Python 2.7 telah mencapai akhir dukungan
dan akan dihentikan penggunaannya
pada 31 Januari 2026. Setelah penghentian penggunaan, Anda tidak akan dapat men-deploy aplikasi Python 2.7, meskipun organisasi Anda sebelumnya menggunakan kebijakan organisasi untuk mengaktifkan kembali deployment runtime lama. Aplikasi Python 2.7 yang ada akan terus berjalan dan menerima traffic setelah
tanggal penghentiannya. Sebaiknya Anda bermigrasi ke versi Python terbaru yang didukung.
Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Selain akun layanan default App Engine, lingkungan standar App Engine menyertakan App Engine standard environment service agent. Agen layanan memungkinkan project Google Cloud Anda berinteraksi dengan resource aplikasi Anda secara terpisah dari layanan Google Cloud lainnya.
Google secara otomatis membuat akun ini saat Anda men-deploy aplikasi pertama project ke lingkungan standar App Engine menggunakan alat App Engine, seperti perintah gcloud app deploy.
Agen layanan tidak tercantum di halaman Akun Layanan di konsol Google Cloud dan memiliki batasan berikut:
Jangan cabut peran yang telah diberikan ke agen layanan.
Di pojok kanan atas halaman Permission, centang kotak Include Google-provided role grants.
Dalam daftar Principal, cari ID agen layanan lingkungan standar App Engine, yang menggunakan ID service-PROJECT_NUMBER@gcp-gae-service..
Pastikan agen layanan telah diberi peran App Engine standard environment Service Agent.
Peran Agen Layanan
Agen layanan memiliki peran Agen Layanan lingkungan standar App Engine.
Peran ini mencakup sekumpulan izin yang diperlukan oleh lingkungan standar Python 2 untuk
mengelola aplikasi lingkungan standar Anda. Misalnya,
peran ini mencakup izin untuk melakukan tugas berikut:
Mendapatkan token akses untuk instance App Engine agar dapat mengakses resource Google Cloud lain, seperti bucket Cloud Storage.
Menggunakan Blobstore API dari layanan paket lama App Engine.
Peran App Engine standard environment service agent disediakan untuk agen layanan. Jangan berikan peran IAM ini ke akun lain, karena izin yang disertakan oleh peran tersebut dapat berubah tanpa pemberitahuan.
Memulihkan agen layanan yang telah dihapus
Jika Anda tidak sengaja menghapus App Engine standard environment service agent, pulihkan agen tersebut dengan melakukan langkah-langkah berikut:
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-09-04 UTC."],[[["\u003cp\u003eThe App Engine standard environment includes a service agent that enables your Google Cloud project to interact with your app's resources separately from other Google Cloud services.\u003c/p\u003e\n"],["\u003cp\u003eThis service agent is automatically created when you deploy your first app to the App Engine standard environment using App Engine tooling, such as the \u003ccode\u003egcloud app deploy\u003c/code\u003e command.\u003c/p\u003e\n"],["\u003cp\u003eThe service agent is not listed on the Service Accounts page, and its granted roles should not be revoked, nor should the service agent role be granted to other accounts.\u003c/p\u003e\n"],["\u003cp\u003eThe service agent is granted the App Engine standard environment Service Agent role, which includes permissions needed for managing standard environment apps, like getting access tokens and using the Blobstore API.\u003c/p\u003e\n"],["\u003cp\u003eIf accidentally deleted, the service agent can be restored by adding it back through the Permissions page in the Google Cloud console using its specific ID and role.\u003c/p\u003e\n"]]],[],null,["# The App Engine standard environment service agent\n\nIn addition to the [App Engine default service\naccount](/appengine/docs/legacy/standard/python/service-account), the\nApp Engine standard environment includes a *App Engine standard environment service agent*. The service agent\nenables your Google Cloud project to interact with the resources of your app\nseparately from other Google Cloud services.\n\nGoogle automatically creates this account when you deploy a project's first app\nto the App Engine standard environment using App Engine tooling,\nsuch as the `gcloud app deploy` command.\n\nThe service agent is not listed on the Service\nAccounts page of the Google Cloud console and has the following restrictions:\n\n- Do not revoke the roles that are granted to the service agent.\n- Do not grant the related [App Engine standard environment service agent\n role](#service_agent_role) to any other account because the permissions that the role includes can change without notice.\n\n| **Warning:** Removing the service agent removes the binding for the service agent from your Google Cloud project. If you remove the binding or change the permissions for the service agent, any deployment to your app in the standard environment might fail.\n\nVerifying the App Engine standard environment service agent\n-----------------------------------------------------------\n\nTo verify that the service agent exists\nin your Google Cloud project, perform the following steps:\n\n1. Open the Google Cloud console:\n\n [Go to the Permissions\n page](https://console.cloud.google.com/iam-admin/iam)\n2. In the upper-right corner of the **Permissions** page, select the\n **Include Google-provided role grants** checkbox.\n\n3. In the **Principals** list, locate the ID of the App Engine standard environment service\n agent, which uses the ID \n\n `service-`\u003cvar translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e`@gcp-gae-service.iam.gserviceaccount.com`.\n\n4. Verify that the service agent has been\n granted the **App Engine standard environment Service Agent** role.\n\nService Agent role\n------------------\n\nThe service agent has the\n[App Engine standard environment Service Agent role](/iam/docs/understanding-roles#appengine.serviceAgent).\nThe role includes a set of permissions needed by Python 2 standard environment to\nmanage your standard environment apps. For example,\nthis role includes permissions to perform the following tasks:\n\n- Get an access token for App Engine instances to access other Google Cloud resources, such as a Cloud Storage bucket.\n- Use the [Blobstore API](/appengine/docs/legacy/standard/python/blobstore) from App Engine legacy bundled services.\n\nThe App Engine standard environment Service Agent role is reserved for the\nservice agent. Do not grant this\n[IAM role](/iam/docs/overview#roles) to any other account, because the\npermissions that the role includes can change without notice.\n\nRestoring a deleted service agent\n---------------------------------\n\nIf you accidentally delete the App Engine standard environment service agent,\nrestore it by performing the following steps:\n\n1. Open the Google Cloud console:\n\n [Go to the Permissions\n page](https://console.cloud.google.com/iam-admin/iam)\n2. Click **Add**.\n\n3. Enter the service agent ID using the format \n\n `service-`\u003cvar translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e`@gcp-gae-service.iam.gserviceaccount.com`.\n\n4. Select the **App Engine standard environment Service Agent** role.\n\n5. Click **Save**."]]
