總覽
本頁面詳細說明各項Google Cloud 產品使用員工身分聯盟或Workload Identity Federation (統稱「身分聯盟」) 時的限制和支援程度。
員工身分聯盟
員工身分聯盟可讓員工、供應商、合作夥伴和其他使用者，透過識別資訊提供者 (IdP) 存取 Google Cloud 產品。員工可以透過 Google Cloud 員工身分聯盟控制台 (也稱為控制台 (已聯合))、Google Cloud CLI 或Google Cloud API 存取。Google Cloud
如要瞭解控制台 (已啟用聯盟)、Google Cloud CLI 和 Google Cloud API 的員工身分聯盟限制，請參閱各產品的 UI 和 API 項目。
Workload Identity 聯盟
工作負載身分聯盟可讓工作負載使用工作負載提供的身分 (例如 AWS 工作負載的 IAM 角色、GKE 工作負載的 Kubernetes 服務帳戶，或是部署管道的 GitHub 身分)，以程式輔助方式存取Google Cloud 產品。
如要瞭解 Google Cloud CLI 和Google Cloud API 的工作負載身分聯盟限制 (統稱「API 限制」)，請參閱本文稍後各產品的 Google Cloud API
limitations 項目。
Google Cloud 產品和限制
本節的表格列出產品、身分同盟支援層級、限制和其他資訊。
機構
限制表格的編排方式如下：
- 產品：產品名稱。
- 身分聯盟推出階段：指產品支援身分聯盟的推出階段。推出階段與產品本身的推出階段無關。
- 說明支援產品的資料欄：
- Google Cloud API：與 API 方法相關聯的產品身分同盟限制，以及存取這些方法的 gcloud CLI 指令。
- 控制台 (聯盟)：產品的員工身分聯盟相關控制台 (聯盟) UI 限制。
- 其他：產品的身分同盟相關限制，但並非 Google Cloud API 或控制台 (同盟) 限制。
- 描述不支援產品的資料欄：
- 替代方案：如果產品不支援身分聯盟，這個資料欄會說明支援身分聯盟且提供類似功能的替代產品。
產品清單和限制
推出階段
| 產品 | 身分聯盟推出階段 | 限制 | ||||||
|---|---|---|---|---|---|---|---|---|
存取權核准 |
GA |
|
||||||
Access Context Manager |
GA |
|
||||||
資料存取透明化控管機制 |
GA |
|
||||||
Agent Assist |
GA |
|
||||||
PostgreSQL 適用的 AlloyDB |
GA |
|
||||||
Anti Money Laundering AI |
GA |
|
||||||
API Gateway |
GA |
|
||||||
Apigee |
GA |
|
||||||
Apigee API Hub |
GA |
|
||||||
API 和服務 |
GA |
|
||||||
App Engine |
不支援 |
|
||||||
App Hub |
GA |
|
||||||
Application Integration |
GA |
|
||||||
Artifact Registry |
GA |
|
||||||
Assured Workloads |
GA |
|
||||||
備份與 DR 服務 |
預覽 |
|
||||||
Batch |
GA |
|
||||||
BigQuery |
GA |
|
||||||
Bigtable |
GA |
|
||||||
二進位授權 |
GA |
|
||||||
區塊鏈分析 |
GA |
|
||||||
Blockchain Node Engine |
GA |
|
||||||
碳足跡 |
GA |
|
||||||
憑證授權單位服務 |
GA |
|
||||||
Certificate Manager |
GA |
|
||||||
頻道服務 |
GA |
|
||||||
Cloud Asset Inventory |
GA |
|
||||||
Cloud Billing |
GA |
|
||||||
Cloud Build |
GA |
|
||||||
Cloud CDN |
GA |
|
||||||
Cloud Code |
不支援 |
|
||||||
Cloud Composer |
GA |
|
||||||
Cloud 控制台 |
GA |
|
||||||
Cloud Customer Care |
GA |
|
||||||
Cloud Data Fusion |
GA |
|
||||||
Cloud Deploy |
GA |
|
||||||
Cloud Deployment Manager |
不支援 |
|
||||||
Cloud DNS |
GA |
|
||||||
Cloud Domains |
GA |
|
||||||
Cloud Endpoints |
不支援 |
|
||||||
Cloud Fleet Routing |
GA |
|
||||||
Cloud Healthcare API |
GA |
|
||||||
Cloud HSM |
GA |
|
||||||
Cloud 入侵偵測系統 |
GA |
|
||||||
Cloud Key Management Service |
GA |
|
||||||
Cloud Load Balancing |
GA |
|
||||||
Cloud Logging |
GA |
|
||||||
Cloud Mobile App |
不支援 |
|
||||||
Cloud Monitoring |
GA |
|
||||||
Cloud NAT |
GA |
|
||||||
Cloud Next Generation Firewall |
GA |
|
||||||
Cloud Profiler |
不支援 |
|
||||||
Cloud Run |
GA |
|
||||||
Cloud Run functions |
GA |
|
||||||
Cloud Scheduler |
GA |
|
||||||
Cloud Service Mesh |
GA |
|
||||||
Cloud Shell |
不支援 |
|
||||||
Cloud Source Repositories |
不支援 |
|
||||||
Cloud SQL |
GA |
|
||||||
Cloud Storage |
GA |
|
||||||
Cloud Talent Solution |
GA |
|
||||||
Cloud Tasks |
GA |
|
||||||
Cloud Trace |
GA |
|
||||||
Cloud Translation |
GA |
|
||||||
Cloud Vision API |
