概览
本页面详细介绍了可以使用员工身份联合或工作负载身份联合（统称为身份联合）的每个Google Cloud 产品的限制和支持级别。
员工身份联合
借助员工身份联合，您的员工团队（员工、供应商、合作伙伴和其他用户）可以使用身份提供方 (IdP) 访问 Google Cloud 产品。员工可以通过Google Cloud 员工身份联合控制台（也称为控制台 [联合]）、Google Cloud CLI 或Google Cloud API 访问 Google Cloud 。
控制台（联合）、Google Cloud CLI 和 Google Cloud API 的员工身份联合限制列在每个产品的界面和 API 条目中。
工作负载身份联合
借助工作负载身份联合，您的工作负载可以使用工作负载提供的身份（例如，用于 AWS 工作负载的 IAM 角色、用于 GKE 工作负载的 Kubernetes 服务账号，或用于部署流水线的 GitHub 身份）以程序化方式访问Google Cloud 产品。
本文档后面部分每个产品的 Google Cloud API
limitations 条目中列出了 Google Cloud CLI 和Google Cloud API 的工作负载身份联合限制，统称为 API 限制。
VPC Service Controls 用户：由于工作负载的服务边界入站和出站流量规则仅支持服务账号，因此工作负载身份联合工作负载只能通过服务账号模拟访问边界内的资源。了解如何为联合工作负载使用服务账号模拟。
Google Cloud 产品和限制
本部分中的表列出了产品、它们对身份联合的支持级别、限制以及其他信息。
组织
限制表按以下方式组织：
- 产品：产品名称。
- 身份联合发布阶段：是指产品对身份联合的支持的发布阶段。发布阶段并非指产品本身的发布阶段。
- 描述支持的产品的列：
- Google Cloud API：产品的与 API 方法以及访问这些方法的 gcloud CLI 命令关联的身份联合相关限制。
- 控制台（联合）：产品的员工身份联合相关的控制台（联合）界面限制。
- 其他：产品的不属于 Google Cloud API 或控制台（联合）限制的身份联合相关限制。
- 描述不支持的产品的列：
- 替代方案：对于不支持身份联合的产品，此列描述了支持身份联合并提供类似功能的替代产品。
产品和限制列表
发布阶段
| 产品 | 身份联合发布阶段 | 限制 | ||||||
|---|---|---|---|---|---|---|---|---|
Access Approval |
GA |
|
||||||
Access Context Manager |
GA |
|
||||||
Access Transparency |
GA |
|
||||||
客服助手 |
GA |
|
||||||
AlloyDB for PostgreSQL |
GA |
|
||||||
反洗钱 AI |
GA |
|
||||||
API Gateway |
不受支持 |
|
||||||
Apigee |
GA |
|
||||||
Apigee API Hub |
GA |
|
||||||
API 和服务 |
GA |
|
||||||
App Engine |
不受支持 |
|
||||||
App Hub |
GA |
|
||||||
Application Integration |
GA |
|
||||||
Artifact Registry |
GA |
|
||||||
Assured Workloads |
GA |
|
||||||
备份和灾难恢复服务 |
预览版 |
|
||||||
批量 |
GA |
|
||||||
BigQuery |
GA |
|
||||||
Bigtable |
GA |
|
||||||
Binary Authorization |
GA |
|
||||||
区块链分析 |
预览版 |
|
||||||
Blockchain Node Engine |
GA |
|
||||||
碳足迹 |
GA |
|
||||||
Certificate Authority Service |
GA |
|
||||||
Certificate Manager |
GA |
|
||||||
渠道服务 |
GA |
|
||||||
Cloud Asset Inventory |
GA |
|
||||||
Cloud Billing |
GA |
|
||||||
Cloud Build |
GA |
|
||||||
Cloud CDN |
GA |
|
||||||
Cloud Code |
不受支持 |
|
||||||
Cloud Composer |
GA |
|
||||||
Cloud 控制台 |
GA |
|
||||||
Cloud Customer Care |
GA |
|
||||||
Cloud Data Fusion |
GA |
|
||||||
Cloud Deploy |
GA |
|
||||||
Cloud Deployment Manager |
不受支持 |
|
||||||
Cloud DNS |
GA |
|
||||||
Cloud 网域 |
不受支持 |
|
||||||
Cloud Endpoints |
不受支持 |
|
||||||
Cloud 车队路线安排 |
GA |
|
||||||
Cloud Healthcare API |
GA |
|
||||||
Cloud HSM |
GA |
|
||||||
Cloud Intrusion Detection System |
GA |
|
||||||
Cloud Key Management Service |
GA |
|
||||||
Cloud Load Balancing |
GA |
|
||||||
Cloud Logging |
GA |
|
||||||
Cloud Mobile App |
不受支持 |
|
||||||
Cloud Monitoring |
GA |
|
||||||
Cloud NAT |
GA |
|
||||||
Cloud 新一代防火墙 |
GA |
|
||||||
Cloud Profiler |
不受支持 |
|
||||||
Cloud Run |
GA |
|
||||||
Cloud Run functions |
GA |
|
||||||
Cloud Scheduler |
GA |
|
||||||
Cloud Service Mesh |
GA |
|
||||||
Cloud Shell |
不受支持 |
|
||||||
Cloud Source Repositories |
不受支持 |
|
||||||
Cloud SQL |
GA |
|
||||||
Cloud Storage |
GA |
|
||||||
Cloud Talent Solution |
GA |
|
||||||
Cloud Tasks |
GA |
|
||||||
Cloud Trace |
GA |
|
