GcpAccessMode
GcpAccessMode
GcpAccessMode
The access mode for GCP authentication.
PRIVATE_KEY |
Use service account private key directly (JSON key file). |
SERVICE_ACCOUNT_IMPERSONATION |
Use service account impersonation with external ID label validation. |
| Guardrails impersonates the target service account. | |
WORKLOAD_IDENTITY_FEDERATION |
Use Workload Identity Federation to authenticate via AWS IAM role. |
| No long-lived credentials required. |