Pier Cloud Platform - CCA Configuration for GCP
CCA Configuration Process for GCP Provider.
Welcome to Pier Cloud!
Pier Cloud is our centralized platform for managing cloud data and services. Our focus is to ensure that access to resources is secure, practical, and efficient. This document was elaborated to guide you through the configuration of the CCA product for the GCP provider.
In the next slides, you will find a detailed process that explains each step clearly and objectively.
In the GCP environment (Google Cloud Provider)
Access the GCP portal, click on IAM and Admin, as shown in the image below.
In the bottom left menu, click on Service Accounts.
Here click on + CREATE SERVICE ACCOUNT, as illustrated in the image below.
Here, in the Service Account Name field, enter a name for identification and then click CREATE AND CONTINUE, as illustrated in the image below.
Here, click on the Select Role field and then choose the Basic and Viewer options as illustrated in the image below.
Here Click CONTINUE, as illustrated in the image below.
Click Done to create the Service Account.
The Service Account has been successfully created! Now, click on the Service Account name as shown in the image below.
Here click on KEYS.
Here, click on ADD KEY and then select the Create New Key option as illustrated in the image below.
In this step, select the JSON option, then click CREATE to generate the key.
The Service Account key has been created successfully! Click CLOSE as shown in the image below.
Note: The key has been downloaded and is saved in the Downloads folder on your computer.
With the Service Account key created, we can configure the CCA on the Platform.
For configuration on the Platform we need the Project ID information, for this we need to click on the field with the project name, as illustrated in the image below.
After clicking on the field with the project name you will be redirected to this step where we can obtain the Project ID, as illustrated in the image below.
Here is the service Account key file created.
On the Pier Cloud Platform
On the Platform home page, click on the user icon located in the upper right corner. Then, select the Settings option, as illustrated in the image below.
In the bottom left menu, select the Secrets option.
In the top right corner click on + Add to create a Secret.
Here, in the "Name" field, enter a name to identify the Secret. In the "Type" field, select the type of Secret; in this case, choose "GCP", as shown in the image below.
After selecting the Secret type, the "GCP Access Credential" field will be displayed. In it, enter the Service Account key created in the previous steps (information obtained on slide 15). Then, click "Save" to complete the creation of the Secret, as illustrated in the image below.
Secret created successfully! To continue with the configuration, click on Cloud Accounts in the bottom left menu, as shown in the image below.
In the top right corner click + Add.
In the "Business Unit" field, select "Shared". In the "Secret" field, choose the Secret created in the previous step (cca-test-gcp). In "Account Identifier Name", add a name to identify the project or account (for example: Engineering). In the "Environment" field, specify the environment in which the account will be used, such as DEV or PRD. In the "Project ID" field, enter the ID obtained in Slide 18. Finally, click "Save" to create the account configured with the CCA.
Your GCP CCA account has been successfully set up.
Note: If the customer chooses to use an existing Service Account, it will be necessary to ensure that this account has adequate read permissions so that the tool can access and collect billing data correctly.
Last updated