{"id":57441,"date":"2025-04-09T15:30:40","date_gmt":"2025-04-09T07:30:40","guid":{"rendered":"https:\/\/masterconcept.ai\/?p=57441"},"modified":"2025-06-13T15:19:23","modified_gmt":"2025-06-13T07:19:23","slug":"gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account","status":"publish","type":"post","link":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/","title":{"rendered":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u4e0a\u6b21\u5728 <a href=\"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/google-cloud-zh-hant\/gcp-kol-x-master-concept-introduction-to-google-cloud-iam-roles-and-permission-control\/\" target=\"_blank\" rel=\"noopener\" title=\"\">\u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b<\/a>\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e00\u3001Service Account \u7c21\u4ecb<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728 GCP \u5404\u7a2e\u5e95\u5c64\u904b\u4f5c\u7576\u4e2d\uff0c\u6709\u5f88\u591a\u6703\u4ee3\u66ff\u6211\u5011\u4eba\u985e\u57f7\u884c\u7684\u670d\u52d9\uff0c\u4f8b\u5982 Compute Engine \u7684\u865b\u64ec\u6a5f\u5668\uff0c\u9019\u4e9b\u670d\u52d9\u8981\u52d5\u8d77\u4f86\uff0c\u5c31\u8981\u7d66\u5b83\u5011\u4e00\u500b\u8eab\u4efd\uff0c\u5c31\u662f&nbsp; Service Account\uff0c\u4e26\u4e14\u8981\u8b93\u5b83\u5011\u6709\u6b0a\u9650\u5b58\u53d6\u5176\u4ed6\u670d\u52d9\uff0c\u4f8b\u5982 Cloud Storage \u6216 BigQuery\uff0c\u5c31\u8981\u5728 IAM \u6388\u4e88\u89d2\u8272\u7d66 Service Account\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f9e\u958b\u767c\u7684\u89d2\u5ea6\u4f86\u8aaa\uff0cService Account \u5c31\u662f\u7a0b\u5f0f\u5c08\u7528\u7684\u5e33\u6236\uff0c\u4ee3\u8868\u7a0b\u5f0f\u672c\u4eba\u7684\u8eab\u4efd\u3002\u91cd\u9ede\u662f\uff0c\u7a0b\u5f0f\u662f 24 \u5c0f\u6642\u5168\u5e74\u7121\u4f11\u5728\u8dd1\u7684\uff0c\u5b83\u64cd\u4f5c GCP \u7684\u6b21\u6578\u9060\u9060\u8d85\u904e\u6211\u5011\u4eba\u985e\uff0c\u6240\u4ee5\u7ba1\u7406\u597d Service Account \u5f88\u660e\u986f\u662f\u66f4\u70ba\u91cd\u8981\u7684\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXdRgmVG1fnJVPIaFNI-JnNSVYm7SManGKoYlwsGgcdLscauj0p63BSHufm95xu1imzEc4dYy5cYkdtPOwl2kJRL9TCfDAmfRDOf12WNK2O1PC9-6IIhwoBot4pZDC3itiAxyzwbjw?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 01 Service Account \u904b\u4f5c\u793a\u610f\u5716\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXdRgmVG1fnJVPIaFNI-JnNSVYm7SManGKoYlwsGgcdLscauj0p63BSHufm95xu1imzEc4dYy5cYkdtPOwl2kJRL9TCfDAmfRDOf12WNK2O1PC9-6IIhwoBot4pZDC3itiAxyzwbjw?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 01 Service Account \u904b\u4f5c\u793a\u610f\u5716\"><\/noscript><figcaption class=\"wp-element-caption\">01 Service Account \u904b\u4f5c\u793a\u610f\u5716<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u6771\u6771\u8001\u5e2b\u81ea\u884c\u7e6a\u88fd<\/figcaption><\/figure>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u548c\u4eba\u985e\u7684\u5e33\u865f\u4e0d\u540c\u7684\u662f\uff0cService Account \u662f\u6c92\u6709\u5bc6\u78bc\u7684\uff0c\u5b83\u662f\u653e\u5728\u7a0b\u5f0f\u88e1\u4f7f\u7528\uff0c\u5178\u578b\u7684\u65b9\u6cd5\u5c31\u662f\u7522\u751f Service Account Key\uff0c\u5b83\u662f\u4e00\u500b Json \u6587\u5b57\u6a94\uff0c\u4e0a\u9762\u8a18\u9304 Service Account \u6240\u5728\u7684 GCP \u5c08\u6848\u3001Key \u7684 ID\u3001Key \u672c\u8eab RSA 2048 \u7684\u503c\uff08\u53ef\u8996\u70ba\u5bc6\u78bc\uff09\u7b49\u7b49\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5011\u6703\u5728\u7a0b\u5f0f\u78bc\u88e1\u6307\u5b9a Key \u7684\u5b58\u53d6\u4f4d\u7f6e\uff0c\u4f46\u901a\u5e38\u6211\u5011\u4e0d\u6703\u628a Key \u76f4\u63a5\u653e\u5728\u7a0b\u5f0f\u78bc\u7576\u4e2d\uff08\u592a\u5371\u96aa\u4e86\uff09\uff0c\u800c\u662f\u53bb\u5916\u90e8\u67d0\u500b\u5b89\u5168\u7684\u5730\u65b9\u8b80\u53d6\u5230 Key\uff0c\u5c31\u53ef\u4ee5\u53bb\u547c\u53eb GCP \u4e0a\u7684\u5404\u9805\u670d\u52d9\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u91cd\u9ede\u5c31\u5728\u9019\u88e1\uff0c\u4e00\u500b Service Account \u53ef\u4ee5\u751f\u6210\u5f88\u591a Key\uff0c\u800c\u9019\u4e9b Key \u90fd\u88ab\u4f7f\u7528\u8005\u4e0b\u8f09\u5230\u5404\u8655\uff0c\u6216\u76f4\u63a5\u5b58\u5230\u4e3b\u6a5f\u7684\u67d0\u500b\u5730\u65b9\uff0c\u53cd\u800c\u589e\u52a0\u4e86\u5e33\u6236\u88ab\u76dc\u7684\u98a8\u96aa\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXeHwFOz2mJWSIoDhjZA7rsLsQtsNrzyk-W-DVnqyZ3V1UI4ebITrjH4JWG_7blCGPX3AfpcN1p5uT0GMU8qZuyeXu02xPP70fHAk2HcLdJTWKxi-r96r2TGMrgxyeLab12nOQ4l_A?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 02 \u4e00\u500b Service Account \u53ef\u4ee5\u7522\u751f\u591a\u500b Key\u00a0\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXeHwFOz2mJWSIoDhjZA7rsLsQtsNrzyk-W-DVnqyZ3V1UI4ebITrjH4JWG_7blCGPX3AfpcN1p5uT0GMU8qZuyeXu02xPP70fHAk2HcLdJTWKxi-r96r2TGMrgxyeLab12nOQ4l_A?