Hi Folks - I'm going through the quickstart and had a question about security with GBQ destinations -- is a service account key the only way to authenticate? Is it possible to use the role of the host instance?
Marcos Marx (Airbyte)
03/08/2022, 9:10 PM
I don’t see any request in the Github project for this. For AWS there is one open to use Role in AWS deployments: https://github.com/airbytehq/airbyte/issues/5942@Chris Stout do you mind to open a Github request explaining your use case for this feature?
03/08/2022, 9:16 PM
perfect, yes, this is exactly the thing I'm talking about. I'll check with my GCP folks to make sure I understand what I'm asking for correctly, lol. I don't quite understand GCP IAM like I do AWS IAM, so want to make sure it's apples to apples.
But the reason is the same - in almost all cases it's a bad idea to create long lived keys like that, and I would suspect this might cause some issues at most larger enterprises. Again, I'll talk to someone that knows GCP better and get back to you with a ticket.