Supported services

The page lists the Google Cloud services that support Access Approval.

GA indicates that approval requests are generally available for a service. Preview indicates that approval requests are supported, but might be changed in backward-incompatible ways and are not subject to any SLA or deprecation policy.

Supported Google Cloud services

Access Approval supports the following Google Cloud services:

Google Cloud services with Access Approval support Launch stage
Access Context Manager GA
AlloyDB for PostgreSQL GA
Anthos Service Mesh GA
App Engine [1] GA
Application Integration Preview
Artifact Registry GA
BigQuery [2] GA
Bigtable GA
Certificate Authority Service GA
Cloud Composer GA
Cloud External Key Manager GA
Cloud Functions GA
Cloud HSM GA
Cloud Key Management Service (Cloud KMS) GA
Cloud Logging GA
Cloud Monitoring GA
Cloud NAT GA
Cloud Run GA
Cloud SQL GA
Cloud Storage GA
Cloud Tasks GA
Compute Engine GA
Connect Agent GA
Dataflow GA
Dataproc GA
Eventarc GA
Firebase Security Rules Preview
Firestore GA
GKE Hub API GA
GKE Identity Service GA
Google Distributed Cloud Edge GA
Google Kubernetes Engine GA
Identity and Access Management (IAM) GA
Memorystore for Redis GA
Organization Policy Service Preview
Persistent Disk GA
Pub/Sub [3] GA
Resource Manager Preview
Secret Manager GA
Sensitive Data Protection GA
Serverless VPC Access Preview
Spanner GA
Speaker ID GA
Vertex AI Search Preview

Footnotes

1. Cloud Storage and Cloud SQL are the only compatible storage backends for App Engine supported by Access Approval.

2. Some information about your queries, tables, and datasets might not generate an Access Approval request when accessed by Cloud Customer Care. Viewing query text, table names, dataset names, and dataset access control lists might not generate Access Approval requests; this access pathway gives read-only access. Viewing query results and table or dataset data still generates Access Transparency logs.

3. Some information about your topics and subscriptions might not generate an Access Approval request when accessed by Cloud Customer Care. Viewing topic names, subscription names, message attributes, and timestamps might not generate Access Approval requests; this pathway gives read-only access. Viewing message payloads still generates Access Approval requests and Access Transparency logs.

What's next