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 02 \u4e00\u500b Service Account \u53ef\u4ee5\u7522\u751f\u591a\u500b Key\u00a0\"><\/noscript><figcaption class=\"wp-element-caption\">02 \u4e00\u500b Service Account \u53ef\u4ee5\u7522\u751f\u591a\u500b Key&nbsp;<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/console.cloud.google.com\/\" target=\"_blank\" rel=\"noopener\" title=\"\">GCP Console<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u842c\u4e00\u6b0a\u9650\u8a2d\u5b9a\u592a\u5927\uff0c\u800c Key \u53c8\u88ab\u62ff\u8d70\uff0c\u5c31\u50cf\u4f60\u7684\u5e33\u6236\u88ab\u76dc\uff0c\u99ed\u5ba2\u53ef\u4ee5\u5728\u4f60\u7684\u5c08\u6848\u74b0\u5883\u5efa\u7acb\u5927\u91cf\u6a5f\u5668\u505a\u70ba\u6bad\u5c4d\u96fb\u8166\uff0c\u6216\u662f\u6316\u7926\uff0c\u4e00\u958b\u5c31\u662f\u5e7e\u5343\u5e7e\u842c\u53f0\uff0c\u5c0e\u81f4\u4f60\u5728\u5e6b\u99ed\u5ba2\u652f\u4ed8 GCP \u7684\u8cbb\u7528\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u56e0\u6b64 Service Account \u548c Key \u52d9\u5fc5\u597d\u597d\u4fdd\u7ba1\uff0c\u4ee5\u514d\u906d\u6709\u5fc3\u4eba\u58eb\u6feb\u7528\u3002<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e8c\u3001\u4f7f\u7528 Service Account \u7684\u5c0f\u6280\u5de7<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ee5\u4e0b\u6211\u5011\u4f9d\u7167\u7cfb\u7d71\u958b\u767c\u7684\u6d41\u7a0b\uff0c\u4f86\u9010\u6b65\u8aaa\u660e\u4f7f\u7528 Service Account \u7684\u5c0f\u6280\u5de7\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">(\u4e00) \u7cfb\u7d71\u8a2d\u8a08\u968e\u6bb5\u7684\u6700\u4f73\u5b89\u5168\u5be6\u52d9<\/h3>\n\n\n\n<h3 class=\"wp-block-heading\">1. \u5145\u5206\u5229\u7528 GCP \u5167\u5efa\u7684\u8eab\u4efd\u9a57\u8b49\u6a5f\u5236&nbsp;<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">(1) \u5728 GCP \u5167\u90e8\u904b\u884c\u7684\u8cc7\u6e90<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u91dd\u5c0d\u904b\u4f5c\u61c9\u7528\u7a0b\u5f0f\u7684\u670d\u52d9\u5982 Compute Engine\u3001App Engine \u548c Cloud Run\uff0c\u4e00\u5b9a\u8981\u70ba\u5b83\u5011\u8a2d\u5b9a\u5c08\u5c6c\u7684 Service Account\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9996\u5148 Service Account \u5728\u9019\u4e9b\u670d\u52d9\u7576\u4e2d\u904b\u4f5c\uff0c\u4e0d\u9700\u8981\u7522\u751f Service Account Key \u53bb\u8ddf\u5176\u4ed6 GCP \u670d\u52d9\u4e92\u52d5\uff0c\u5149\u662f\u9019\u4e00\u9ede\uff0c\u5c31\u76f4\u63a5\u514d\u9664\u4e86\u91d1\u9470\u5916\u6d29\u7684\u98a8\u96aa\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u800c\u7531\u65bc\u50cf Compute Engine \u548c App Engine \u9810\u8a2d\u7684 Service Account \u5177\u6709 Editor \u89d2\u8272\uff0c\u6b0a\u9650\u975e\u5e38\u5927\uff0c\u6240\u4ee5\u624d\u8981\u53e6\u5916\u8a2d\u5b9a\u5c08\u5c6c\u7684 Service Account\uff0c\u4e26\u4e14\u7d66\u5b83\u5011\u8a2d\u5b9a\u300c\u6700\u5c0f\u4e14\u5fc5\u8981\u7684\u6b0a\u9650\u300d\uff0c\u5c31\u662f\u6240\u8b02\u6700\u5c0f\u6b0a\u9650\u539f\u5247 \uff08Principle of Least Privilege\uff09\uff0c\u5373\u4f7f\u8a72\u670d\u52d9\u88ab\u76dc\u7528\uff0c\u4e5f\u80fd\u900f\u904e\u6b0a\u9650\u4f86\u9650\u5236\u5b83\u7684\u6d3b\u52d5\u7bc4\u570d\uff0c\u964d\u4f4e\u99ed\u5ba2\u5165\u4fb5\u5e36\u4f86\u7684\u7834\u58de\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXfg22UlouOtsctdlAJGNaBI5GDe5vf0FTQSaGE3esusnCbMd2K4ffj7tzP2pGFPxlXx9Md6mwRMgfqeZA9LWHSWN_M9csOleDUt3VQQYxOyc5fD5KaCIDnUjZCxatMQ7lqxyWOopA?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 03 Compute Engine \u548c App Engine \u9810\u8a2d\u7684 Service Account\u00a0\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXfg22UlouOtsctdlAJGNaBI5GDe5vf0FTQSaGE3esusnCbMd2K4ffj7tzP2pGFPxlXx9Md6mwRMgfqeZA9LWHSWN_M9csOleDUt3VQQYxOyc5fD5KaCIDnUjZCxatMQ7lqxyWOopA?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 03 Compute Engine \u548c App Engine \u9810\u8a2d\u7684 Service Account\u00a0\n\"><\/noscript><figcaption class=\"wp-element-caption\">03 Compute Engine \u548c App Engine \u9810\u8a2d\u7684 Service Account&nbsp;<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/console.cloud.google.com\/\">GCP Console<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u800c\u4e14\u6bcf\u500b\u670d\u52d9\u7528\u5404\u81ea\u7684 Service Account \uff0c\u53ef\u4ee5\u78ba\u4fdd\u6bcf\u4e00\u652f\u7a0b\u5f0f\u90fd\u662f\u9694\u96e2\u904b\u4f5c\u7684\uff0c\u842c\u4e00\u6709\u500b\u670d\u52d9\u906d\u5230\u5165\u4fb5\uff0c\u4e5f\u4e0d\u6703\u5f71\u97ff\u5230\u5176\u4ed6\u670d\u52d9\u7684\u6b63\u5e38\u904b\u4f5c\uff0c\u907f\u514d\u300c\u727d\u4e00\u9aee\u800c\u52d5\u5168\u8eab\u300d\u7684\u98a8\u96aa\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">(2) \u5bb9\u5668\u5316\u74b0\u5883\u7684\u89e3\u6c7a\u65b9\u6848<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Google Kubernetes Engine (GKE) \u63d0\u4f9b Workload Identity Federation for GKE\u3002\u8b93 Kubernetes \u670d\u52d9\u5e33\u865f\u80fd\u5920\u7121\u7e2b\u5730\u5c0d\u61c9\u5230 GCP \u670d\u52d9\u5e33\u865f\uff0c\u5e36\u4f86\u6975\u5927\u4fbf\u5229\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u900f\u904e\u9019\u7a2e\u65b9\u5f0f\uff0c\u5bb9\u5668\u5316\u61c9\u7528\u7a0b\u5f0f\u53ef\u4ee5\u76f4\u63a5\u4f7f\u7528 GCP \u7684\u5404\u7a2e\u670d\u52d9\uff0c\u800c\u4e0d\u9700\u8981\u5728\u7cfb\u7d71\u4e2d\u5132\u5b58 Service Account Key\u3002\u7c21\u5316\u4e86\u6b0a\u9650\u7ba1\u7406\u6d41\u7a0b\uff0c\u4e5f\u986f\u8457\u63d0\u5347\u4e86\u7cfb\u7d71\u7684\u5b89\u5168\u6027\uff0c\u70ba\u958b\u767c\u8005\u548c\u7dad\u904b\u4eba\u54e1\u63d0\u4f9b\u4e86\u4e00\u500b\u66f4\u52a0\u65b9\u4fbf\u4e14\u5b89\u5168\u7684\u96f2\u7aef\u904b\u7b97\u74b0\u5883\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">(3) \u5728 