GA |
|
||||||
Cloud Workstations |
GA |
|
||||||
Compute Engine |
GA |
|
||||||
機密空間 |
GA |
|
||||||
情境感知存取權 |
GA |
|
||||||
對話式洞察 |
GA |
|
||||||
Data Catalog |
GA |
|
||||||
資料庫移轉服務 |
GA |
|
||||||
Dataflow |
GA |
|
||||||
Dataform |
GA |
|
||||||
Dataplex Universal Catalog |
GA |
|
||||||
Dataproc |
GA |
|
||||||
Dataproc Metastore |
GA |
|
||||||
Datastore |
GA |
|
||||||
Datastream |
GA |
|
||||||
Dialogflow |
GA |
|
||||||
Document AI |
GA |
|
||||||
端點驗證 |
不支援 |
|
||||||
Enterprise Knowledge Graph |
不支援 |
|
||||||
錯誤報告 |
GA |
|
||||||
Eventarc |
GA |
|
||||||
Filestore |
GA |
|
||||||
Firestore |
GA |
|
||||||
Gemini |
GA |
|
||||||
GKE Enterprise |
GA |
|
||||||
Google Cloud Armor |
GA |
|
||||||
Google Cloud Contact Center as a Service |
GA |
|
||||||
Google Cloud Managed Service for Apache Kafka |
GA |
|
||||||
Google Cloud Marketplace |
GA |
|
||||||
Google Cloud 遷移中心 |
預覽 |
|
||||||
Google Cloud NetApp Volumes |
GA |
|
||||||
Google Cloud SDK |
GA |
|
||||||
Google Distributed Cloud |
不支援 |
|
||||||
Google Earth Engine |
不支援 |
|
||||||
Google Kubernetes Engine |
GA |
|
||||||
Google Security Operations |
GA |
|
||||||
混合式連線 |
GA |
|
||||||
身分與存取權管理 |
GA |
|
||||||
Identity-Aware Proxy |
GA |
|
||||||
Identity Platform |
GA |
|
||||||
Immersive Stream for XR |
GA |
|
||||||
Integration Connectors |
GA |
|
||||||
金鑰存取依據 |
GA |
|
||||||
Knative serving |
GA |
|
||||||
Live Stream API |
GA |
|
||||||
Looker (Google Cloud Core) |
不支援 |
|
||||||
Looker Studio |
不支援 |
|
||||||
Managed Service for Microsoft Active Directory |
GA |
|
||||||
Media CDN |
GA |
|
||||||
Memorystore |
GA |
|
||||||
Migrate to Containers |
預覽 |
|
||||||
Migrate to Virtual Machines |
GA |
|
||||||
Network Connectivity Center |
GA |
|
||||||
Network Intelligence Center |
GA |
|
||||||
網路服務級別 |
GA |
|
||||||
機構政策服務 |
GA |
|
||||||
Parallelstore |
GA |
|
||||||
Personalized Service Health |
GA |
|
||||||
Policy Intelligence |
GA |
|
||||||
Private Service Connect |
GA |
|
||||||
Privileged Access Manager |
GA |
|
||||||
Pub/Sub |
GA |
|
||||||
reCAPTCHA |
GA |
|
||||||
建議工具 |
GA |
|
||||||
Resource Manager |
GA |
|
||||||
Retail API |
GA |
|
||||||
Secret Manager |
GA |
|
||||||
Secure Source Manager |
GA |
|
||||||
Security Command Center |
GA |
|
||||||
Sensitive Data Protection |
GA |
|
||||||
無伺服器虛擬私有雲存取 |
GA |
|
||||||
Service Directory |
預覽 |
|
||||||
Service Infrastructure |
預覽 |
|
||||||
Spanner |
GA |
|
||||||
Speaker ID |
GA |
|
||||||
Speech-to-Text |
GA |
|
||||||
Storage 移轉服務 |
GA |
|
||||||
Text-to-Speech |
GA |
|
||||||
Transcoder API |
GA |
|
||||||
Transfer Appliance |
GA |
|
||||||
Translation Hub |
不支援 |
|
||||||
Vertex AI |
GA |
|
||||||
Vertex AI Agent Builder |
預覽 |
|
||||||
Vertex AI Vision |
GA |
|
||||||
Vertex AI Workbench |
GA |
|
||||||
Video Intelligence API |
GA |
|
||||||
Video Stitcher API |
GA |
|
||||||
虛擬私有雲 |
GA |
|
||||||
VPC Service Controls |
GA |
|
||||||
Web Risk |
GA |
|
||||||
Workflows |
GA |
|
||||||
Workload Manager |
GA |
|