||||||
Cloud Translation |
GA |
|
||||||
Cloud Vision API |
GA |
|
||||||
Cloud Workstations |
GA |
|
||||||
Compute Engine |
GA |
|
||||||
Confidential Space |
GA |
|
||||||
情境感知访问权限 |
GA |
|
||||||
对话分析洞见 |
GA |
|
||||||
Data Catalog |
GA |
|
||||||
Database Migration Service |
GA |
|
||||||
Dataflow |
GA |
|
||||||
Dataform |
GA |
|
||||||
Dataplex |
GA |
|
||||||
Dataproc |
GA |
|
||||||
Dataproc Metastore |
GA |
|
||||||
Datastore |
GA |
|
||||||
Datastream |
GA |
|
||||||
Dialogflow |
GA |
|
||||||
Document AI |
GA |
|
||||||
端点验证 |
不受支持 |
|
||||||
Enterprise Knowledge Graph |
不受支持 |
|
||||||
Error Reporting |
GA |
|
||||||
Eventarc |
GA |
|
||||||
Filestore |
GA |
|
||||||
Firestore |
GA |
|
||||||
Gemini |
GA |
|
||||||
GKE Enterprise |
GA |
|
||||||
Google Cloud Armor |
GA |
|
||||||
Google Cloud Contact Center 即服务 |
GA |
|
||||||
Google Cloud Managed Service for Apache Kafka |
GA |
|
||||||
Google Cloud Marketplace |
GA |
|
||||||
Google Cloud Migration Center |
预览版 |
|
||||||
Google Cloud NetApp Volumes |
GA |
|
||||||
Google Cloud SDK |
GA |
|
||||||
Google Distributed Cloud |
不受支持 |
|
||||||
Google Earth Engine |
不受支持 |
|
||||||
Google Kubernetes Engine |
GA |
|
||||||
Google Security Operations |
GA |
|
||||||
混合连接 |
GA |
|
||||||
Identity and Access Management |
GA |
|
||||||
Identity-Aware Proxy |
预览版 |
|
||||||
Identity Platform |
GA |
|
||||||
Immersive Stream for XR |
GA |
|
||||||
集成连接器 |
GA |
|
||||||
Key Access Justifications |
GA |
|
||||||
Knative serving |
GA |
|
||||||
Live Stream API |
GA |
|
||||||
Looker (Google Cloud Core) |
预览版 |
|
||||||
Looker Studio |
不受支持 |
|
||||||
Managed Service for Microsoft Active Directory |
GA |
|
||||||
媒体 CDN |
GA |
|
||||||
Memorystore |
GA |
|
||||||
Migrate to Containers |
预览版 |
|
||||||
Migrate to Virtual Machines |
GA |
|
||||||
Network Connectivity Center |
GA |
|
||||||
Network Intelligence Center |
GA |
|
||||||
Network Service Tiers |
GA |
|
||||||
组织政策服务 |
GA |
|
||||||
Parallelstore |
GA |
|
||||||
Personalized Service Health |
GA |
|
||||||
Policy Intelligence |
GA |
|
||||||
Private Service Connect |
GA |
|
||||||
Pub/Sub |
GA |
|
||||||
reCAPTCHA |
GA |
|
||||||
Recommender |
GA |
|
||||||
Resource Manager |
GA |
|
||||||
Retail API |
GA |
|
||||||
Secret Manager |
GA |
|
||||||
Secure Source Manager |
GA |
|
||||||
Security Command Center |
GA |
|
||||||
敏感数据保护 |
GA |
|
||||||
无服务器 VPC 访问通道 |
GA |
|
||||||
Service Directory |
预览版 |
|
||||||
Service Infrastructure |
预览版 |
|
||||||
Spanner |
GA |
|
||||||
Speaker ID |
GA |
|
||||||
Speech-to-Text |
GA |
|
||||||
Storage Transfer Service |
GA |
|
||||||
Text-to-Speech |
GA |
|
||||||
Transcoder API |
GA |
|
||||||
Transfer Appliance |
GA |
|
||||||
Translation Hub |
不受支持 |
|
||||||
Vertex AI |
GA |
|
||||||
Vertex AI Agent Builder |
预览版 |
|
||||||
Vertex AI Vision |
GA |
|
||||||
Vertex AI Workbench |
预览版 |
|
||||||
Video Intelligence API |
GA |
|
||||||
Video Stitcher API |
GA |
|
||||||
虚拟私有云 |
GA |
|
||||||
VPC Service Controls |
GA |
|
||||||
Web Risk |
GA |
|
||||||
工作流 |
GA |
|