GCP \u5916\u90e8\u7684\u7cfb\u7d71\u4e2d\u7684\u5275\u65b0\u65b9\u6cd5<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u540c\u4e0a Workload Identity Federation \u4e0d\u53ea\u7528\u65bc GKE\uff0c\u4e5f\u80fd\u8b93\u4e0d\u5728 GCP \u5167\u90e8\u7684\u7cfb\u7d71\u4e5f\u80fd\u8f15\u9b06\u5b58\u53d6 GCP \u8cc7\u6e90\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u9805\u529f\u80fd\u8b93\u5728 AWS\u3001Azure \u6216\u662f\u516c\u53f8\u81ea\u5df1\u6a5f\u623f\u7684\u61c9\u7528\u7a0b\u5f0f\uff0c\u53ef\u4ee5\u4f7f\u7528\u5b83\u5011\u539f\u672c\u7684\u8eab\u4efd\u8a8d\u8b49\u6a5f\u5236\u4f86\u5b58\u53d6 GCP \u7684\u5404\u7a2e\u670d\u52d9\uff0c\u4e0d\u9700\u8981\u984d\u5916\u7ba1\u7406\u548c\u5132\u5b58 GCP \u7684 Service Account Key\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u6a23\u7684\u8a2d\u8a08\u5927\u5e45\u6e1b\u5c11\u4e86\u5728\u591a\u96f2\u74b0\u5883\u4e0b\u7ba1\u7406\u6191\u8b49\u7684\u8907\u96dc\u5ea6\uff0c\u8b93\u8de8\u96f2\u670d\u52d9\u7684\u6574\u5408\u8b8a\u5f97\u66f4\u52a0\u7c21\u55ae\u5b89\u5168\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7d9c\u5408\u4ee5\u4e0a\u4e09\u7a2e\u89e3\u6c7a\u65b9\u6cd5\uff0c\u4f60\u53ef\u4ee5\u770b\u51fa\u4f86\uff0c\u5c31\u662f\u76e1\u91cf\u4e0d\u4f7f\u7528\u5230 Service Account Key\uff0c\u9593\u63a5\u5730\u6e1b\u5c11\u91d1\u9470\u5916\u6d29\u7684\u98a8\u96aa\u3002<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">2. \u5efa\u7acb\u6e05\u6670\u7684 Service Account \u7b56\u7565<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">(1) \u4e86\u89e3\u5404\u7a2e\u8eab\u4efd\u9a57\u8b49\u9078\u9805\u7684\u512a\u7f3a\u9ede<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">A. \u5f9e\u61c9\u7528\u7a0b\u5f0f\u9023\u63a5 GCP \u5404\u9805\u670d\u52d9<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u53ef\u4ee5\u8a2d\u5b9a\u300c\u61c9\u7528\u7a0b\u5f0f\u9810\u8a2d\u6191\u8b49\u300d(Application Default Credentials\uff1bADC)\uff0c\u7136\u5f8c\u4f7f\u7528\u5c0d\u61c9\u7684\u7a0b\u5f0f\u8a9e\u8a00\u51fd\u5f0f\u5eab\uff0c\u9019\u662f\u6700\u5e38\u898b\u7684\u958b\u767c\u65b9\u5f0f\uff0c\u9069\u5408\u5927\u591a\u6578\u61c9\u7528\u7a0b\u5f0f\u958b\u767c\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">B. \u9700\u8981\u4f7f\u7528 ID Token \u7684\u60c5\u6cc1<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ADC \u4e3b\u8981\u662f\u8b49\u660e\u300c\u9019\u500b\u61c9\u7528\u7a0b\u5f0f\u6709\u6b0a\u9650\u4f7f\u7528 Google Cloud \u8cc7\u6e90\u300d\uff0c\u4f46\u4e0d\u77e5\u9053\u8eab\u4efd\uff0cID Token\uff1a\u4e3b\u8981\u662f\u8b49\u660e\u300c\u9019\u500b\u4eba\/\u4f7f\u7528\u8005\u662f\u8ab0\u300d\uff0c\u5305\u542b\u4f7f\u7528\u8005\u8eab\u5206\u8cc7\u8a0a\u3002\u7576\u4f60\u9700\u8981\u4f7f\u7528\u8005\u5c64\u7d1a\u7684\u8eab\u5206\u9a57\u8b49\uff0c\u4e0d\u53ea\u662f\u300c\u61c9\u7528\u7a0b\u5f0f\u6709\u6b0a\u9650\u300d\u800c\u5df2\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">C. \u5be6\u4f5c\u4f7f\u7528\u8005\u8eab\u4efd\u9a57\u8b49<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7576\u4f60\u9700\u8981\u8b93\u4f60\u7684\u61c9\u7528\u7a0b\u5f0f\u7684\u4f7f\u7528\u8005\u80fd\u5920\u767b\u5165\u4e26\u5b58\u53d6 Google \u670d\u52d9\uff0c\u53ef\u4ee5\u67e5\u770b<a href=\"https:\/\/cloud.google.com\/docs\/authentication\/use-cases#app-users\">\u9019\u4efd\u6587\u4ef6<\/a>\uff0c\u88e1\u9762\u6709\u4e0d\u540c\u65b9\u5f0f\u7684\u6bd4\u8f03\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">D. \u5728\u672c\u6a5f\u74b0\u5883\u8a66\u7528\u547d\u4ee4\u5217\uff08Command Line\uff09\u5de5\u5177<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u53ef\u4ee5\u5728\u81ea\u5df1\u96fb\u8166\u4e0a\u5b89\u88dd gcloud CLI\uff0c\u8f38\u5165\u9a57\u8b49\u7684\u6307\u4ee4\u4e26\u78ba\u8a8d\u8eab\u4efd\u5f8c\uff0c\u5c31\u53ef\u4ee5\u8f38\u5165\u5404\u7a2e\u6307\u4ee4\u4f86\u64cd\u4f5c\u5404\u9805 GCP \u7684\u670d\u52d9\u548c\u8cc7\u6e90\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">E. \u5728\u672c\u6a5f\u74b0\u5883\u6e2c\u8a66 API<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u4e0d\u9700\u8981\u7279\u5225\u6e96\u5099\u4e00\u500b\u5beb\u7a0b\u5f0f\u7684\u74b0\u5883\uff0c\u4f60\u53ef\u4ee5\u76f4\u63a5\u7528\u50cf\u662f curl \u7684\u6307\u4ee4\u4f86\u547c\u53eb REST API\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">F. \u6e2c\u8a66 GCP \u5b98\u7db2\u63d0\u4f9b\u7684\u7bc4\u4f8b\u7a0b\u5f0f\u78bc<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u53ef\u4ee5\u5728\u672c\u6a5f\u8a2d\u5b9a ADC \u6191\u8b49\uff0c\u4e26\u5b89\u88dd\u76f8\u95dc\u7684\u5ba2\u6236\u7aef\u51fd\u5f0f\u5eab\uff08 Client Library\uff09\uff0c\u5ba2\u6236\u7aef\u51fd\u5f0f\u5eab\u6703\u81ea\u52d5\u627e\u5230\u4f60\u7684\u6191\u8b49\uff0c\u8b93\u4f60\u80fd\u76f4\u63a5\u57f7\u884c\u7a0b\u5f0f\u78bc\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728 GCP \u7684\u5b98\u65b9\u6587\u4ef6\u4e2d\uff0c\u5df2\u7d93\u6574\u7406\u597d<a href=\"https:\/\/cloud.google.com\/docs\/authentication#quick-links\">\u5404\u7a2e\u8eab\u5206\u9a57\u8b49\u7684\u76f8\u95dc\u8aaa\u660e<\/a>\uff0c\u4f60\u6703\u767c\u73fe\u6709\u5f88\u591a\u60c5\u6cc1\u4e0d\u4e00\u5b9a\u8981\u4f7f\u7528 Service Account \u548c