Supported services

The page lists the Google Cloud services that support Access Approval.

GA indicates that approval requests are generally available for a service. Preview indicates that approval requests are supported, but might be changed in backward-incompatible ways and are not subject to any SLA or deprecation policy.

Supported Google Cloud services

Access Approval supports the following Google Cloud services:

Google Cloud services with Access Approval support Launch stage
Access Context Manager GA
AlloyDB for PostgreSQL GA
Apigee [5] GA
App Engine [1] GA
Application Integration GA
Artifact Registry GA
BigQuery [2] GA
Bigtable GA
Certificate Authority Service GA
Cloud Build GA
Cloud Composer GA
Cloud DNS GA
Cloud External Key Manager GA
Cloud Healthcare API GA
Cloud HSM GA
Cloud Interconnect GA
Cloud Key Management Service (Cloud KMS) GA
Cloud Logging GA
Cloud Monitoring GA
Cloud NAT GA
Cloud Run GA
Cloud Run functions GA
Cloud Service Mesh GA
Cloud SQL GA
Cloud Storage GA
Cloud Tasks GA
Compute Engine GA
Connect Agent GA
Database Center Preview
Dataflow GA
Dataform GA
Dataplex Preview
Dataproc GA
Eventarc GA
Filestore GA
Firebase Security Rules GA
Firestore GA
GKE Connect GA
GKE Hub GA
GKE Hub API GA
GKE Identity Service GA
Google Cloud Armor [4] GA
Google Distributed Cloud GA
Google Kubernetes Engine GA
Google Security Operations SIEM [6] GA
Google Security Operations SOAR [6] GA
IAM workforce identity federation GA
Identity and Access Management (IAM) GA
Identity-Aware Proxy GA
Looker (Google Cloud core) Preview
Memorystore for Redis GA
Organization Policy Service Preview
Persistent Disk GA
Pub/Sub [3] GA
Resource Manager GA
Secret Manager GA
Secure Source Manager GA
Sensitive Data Protection GA
Serverless VPC Access GA
Spanner GA
Speaker ID GA
Speech-to-Text GA
Storage Transfer Service GA
Vertex AI [6] GA
Vertex AI Search GA

Footnotes

1. Cloud Storage and Cloud SQL are the only compatible storage backends for App Engine supported by Access Approval.

2. Some information about your queries, tables, and datasets might not generate an Access Approval request when accessed by Cloud Customer Care. Viewing query text, table names, dataset names, and dataset access control lists might not generate Access Approval requests; this access pathway gives read-only access. Viewing query results and table or dataset data still generates Access Transparency logs.

3. Some information about your topics and subscriptions might not generate an Access Approval request when accessed by Cloud Customer Care. Viewing topic names, subscription names, message attributes, and timestamps might not generate Access Approval requests; this pathway gives read-only access. Viewing message payloads still generates Access Approval requests and Access Transparency logs.

4. Access Approval is available for regional Google Cloud Armor security policies. Global Google Cloud Armor security policies won't generate Access Approval requests.

5. The following Apigee features are not supported by Access Approval:

  • Apigee portal
  • Features in the Preview launch stage
Additionally, Apigee Hybrid customers must upgrade to the latest version to get full Access Approval support.

6. Access Approval is available by request. To request this feature, contact Cloud Customer Care with the name of the product to enable and request that Access Approval be enabled for that product. To confirm if enabled, open Access Approval settings, and check the list of products shown.

What's next