policies) to see the impact of\nthe change, and then [grant and revoke the\nappropriate roles](/iam/docs/granting-changing-revoking-access).\n\n\u003cbr /\u003e\n\n| **Warning:** Deleting the App Engine default service account breaks any current and future App Engine applications in your Google Cloud project. For example, your application will lose access to other Google Cloud services such as Datastore. If needed, you can [restore a deleted default\n| service account](#repair-service-account).\n\n### Changing service account permissions\n\nYou can use the Google Cloud console to grant or remove roles from the\ndefault service account. For example, you can\ndowngrade the permissions used by the App Engine default service account\nby changing its role from Editor to whichever role(s) that best represent the\naccess needs for your App Engine app.\n\nTo modify roles for the App Engine default service account:\n\n1. In the Google Cloud console, go to the **IAM** page.\n\n [Go to IAM](https://console.cloud.google.com/iam-admin/iam)\n2. Select your project.\n\n3. Locate the App Engine default service account in the\n Principals list. The App Engine default service account appears in\n the list if roles have been automatically or manually granted to the\n service account.\n\n4. Select the edit button to modify the roles assigned to the service account.\n\n| **Note:** You cannot remove application access to its task queues and cron jobs.\n\nUsing the default service account\n---------------------------------\n\nYour App Engine app uses the credentials of the App Engine\nservice account by default. For more information, see [Granting your app access\nto Cloud services](/appengine/docs/legacy/standard/java/access-control\n\n#apps).\n\nRestoring a deleted default service account\n-------------------------------------------\n\nIf you delete your App Engine default service account, your\nApp Engine application might break and lose access to other\nGoogle Cloud services, such as Datastore.\n\nYou can restore App Engine default service accounts that have been deleted\nwithin the last 30 days by following the steps in\n[undeleting a service account](/iam/docs/service-accounts-delete-undelete#undeleting).\n\nMore information about service accounts\n---------------------------------------\n\n- [Default service accounts](/iam/docs/service-account-types#default)\n\n- [Managing service accounts](/iam/docs/creating-managing-service-accounts)"]]