Key\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">(2) \u5efa\u7acb\u8a55\u4f30\u6d41\u7a0b<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u70ba\u7279\u5b9a\u60c5\u5883\u9078\u64c7\u6700\u5408\u9069\u7684\u8eab\u4efd\u9a57\u8b49\u65b9\u5f0f\uff0c\u53ef\u4ee5\u53c3\u8003<a href=\"https:\/\/cloud.google.com\/docs\/authentication#auth-decision-tree\">\u9019\u500b\u6d41\u7a0b<\/a>\uff0c\u4f60\u4e00\u6a23\u6703\u767c\u73fe\uff0c\u5728\u5224\u65b7\u7684\u904e\u7a0b\u7576\u4e2d\uff0c\u5f88\u591a\u60c5\u5883\u90fd\u4e0d\u4e00\u5b9a\u8981\u7528\u5230 Service Account\uff0c\u771f\u7684\u662f\u6c92\u6709\u5176\u4ed6\u8fa6\u6cd5\u4e86\uff0c\u624d\u7528 Service Account\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">(3) \u4f7f\u7528\u6a5f\u69cb\u653f\u7b56 (Organization Policy)&nbsp;<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Organization Policy \u63d0\u4f9b\u4e86\u7ba1\u7406 Service Account \u548c Key \u7684\u591a\u7a2e\u653f\u7b56\u63a7\u5236\u5982\u4e0b\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>iam.disableServiceAccountCreation<\/strong> &#8211; \u7981\u6b62\u5728\u5c08\u6848\u4e2d\u5275\u5efa\u65b0\u7684 Service Account<\/li>\n\n\n\n<li><strong>iam.disableServiceAccountKeyCreation<\/strong> &#8211; \u7981\u6b62\u70ba\u670d\u52d9\u5e33\u6236\u5275\u5efa\u65b0\u7684 Service Account Key<\/li>\n\n\n\n<li><strong>iam.disableServiceAccountKeyUpload<\/strong> &#8211; \u7981\u6b62\u4e0a\u50b3\u5916\u90e8\u751f\u6210\u7684 Service Account Key<\/li>\n\n\n\n<li><strong>iam.serviceAccountKeyExpiryHours<\/strong> &#8211; \u5f37\u5236\u8a2d\u5b9a Service Account Key \u5230\u671f\u6642\u9593<\/li>\n\n\n\n<li><strong>iam.allowedPolicyMemberDomains<\/strong> &#8211; \u9650\u5236\u53ef\u4ee5\u88ab\u6388\u4e88 IAM \u89d2\u8272\u7684\u5e33\u865f\u6240\u5c6c\u7684\u7db2\u57df\uff0c\u5305\u62ec\u670d\u52d9\u5e33\u6236\u7684\u7db2\u57df\u3002<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\u6a5f\u69cb\u653f\u7b56\u505a\u5230\u4e86\u5e7e\u4ef6\u91cd\u8981\u7684\u4e8b\u60c5\uff1a\u5b83\u5011\u9632\u6b62\u4eba\u5011\u4e82\u5efa\u7acb\u6c92\u4eba\u76e3\u63a7\u7684\u670d\u52d9\u5e33\u6236\uff0c\u9019\u6a23\u53ef\u4ee5\u907f\u514d\u8cc7\u6e90\u4f7f\u7528\u6df7\u4e82\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b83\u5011\u4e5f\u9650\u5236 Key \u7684\u5efa\u7acb\uff0c\u4e26\u8981\u6c42\u5b9a\u671f\u66f4\u63db Key\uff0c\u5927\u5e45\u964d\u4f4e\u4e86 Key \u88ab\u76dc\u7528\u7684\u98a8\u96aa\u3002\u9019\u4e9b\u5de5\u5177\u9084\u8b93\u7ba1\u7406\u54e1\u80fd\u6e05\u695a\u770b\u5230\u8ab0\u5728\u7528\u4ec0\u9ebc\u670d\u52d9\u5e33\u6236\u3001\u6709\u4ec0\u9ebc\u6b0a\u9650\uff0c\u78ba\u4fdd\u516c\u53f8\u7b26\u5408\u5404\u7a2e\u898f\u5b9a\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6700\u91cd\u8981\u7684\u662f\uff0c\u9019\u4e9b\u653f\u7b56\u5e6b\u52a9\u78ba\u4fdd\u53ea\u6709\u771f\u6b63\u9700\u8981\u7684\u670d\u52d9\u5e33\u6236\u6703\u88ab\u5efa\u7acb\uff0c\u6e1b\u5c11\u4e86\u53ef\u80fd\u88ab\u653b\u64ca\u7684\u5730\u65b9\u3002\u4f60\u53ef\u4ee5\u6839\u64da\u4e0d\u540c\u90e8\u9580\u6216\u5c08\u6848\u7684\u9700\u6c42\uff0c\u9748\u6d3b\u8a2d\u5b9a\u9019\u4e9b\u898f\u5247\u7684\u56b4\u683c\u7a0b\u5ea6\uff0c\u65e2\u4fdd\u969c\u5b89\u5168\u53c8\u4e0d\u6703\u59a8\u7919\u6b63\u5e38\u5de5\u4f5c\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXejoGXTney-_yPBjU7FLgvzZpfrzE7Rut98ZA814Y4qjNilwwgvMDH2teOtaY0IFtS41Vf4JF1ntBG44mDRUlJGjtJCvjVn2zZVJ7QWhDKRfipi84L3Rr3EFEjPmLxYQel_cTISlw?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 03 \u5404 Service Account \u76f8\u95dc\u7684 Org Policy\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXejoGXTney-_yPBjU7FLgvzZpfrzE7Rut98ZA814Y4qjNilwwgvMDH2teOtaY0IFtS41Vf4JF1ntBG44mDRUlJGjtJCvjVn2zZVJ7QWhDKRfipi84L3Rr3EFEjPmLxYQel_cTISlw?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 03 \u5404 Service Account \u76f8\u95dc\u7684 Org Policy\n\"><\/noscript><figcaption class=\"wp-element-caption\">03 \u5404 Service Account \u76f8\u95dc\u7684 Org Policy<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/console.cloud.google.com\/\" target=\"_blank\" rel=\"noopener\" title=\"\">GCP Console<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">(\u4e8c) \u958b\u767c\u8207\u6e2c\u8a66\u968e\u6bb5\u6280\u5de7<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">1. \u4f7f\u7528\u5c08\u5c6c\u7684 Service Account \u63d0\u9ad8\u53ef\u89c0\u5bdf\u6027<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u70ba\u6bcf\u500b\u61c9\u7528\u7a0b\u5f0f\u5efa\u7acb\u7368\u7acb\u7684\u670d\u52d9\u5e33\u6236\uff0c\u4e26\u5206\u914d\u6700\u5c0f\u6b0a\u9650\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u751a\u81f3\u53ef\u4ee5\u5728\u4e0d\u540c\u74b0\u5883\u7684\u61c9\u7528\u7a0b\u5f0f\u4e2d\uff0c\u90fd\u4f7f\u7528\u4e0d\u540c\u7684\u670d\u52d9\u5e33\u865f\uff0c\u8b93\u74b0\u5883\u7684\u9694\u96e2\u505a\u5f97\u66f4\u70ba\u5fb9\u5e95\uff0c\u5c31\u4e0d\u6703\u767c\u751f\u4e00\u53f0\u6a5f\u5668\u4e2d\u6bd2\uff0c\u7136\u5f8c\u611f\u67d3\u6574\u500b\u74b0\u5883\u7684\u72c0\u6cc1\u3002&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53e6\u5916\u4e00\u500b\u597d\u8655\u662f\uff0c\u7576\u4f60\u67e5\u770b\u7a3d\u6838\u8a18\u9304\uff08Audited