PHP 5 has reached end of support and will be
deprecated
on January 31, 2026. After deprecation, you won't be able to deploy PHP 5
applications, even if your organization previously used an organization policy to
re-enable deployments of legacy runtimes. Your existing PHP
5 applications will continue to run and receive traffic after their
deprecation date. We recommend that
you migrate to the latest supported version of PHP.
Stay organized with collections
Save and categorize content based on your preferences.
In addition to the App Engine default service
account, the
App Engine standard environment includes a App Engine standard environment service agent. The service agent
enables your Google Cloud project to interact with the resources of your app
separately from other Google Cloud services.
Google automatically creates this account when you deploy a project's first app
to the App Engine standard environment using App Engine tooling,
such as the gcloud app deploy command.
The service agent is not listed on the Service
Accounts page of the Google Cloud console and has the following restrictions:
Do not revoke the roles that are granted to the service agent.
In the upper-right corner of the Permissions page, select the
Include Google-provided role grants checkbox.
In the Principals list, locate the ID of the App Engine standard environment service
agent, which uses the ID service-PROJECT_NUMBER@gcp-gae-service.iam.gserviceaccount.com.
Verify that the service agent has been
granted the App Engine standard environment Service Agent role.
Service Agent role
The service agent has the
App Engine standard environment Service Agent role.
The role includes a set of permissions needed by PHP 5 standard environment to
manage your standard environment apps. For example,
this role includes permissions to perform the following tasks:
Get an access token for App Engine instances to access other Google Cloud resources, such as a Cloud Storage bucket.
Use the Blobstore API from App Engine legacy bundled services.
The App Engine standard environment Service Agent role is reserved for the
service agent. Do not grant this
IAM role to any other account, because the
permissions that the role includes can change without notice.
Restoring a deleted service agent
If you accidentally delete the App Engine standard environment service agent,
restore it by performing the following steps:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe App Engine standard environment includes a service agent that enables your Google Cloud project to interact with your app's resources separately from other Google Cloud services.\u003c/p\u003e\n"],["\u003cp\u003eThis service agent is automatically created when you deploy a project's first app to the App Engine standard environment and is not listed on the Service Accounts page.\u003c/p\u003e\n"],["\u003cp\u003eIt's crucial not to revoke the roles granted to the service agent or grant its specific role to any other account, as this can impact app deployment.\u003c/p\u003e\n"],["\u003cp\u003eYou can verify the existence and role of the service agent by checking the Permissions page in the Google Cloud console and locating the service agent ID, which is \u003ccode\u003eservice-PROJECT_NUMBER@gcp-gae-service.iam.gserviceaccount.com\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eIf the service agent is accidentally deleted, you can restore it by adding a new principal with the service agent's ID and assigning it the "App Engine standard environment Service Agent" role in the Permissions page.\u003c/p\u003e\n"]]],[],null,[]]
