See the supported connectors for Application Integration.

Set up Application Integration

This page describes the different ways and steps needed to successfully set up or provision Application Integration in your Google Cloud project.

Prepare and plan

Before you set up Application Integration, perform the following steps:

1. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Go to project selector

2. Make sure that billing is enabled for your Google Cloud project.

3. Make sure that you have the following role or roles on the project: Google Cloud Project Editor, KMS operator permissions, Integration Admin, and Connector Admin.

   Check for the roles

   1. In the Google Cloud console, go to the IAM page.

      Go to IAM
   2. Select the project.

   3. In the Principal column, find the row that has your email address.

      If your email address isn't in that column, then you do not have any roles.

   4. In the Role column for the row with your email address, check whether the list of roles includes the required roles.

   Grant the roles

   1. In the Google Cloud console, go to the IAM page.

      Go to IAM
   2. Select the project.
   3. Click Grant access.
   4. In the New principals field, enter your email address.
   5. In the Select a role list, select a role.
   6. To grant additional roles, click Add another role and add each additional role.
   7. Click Save.
Tip: You can use the Policy Troubleshooter if you encounter any access issues while assigning the IAM roles and permissions in your Google Cloud project.

Ways to set up Application Integration

You can setup Application Integration in your Google Cloud project using the following ways:

• Quick setup

  The Quick setup is a single-click automated process that provisions Application Integration without you having to worry about any setup configurations. See Start quick setup.

• Advanced setup

  The Advanced setup is a manual process where you can choose the encryption method that you want to use for setting up Application Integration in your Google Cloud project. See Start advanced setup.

Start Quick setup

The Quick setup is a single-click operation that automatically provisions Application Integration with the default configurations needed to get you started with the product. The default configurations include enabling APIs (Application Integration API, Secret manager API, and Connectors API), creating a default service account, and using Google-managed encryption key as the encryption method for the selected region.

To start the Quick setup, do the following:

1. Open the Google Cloud console and log in with your Google Cloud account.
2. Go to the Application Integration page.

   Go to Application Integration

3. Select the Google Cloud project in which you want to set up Application Integration.
4. In the Overview page, select the region where you want to deploy Application Integration and click Quick setup.

   

A progress bar indicating the setup progress is displayed. On successful completion, you are redirected to the Integrations list page.

Start Advanced setup

Use the Advanced setup to manually select the encryption method that you'd want to use for provisioning Application Integration in your project.

To start the Advanced setup, do the following:

1. Open the Google Cloud console and log in with your Google Cloud account.
2. Go to the Application Integration page.

   Go to Application Integration

3. Select the Google Cloud project in which you want to set up Application Integration.

   The Overview page appears.

4. Click Advanced setup.

   

   The Set up Application Integration page appears.

   To successfully set up Application Integration, complete the following steps in the Set up Application Integration page:

   1. Enable the required APIs.
   2. Select region and encryption method.

Enable APIs

The Enable APIs section displays the set of APIs that will be enabled for Application Integration as part of the setup process. You can go to the next step only when all the APIs are enabled.

You can seamlessly enable all the required APIs with a single click:

1. Click Enable APIs and allow a few minutes for the required APIs to be enabled automatically.

   The following APIs are enabled as part of this step:

   API Name	Location	Description
   Application Integration API	integrations.googleapis.com	Enables users to create and manage integrations to Google Cloud services and other business applications using the Application Integration interface.
   Secret manager API	secretmanager.googleapis.com	Stores sensitive data such as API keys, passwords, and certificates. Provides convenience while improving security.
   Connectors API	connectors.googleapis.com	Enables users to create and manage connections to Google Cloud services and other business applications using the Integration Connectors interface.

2. Click Next once the Set up Application Integration page page indicates that all the APIs are enabled successfully, as shown in the following figure.

Tip: You can see all the APIs enabled for your project in the Google Cloud Platform APIs & Services Dashboard. The list includes all the APIs enabled for your project, including the ones you just enabled for Application Integration.

Select region and encryption method

In this step, you'll select the region to deploy Application Integration and choose the encryption method for the selected region.

Key Point:

The Application Integration default service account—[e-mail]—is created during this step and is automatically added to your Google Cloud project with the basic IAM roles and permissions.

For more information about the default service account, see Service accounts.

Perform the following steps under the Select region section:

1. Region: Select the regional location where you want to deploy Application Integration resources and store data for your integrations. Data stored in a region is available redundantly across all the zones within that region.

   For information about the supported Application Integration regions, see Application Integration locations.

2. Advanced settings: Optionally, expand and select the encryption method that you want to use in the selected region. You can choose one of the following methods:
   • Google-managed encryption key: This is the default encryption method. Use this method if you want Google to manage the encryption keys that protect your data in the selected region.
   • Customer-managed encryption key (CMEK): Use this method if you want to control and manage the encryption keys that protect your data in the selected region.
     Caution: Enabling CMEK encryption for an Application Integration region cannot be undone. This also means that you can't change/switch the encryption method for a region once CMEK is enabled.
     1. Click Select a customer-managed key and choose an existing CMEK key available in the selected region. You can also create a new key or use the Key resource ID of your existing key.
     2. Click Verify to check if your default service account has cryptokey access to the selected CMEK key.
     3. If the verification for the selected CMEK key fails, click Grant to assign the CryptoKey Encrypter/Decrypter IAM role to the default service account.
        Tip: Granting cryptokey access is an optional step, which means that you can directly click Done to complete the Application Integration setup process. However, if you did not grant cryptokey access, authentication profiles for Application Integration will not be configured, and you'll have to manually grant this access when creating a new authentication profile.
     For more information about CMEK, see Customer-managed encryption keys.
3. Click Done to complete the Application Integration setup.

What's next

• Try the pre-configured sample integration.
• Start a quickstart.
• Get a deeper understanding of the fundamental Application Integration concepts.
• See Application Integration quotas and limits.