Logs\uff09\u6642\uff0c\u53ef\u4ee5\u901a\u904e\u300cprincipalEmail\u300d\u6b04\u4f4d\u8ffd\u8e64\u5230\u6bcf\u4e00\u500b Service Account \u5230\u5e95\u8a2a\u554f\u904e\u54ea\u4e9b\u8cc7\u6e90\uff0c\u6216\u662f\u64cd\u4f5c\u904e\u54ea\u4e9b API\uff0c\u78ba\u4fdd\u4ed6\u5011\u6c92\u6709\u6feb\u7528\u6b0a\u9650\uff0c\u6216\u8a2a\u554f\u4e0d\u8a72\u8a2a\u554f\u7684\u5730\u65b9\uff0c\u5927\u70ba\u63d0\u9ad8\u4e86 Troubleshooting \u7684\u6548\u7387\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u6a23\u505a\u6709\u5e7e\u500b\u91cd\u8981\u597d\u8655\uff0c\u9996\u5148\u5b83\u80fd\u5e6b\u52a9\u60a8\u6e05\u695a\u5340\u5206\u4e0d\u540c\u61c9\u7528\u7a0b\u5f0f\u7684\u6d3b\u52d5\uff0c\u8b93\u76e3\u63a7\u548c\u7ba1\u7406\u8b8a\u5f97\u66f4\u52a0\u7c21\u55ae\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6b64\u5916\uff0c\u9084\u80fd\u5e6b\u52a9\u4f60\u9032\u884c\u66f4\u7cbe\u78ba\u7684\u6b0a\u9650\u63a7\u5236\uff0c\u8b93\u6bcf\u500b\u670d\u52d9\u53ea\u64c1\u6709\u5b83\u6240\u9700\u7684\u6700\u5c0f\u6b0a\u9650\uff0c\u5f9e\u800c\u6e1b\u5c11\u5b89\u5168\u98a8\u96aa\u3002\u5982\u679c\u4e00\u500b\u670d\u52d9\u5e33\u6236\u88ab\u5165\u4fb5\uff0c\u53d7\u5f71\u97ff\u7684\u7bc4\u570d\u4e5f\u6703\u88ab\u9650\u5236\u5728\u8a72\u670d\u52d9\u7684\u6b0a\u9650\u5167\uff0c\u4e0d\u6703\u5371\u53ca\u6574\u500b\u7cfb\u7d71\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">2. \u5b89\u5168\u5730\u5efa\u7acb\u8207\u50b3\u9001\u91d1\u9470<\/h4>\n\n\n\n<h5 class=\"wp-block-heading\">(1) \u4f7f\u7528\u547d\u4ee4\u5217\u5de5\u5177\u5275\u5efa\u91d1\u9470\u7684\u6280\u5de7&nbsp;<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728 GCP \u4e2d\u5efa\u8b70\u4f7f\u7528\u547d\u4ee4\u5217\u5de5\u5177\u4f86\u63d0\u9ad8\u5b89\u5168\u6027\uff0c\u5c31\u662f\u4e0b\u9054 gcloud \u6307\u4ee4\uff0c\u76f4\u63a5\u5c07 Key \u6a94\u6848\u5beb\u5165\u6307\u5b9a\u7684\u4f4d\u7f6e\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">gcloud iam service-accounts keys create&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u7a2e\u65b9\u6cd5\u7684\u597d\u8655\u662f\uff0c\u7cfb\u7d71\u6703\u81ea\u52d5\u8a2d\u7f6e\u9069\u7576\u7684\u6a94\u6848\u6b0a\u9650\uff0c\u63d0\u9ad8\u4e86\u91d1\u9470\u7684\u5b89\u5168\u6027\u3002\u9019\u6bd4\u624b\u52d5\u4e0b\u8f09\u91d1\u9470\u6a94\u6848\u66f4\u5b89\u5168\u53ef\u9760\uff0c\u4e5f\u6e1b\u5c11\u4e86\u4eba\u70ba\u932f\u8aa4\u7684\u53ef\u80fd\u6027\uff0c\u50cf\u662f Key \u5230\u8655\u4e82\u653e\u3001\u751a\u81f3\u88ab\u76dc\u53d6\u7684\u60c5\u6cc1\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">(2) \u5728\u5718\u968a\u9593\u5b89\u5168\u50b3\u9001\u6191\u8b49\u7684\u65b0\u65b9\u6cd5&nbsp;<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u50b3\u7d71\u4e0a\uff0c\u6211\u5011\u662f\u76f4\u63a5\u628a JSON \u91d1\u9470\u6a94\u6848\u901a\u904e\u96fb\u5b50\u90f5\u4ef6\u3001\u804a\u5929\u5de5\u5177\uff08\u5982 Line \u6216Slack\uff09\u6216\u96f2\u7aef\u786c\u789f\u5206\u4eab\u7b49\u65b9\u5f0f\u5c07\u6a94\u6848\u50b3\u9001\u7d66\u5225\u4eba\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u6a23\u6703\u589e\u52a0\u4e86\u6d29\u9732\u7684\u98a8\u96aa\uff0c\u540c\u4e00\u500b\u91d1\u9470\u6a94\u6848\u53ef\u80fd\u540c\u6642\u5b58\u5728\u591a\u500b\u5730\u65b9\uff0c\u751a\u81f3\u5927\u5bb6\u50b3\u4f86\u50b3\u53bb\uff0c\u904e\u7a0b\u4e2d\u8907\u88fd\u8d8a\u591a\u4efd\uff0c\u5b58\u653e\u7684\u5730\u65b9\u8d8a\u591a\uff0c\u8d8a\u6709\u53ef\u80fd\u88ab\u6709\u5fc3\u4eba\u58eb\u53d6\u5f97\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u842c\u4e00\u91d1\u9470\u88ab\u76dc\uff0c\u4f60\u4e5f\u6c92\u6709\u8fa6\u6cd5\u8ffd\u8e64\u5230\u5e95\u662f\u8ab0\u624b\u4e0a\u7684\u90a3\u4e00\u500b\u91d1\u9470\u88ab\u76dc\u3002\u9019\u6a23\u7684\u8a71\uff0c\u7ba1\u7406\u54e1\u53ea\u80fd\u76f4\u63a5\u505c\u7528\u9019\u500b\u91d1\u9470\uff0c\u9019\u6a23\u4e5f\u6703\u5c0e\u81f4\u8981\u4f7f\u7528\u540c\u4e00\u500b\u91d1\u9470\u7684\u4eba\u5168\u90e8\u90fd\u4e0d\u80fd\u7528\uff0c\u76f8\u95dc\u7684\u7a0b\u5f0f\u5168\u90e8\u90fd\u505c\u6b62\u904b\u4f5c\uff0c\u4f60\u5fc5\u9808\u91cd\u65b0\u5efa\u7acb\u91d1\u9470\uff0c\u7136\u5f8c\u518d\u6b21\u767c\u9001\u7d66\u5404\u4f4d\uff0c\u975e\u5e38\u9ebb\u7169\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u53ef\u4ee5\u63a1\u7528\u4e00\u7a2e\u5275\u65b0\u7684\u81ea\u7c3d\u8b49\u66f8\u65b9\u6cd5\uff0c\u9019\u6bd4\u50b3\u7d71\u65b9\u5f0f\u66f4\u5b89\u5168\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5177\u9ad4\u505a\u6cd5\u662f\uff1a\u9996\u5148\u5728\u9700\u8981\u4f7f\u7528 Service Account \u7684\u76ee\u6a19\u4e3b\u6a5f\u4e0a\u5275\u5efa RSA 2048 \u4f4d\u7684\u91d1\u9470\u5c0d\u548c\u81ea\u7c3d\u8b49\u66f8\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5efa\u7acb\u79c1\u9470\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">openssl genrsa -out private-key.pem 2048<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\u79c1\u9470\u5275\u5efa\u516c\u9470\u8b49\u66f8\u8acb\u6c42\uff1a&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">openssl req -new -key private-key.pem -out cert-request.csr<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6839\u64da\u7cfb\u7d71\u63d0\u793a\u4f86\u586b\u5beb\u570b\u5bb6\u540d\u7a31\u3001\u57ce\u5e02\u3001\u516c\u53f8\u540d\u7a31\u3001\u55ae\u4f4d\u540d\u7a31\u3001\u670d\u52d9\u540d\u7a31\u548c\u96fb\u5b50\u90f5\u4ef6\u5730\u5740\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u751f\u6210\u81ea\u7c3d\u8b49\u66f8\uff08\u6709\u6548\u671f 365 \u5929\uff09\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">openssl x509 -req -days 365 -in cert-request.csr -signkey private-key.pem -out public-cert.pem<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u958b\u767c\u4eba\u54e1\u53ea\u9700\u8981\u50b3\u905e\u516c\u958b\u7684\u8b49\u66f8\u6a94\u6848\uff08public-cert.pem\uff09\u7d66 GCP \u7ba1\u7406\u54e1\uff0c\u9019\u90e8\u5206\u7121\u9700\u4fdd\u5bc6\uff0c\u53ef\u4ee5\u900f\u904e\u4e00\u822c\u7684\u6e9d\u901a\u7ba1\u9053\u5206\u4eab\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7136\u5f8c\uff0c\u7ba1\u7406\u54e1\u5c07\u9019\u500b\u516c\u958b\u8b49\u66f8\u4e0a\u50b3\u4e26\u7d81\u5b9a\u5230\u5c0d\u61c9\u7684 Service Account\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">gcloud iam service-accounts keys upload public-cert.pem &#8211;iam-account=<a href=\"mailto:my-service-account@project-id.iam.gserviceaccount.com\">my-service-account@project-id.iam.gserviceaccount.com<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u904b\u4f5c\u6d41\u7a0b\u5982\u4e0b\u5716\uff1a<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXd2cyeABCs4Phkds5OEGaMDVMQI-tPZLdV7qCNK_pljEsuY3s91nFb9FK12Pzkr6jw9xGdGsLRQeCSKBGmeYW5lThhjhTZuTTKyvABwsQrosrTBX49zdVSQpFRBEDhIrHryZ_MbOw?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 05 GCP Service Account \u81ea\u7c3d\u8b49\u66f8\u904b\u4f5c\u6d41\u7a0b\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXd2cyeABCs4Phkds5OEGaMDVMQI-tPZLdV7qCNK_pljEsuY3s91nFb9FK12Pzkr6jw9xGdGsLRQeCSKBGmeYW5lThhjhTZuTTKyvABwsQrosrTBX49zdVSQpFRBEDhIrHryZ_MbOw?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 05 GCP Service Account \u81ea\u7c3d\u8b49\u66f8\u904b\u4f5c\u6d41\u7a0b\n\"><\/noscript><figcaption class=\"wp-element-caption\">05 GCP Service Account \u81ea\u7c3d\u8b49\u66f8\u904b\u4f5c\u6d41\u7a0b<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u6771\u6771\u8001\u5e2b\u81ea\u884c\u7e6a\u88fd<\/figcaption><\/figure>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u7a2e\u65b9\u6cd5\u7684\u6700\u5927\u512a\u9ede\u662f\u5b8c\u5168\u4e0d\u9700\u8981\u50b3\u905e\u79c1\u9470\uff0c\u56e0\u70ba\u79c1\u9470\u59cb\u7d42\u4fdd\u7559\u5728\u539f\u59cb\u6a5f\u5668\u4e0a\uff0c\u5927\u5e45\u964d\u4f4e\u4e86\u6191\u8b49\u6d29\u9732\u7684\u98a8\u96aa\uff0c\u540c\u6642\u4fdd\u8b49\u4e86\u958b\u767c\u4eba\u54e1\u548c\u4e3b\u6a5f\u80fd\u5920\u5b89\u5168\u5730\u4f7f\u7528 Service Account\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5230\u9019\u88e1\u4f60\u53ef\u80fd\u6703\u60f3\u5230\u4e00\u500b\u554f\u984c\uff0c\u4e0a\u9762\u63d0\u5230\u7684\u539f\u59cb\u6a5f\u5668\uff0c\u4e0d\u5c31\u662f Compute Engine \u7684\u865b\u64ec\u6a5f\u5668\u55ce\uff1fCompute Engine \u5728\u547c\u53eb GCP \u670d\u52d9\u6642\uff0c\u672c\u4f86\u5c31\u4e0d\u9700\u8981\u4f7f\u7528 Service Account Key \u554a\uff0c\u9019\u6a23\u505a\u6709\u4ec0\u9ebc\u610f\u7fa9\u55ce\uff1f\u4e0d\u662f\u591a\u6b64\u4e00\u8209\uff1f<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5c0d\u7684\uff0c Compute Engine \u672c\u4f86\u5c31\u4e0d\u7528 Service Account Key\uff0c\u9019\u500b\u81ea\u7c3d\u8b49\u66f8\u7684\u6a5f\u5236\u4e3b\u8981\u662f\u91dd\u5c0d\u300c\u5916\u90e8\u74b0\u5883\u300d\u8a2d\u8a08\u7684\uff0c\u4f8b\u5982\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u672c\u6a5f\u958b\u767c\u74b0\u5883<\/strong>\uff1a\u958b\u767c\u4eba\u54e1\u5728\u81ea\u5df1\u7684\u96fb\u8166\u4e0a\u9032\u884c\u958b\u767c\u6642\u9700\u8981\u5b58\u53d6 GCP \u8cc7\u6e90<\/li>\n\n\n\n<li><strong>\u5176\u4ed6\u96f2\u7aef\u5e73\u53f0\u7684\u6a5f\u5668<\/strong>\uff1a\u4f8b\u5982\u5728 AWS\u3001Azure \u6216\u963f\u91cc\u96f2\u4e0a\u904b\u884c\u4f46\u9700\u8981\u5b58\u53d6 GCP \u670d\u52d9\u7684\u61c9\u7528<\/li>\n\n\n\n<li><strong>\u81ea\u6709\u6a5f\u623f\u4e2d\u7684\u4e3b\u6a5f<\/strong>\uff1a\u516c\u53f8\u5167\u90e8\u6578\u64da\u4e2d\u5fc3\u7684\u6a5f\u5668\u9700\u8981\u8207 GCP \u670d\u52d9\u6574\u5408<\/li>\n\n\n\n<li><strong>CI\/CD \u7ba1\u9053<\/strong>\uff1a\u5728 Jenkins\u3001GitHub Actions \u7b49\u6301\u7e8c\u6574\u5408 (Continuous Integration) \u74b0\u5883\u4e2d\u9700\u8981\u5b58\u53d6 GCP<\/li>\n\n\n\n<li><strong>\u7b2c\u4e09\u65b9\u670d\u52d9<\/strong>\uff1a\u9700\u8981\u6574\u5408\u5230 GCP \u7684\u5916\u90e8 SaaS \u89e3\u6c7a\u65b9\u6848<\/li>\n<\/ul>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">(3) \u5584\u7528\u904e\u671f\u6642\u9593\u8a2d\u7f6e<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u524d\u9762\u63d0\u5230\u7684 Organizatino Policy\uff0c\u8a2d\u5b9a\u7684\u662f\u300c\u6240\u6709 Service Account Key\u300d\u7d71\u4e00\u7684\u6709\u6548\u6642\u9593\uff0c\u800c\u6bcf\u4e00\u500b Service Account Key \u672c\u8eab\uff0c\u90fd\u53ef\u4ee5\u55ae\u7368\u8a2d\u5b9a\u5230\u671f\u6642\u9593\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u524d\u8005\u6703\u8a2d\u5b9a\u9577\u4e00\u9ede\uff0c\u4f8b\u5982\u4e09\u500b\u6708\u6216\u516d\u500b\u6708\uff0c\u505a\u70ba\u6240\u6709 Key \u7684\u6700\u4f4e\u8981\u6c42\uff0c\u5f8c\u8005\u5247\u662f\u6703\u8996\u60c5\u6cc1\u8a2d\u5b9a\u8f03\u77ed\u7684\u5230\u671f\u6642\u9593\uff0c\u53ef\u80fd\u53ea\u6709 7~30 \u5929\uff0c\u56e0\u70ba\u5b83\u7684\u638c\u63a7\u7a0b\u5ea6\u8f03\u9ad8\uff0c\u842c\u4e00\u5230\u671f\u518d\u5efa\u7acb\u65b0\u7684 Key \u5c31\u597d\u4e86\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5011\u53ef\u4ee5\u70ba\u958b\u767c\u548c\u6e2c\u8a66\u74b0\u5883\u7684 Service Account Key \u8a2d\u5b9a\u5408\u7406\u7684\u904e\u671f\u6642\u9593\uff0c\u81ea\u52d5\u8b93\u4e0d\u518d\u9700\u8981\u7684 Key \u5931\u6548\uff0c\u6e1b\u5c11\u5f8c\u7e8c\u7ba1\u7406\u5de5\u4f5c\uff0c\u5373\u4f7f\u91d1\u9470\u88ab\u6709\u5fc3\u4eba\u58eb\u53d6\u5f97\uff0c\u5b83\u4e5f\u5931\u53bb\u4e86\u4f5c\u7528\u3002<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">(\u4e09) \u90e8\u7f72\u8207\u751f\u7522\u74b0\u5883\u6280\u5de7<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">1. \u512a\u5316 Service Account Key \u7684\u5b58\u5132\u65b9\u5f0f<\/h4>\n\n\n\n<h5 class=\"wp-block-heading\">(1) \u786c\u9ad4\u5b89\u5168\u89e3\u6c7a\u65b9\u6848<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528\u786c\u9ad4\u5b89\u5168\u6a21\u7d44\uff08Hardware Security Module\uff1bHSM\uff09\u6216\u53ef\u4fe1\u5e73\u53f0\u6a21\u7d44\uff08Trusted Platform Module\uff1bTPM\uff09\u4f86\u7ba1\u7406\u60a8\u7684\u91d1\u9470\u53ef\u4ee5\u5927\u5e45\u63d0\u5347\u5b89\u5168\u6027\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">A. \u786c\u9ad4\u5b89\u5168\u6a21\u7d44<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u95dc\u65bc HSM\uff0c\u4f60\u53ef\u4ee5\u8cfc\u8cb7\u5c08\u7528\u7684\u8a2d\u5099\uff0c\u50f9\u683c\u70ba\u5e7e\u5343\u5230\u5e7e\u842c\u5143\u4e0d\u7b49\uff0c\u7136\u5f8c\u5c07\u6b64\u8a2d\u5099\u9023\u63a5\u5230\u4f3a\u670d\u5668\u4e0a\uff08\u4e0d\u4e00\u5b9a\u662f GCP \u7684\u865b\u64ec\u6a5f\u5668\uff09\u3002 HSM \u8a2d\u5099\u901a\u5e38\u6703\u63d0\u4f9b\u7684\u7ba1\u7406\u5de5\u5177\uff0c\u4f7f\u7528\u8ddf\u4e0a\u8ff0\u985e\u4f3c\u7684\u65b9\u6cd5\u5efa\u7acb RSA \u91d1\u9470\u5c0d\u548c\u516c\u958b\u7684\u81ea\u7c3d\u8b49\u66f8\uff0c\u518d\u4e0a\u50b3\u5230 GCP \u7d81\u5b9a Service Account Key\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7a0b\u5f0f\u8981\u6e96\u5099\u547c\u53eb GCP \u7684 API \u6642\uff0c\u6703\u5148\u547c\u53eb HSM \u5ee0\u5546\u63d0\u4f9b\u7684 API\uff0c\u767c\u9001\u8cc7\u6599\u8ddf HSM \u7d22\u53d6\u7c3d\u540d\uff0c\u7c3d\u540d\u5c31\u662f\u8981\u5411 GCP \u8b49\u660e\u9019\u500b Request \u662f\u5408\u6cd5\u7684\uff0c\u7c3d\u540d\u7d50\u679c\u518d\u8fd4\u56de\u7a0b\u5f0f\uff0c\u7a0b\u5f0f\u518d\u5c07\u539f\u59cb\u8cc7\u6599\u548c\u7c3d\u540d\u7d50\u679c\u4e00\u8d77\u767c\u9001\u5230 Google Cloud API\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXcXNhdXToa-STxpeqJDxk7jerzItbb4-KKhCwGvRYG7JgJLpvjnsW0PiSVu3t17tEWodVvD5Dfwq85Xva47k0Uwvbd5S0v0sBrAES3eXyV-jvwGJKbZqms8PvZ1IPcZen_SmA0UZA?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 06 \u786c\u9ad4\u5b89\u5168\u6a21\u7d44 (HSM) \u4fdd\u8b77\u65b9\u6848\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXcXNhdXToa-STxpeqJDxk7jerzItbb4-KKhCwGvRYG7JgJLpvjnsW0PiSVu3t17tEWodVvD5Dfwq85Xva47k0Uwvbd5S0v0sBrAES3eXyV-jvwGJKbZqms8PvZ1IPcZen_SmA0UZA?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 06 \u786c\u9ad4\u5b89\u5168\u6a21\u7d44 (HSM) \u4fdd\u8b77\u65b9\u6848\n\"><\/noscript><figcaption class=\"wp-element-caption\">06 \u786c\u9ad4\u5b89\u5168\u6a21\u7d44 (HSM) \u4fdd\u8b77\u65b9\u6848<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u6771\u6771\u8001\u5e2b\u81ea\u884c\u7e6a\u88fd<\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u5176\u5be6\uff0c\u4f60\u4e0d\u4e00\u5b9a\u8981\u984d\u5916\u8cfc\u8cb7 HSM \u8a2d\u5099\uff0cCloud Key Management Service (Cloud KMS) \u4e5f\u6709 HSM \u7684\u529f\u80fd\uff0c\u9019\u662f\u4e00\u7a2e\u7531 Google \u7ba1\u7406\u7684\u786c\u9ad4\u5b89\u5168\u6a21\u7d44\u670d\u52d9\uff0c\u7b26\u5408 FIPS 140-2 Level 3 \u5b89\u5168\u6a19\u6e96\uff0c\u9019\u6a23\u4f60\u5c31\u4e0d\u9700\u8981\u8cfc\u8cb7\u5be6\u9ad4 HSM \u8a2d\u5099\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXf_uRJAwV22H4XkK-NsD_iThm0YfUz6GmFSr61vd8MgmggQo44lQlS-8UdRwP_uVKxUKYfJOgEREx4Z4dRVdJYEg3uLyAFkwxxQbHaumNd2-pI6x4nfEHxU1h1mHIDyg2CzeBJd1Q?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 07 Cloud KMS \u52a0 HSM Cloud HSM \u4fdd\u8b77\u65b9\u6848\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXf_uRJAwV22H4XkK-NsD_iThm0YfUz6GmFSr61vd8MgmggQo44lQlS-8UdRwP_uVKxUKYfJOgEREx4Z4dRVdJYEg3uLyAFkwxxQbHaumNd2-pI6x4nfEHxU1h1mHIDyg2CzeBJd1Q?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 07 Cloud KMS \u52a0 HSM Cloud HSM \u4fdd\u8b77\u65b9\u6848\n\"><\/noscript><figcaption class=\"wp-element-caption\">07 Cloud KMS \u52a0 HSM Cloud HSM \u4fdd\u8b77\u65b9\u6848<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u6771\u6771\u8001\u5e2b\u81ea\u884c\u7e6a\u88fd<\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">GCP \u4f7f\u7528\u4e4b\u524d\u5132\u5b58\u7684\u516c\u9470\uff0c\u4f86\u9a57\u8b49\u7c3d\u540d\u662f\u5426\u771f\u7684\u7531\u5c0d\u61c9\u7684\u79c1\u9470\u751f\u6210\u3002\u53ea\u6709\u7576\u7c3d\u540d\u9a57\u8b49\u6210\u529f\u6642\uff0cGCP \u624d\u6703\u8a8d\u70ba\u9019\u662f\u4f86\u81ea\u6388\u6b0a Service Account \u7684\u5408\u6cd5\u8acb\u6c42\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u6a23\u505a\u6709\u5e7e\u500b\u597d\u8655\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u5373\u4f7f\u6709\u4eba\u6514\u622a\u4e86\u8acb\u6c42\u548c\u7c3d\u540d\uff0c\u4e5f\u7121\u6cd5\u4f7f\u7528\u9019\u4e9b\u8cc7\u8a0a\u751f\u6210\u65b0\u7684\u6709\u6548\u8acb\u6c42\uff0c\u5c31\u662f\u99ed\u5ba2\u7121\u6cd5\u7522\u751f\u65b0\u7684\u4e26\u4e14\u5408\u6cd5\u7684 Request \u4f86\u547c\u53eb GCP \u7684 API\u3002<\/li>\n\n\n\n<li>\u53ea\u6709 HSM \u4e2d\u7684\u79c1\u9470\u624d\u80fd\u751f\u6210 GCP \u53ef\u4ee5\u9a57\u8b49\u7684\u6709\u6548\u7c3d\u540d\uff0c\u662f\u4e00\u500b\u552f\u4e00\u53ef\u4ee5\u4fe1\u4efb\u7684\u4f86\u6e90\u3002<\/li>\n\n\n\n<li>\u4e3b\u6a5f\u548c\u61c9\u7528\u7a0b\u5f0f\u4e0d\u4e00\u5b9a\u90fd\u8981\u5728 GCP \u5167\uff0c\u4f46\u5982\u679c\u90fd\u5728 GCP \u5167\u90e8\uff0c\u5fc5\u5b9a\u66f4\u70ba\u5b89\u5168\u3002<\/li>\n\n\n\n<li>\u6bcf\u500b\u8acb\u6c42\u7684\u7c3d\u540d\u90fd\u662f\u7368\u7279\u7684\uff0c\u9632\u6b62\u91cd\u653e\u653b\u64ca\uff08Replay Attack\uff09\uff0c\u6307\u7684\u662f\u99ed\u5ba2\u4f7f\u7528\u4e00\u6a21\u4e00\u6a23\u7684\u8cc7\u6599\u53bb\u64cd\u4f5c GCP\u3002<\/li>\n<\/ul>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">B. \u53ef\u4fe1\u4efb\u5e73\u53f0\u6a21\u7d44 (TPM)<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u5927\u591a\u6578\u96fb\u8166\uff08\u7279\u5225\u662f 2016 \u5e74\u5f8c\u88fd\u9020\u7684\uff09\u901a\u5e38\u5df2\u5167\u5efa TPM 2.0 \u6676\u7247\u5728\u4e3b\u6a5f\u677f\u4e0a\u3002\u5982\u679c\u6c92\u6709\u5167\u5efa TPM\uff0c\u4f60\u5c31\u8981\u8cfc\u8cb7\u4e00\u500b TPM \u6a21\u7d44\u4e26\u5b89\u88dd\u5230\u4e3b\u6a5f\u677f\u4e0a\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u4e9b\u6a21\u7d44\u901a\u5e38\u662f\u5c0f\u578b\u96fb\u8def\u677f\uff0c\u53ef\u4ee5\u63d2\u5165\u4e3b\u6a5f\u677f\u4e0a\u5c08\u9580\u7684 TPM \u63d2\u69fd\u3002\u7136\u5f8c\u5728 Linux \u4e0a\uff0c\u4f7f\u7528 tpm2-tools \u5de5\u5177\u96c6\u4f86\u7522\u751f\u91d1\u9470\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ee5 Debian \u70ba\u4f8b\uff0c\u60a8\u53ef\u4ee5\u5b89\u88dd tpm2-tools \u5f8c\u57f7\u884c\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ls \/dev\/tpm*<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u986f\u793a \/dev\/tpm0 \u6216 \/dev\/tpmrm0\uff0c\u901a\u5e38\u8868\u793a\u7cfb\u7d71\u5df2\u8b58\u5225\u5230 TPM \u8a2d\u5099\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXf5wCf07Lbsn64vj9UqD36rc-HwYmfID07-mEPxe1g2GrKe3pXx3ZOkTvMOMw1r1C2RfmK3FNpP91blzy-wthWHxLGBvBbF_oWvlmFoBahlHTjVUS-MDV1Uo_g0piJ-mx9C_kmxnQ?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 08 \u6aa2\u67e5\u7cfb\u7d71\u6709\u6709\u6c92\u6709\u5b89\u88dd TPM2\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXf5wCf07Lbsn64vj9UqD36rc-HwYmfID07-mEPxe1g2GrKe3pXx3ZOkTvMOMw1r1C2RfmK3FNpP91blzy-wthWHxLGBvBbF_oWvlmFoBahlHTjVUS-MDV1Uo_g0piJ-mx9C_kmxnQ?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 08 \u6aa2\u67e5\u7cfb\u7d71\u6709\u6709\u6c92\u6709\u5b89\u88dd TPM2\n\"><\/noscript><figcaption class=\"wp-element-caption\">08 \u6aa2\u67e5\u7cfb\u7d71\u6709\u6709\u6c92\u6709\u5b89\u88dd TPM2<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/4sysops.com\/archives\/unlock-linux-unified-key-setup-luks-encrypted-partitions-with-tpm-20\/\" target=\"_blank\" rel=\"noopener\" title=\"\">4sysops<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b89\u88dd tpm2-tools \u7684\u76f8\u95dc\u6307\u4ee4\u5982\u4e0b\uff08\u4e0d\u540c\u4f5c\u696d\u7cfb\u7d71\u7248\u672c\uff0c\u6307\u4ee4\u53ef\u80fd\u6703\u6709\u6240\u4e0d\u540c\uff09\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u66f4\u65b0\u5957\u4ef6\u5217\u8868\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">sudo apt update<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b89\u88dd TPM2 \u5de5\u5177\u548c\u8cc7\u6e90\u5eab\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">sudo apt install tpm2-tools tpm2-abrmd libtss2-dev<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b89\u88dd\u5f8c\u91cd\u555f\u96fb\u8166\uff0c\u9032\u5165 BIOS\/UEFI \u8a2d\u5b9a\uff0c\u5c0b\u627e \u300cSecurity\u300d\u6216\u300cAdvanced\u300d\u9078\u9805\uff0c\u555f\u7528 \u300cTPM\u300d\uff0c\u7136\u5f8c\u91cd\u555f\u96fb\u8166\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div style=\"height:0px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXdo-c_AVGrmj45gweCW5fwKPR5AF81yejKEPpTW5Jmzskx419qrHMW3jtUFwsOv3R-KXAVpWNz88aswlr8xMFCRgnM9NOMnKZqHukMwY1wdtFn1LvdfqEIXvjB5O8lUkRO1mYn10g?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 09 \u5728 BIOS \u555f\u7528 TPM\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXdo-c_AVGrmj45gweCW5fwKPR5AF81yejKEPpTW5Jmzskx419qrHMW3jtUFwsOv3R-KXAVpWNz88aswlr8xMFCRgnM9NOMnKZqHukMwY1wdtFn1LvdfqEIXvjB5O8lUkRO1mYn10g?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 09 \u5728 BIOS \u555f\u7528 TPM\"><\/noscript><figcaption class=\"wp-element-caption\">09 \u5728 BIOS \u555f\u7528 TPM<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/tw.msi.com\/blog\/How-to-Enable-TPM-on-MSI-Motherboards-Featuring-TPM-2-0\" target=\"_blank\" rel=\"noopener\" title=\"\">MSI \u7db2\u7ad9<\/a><br><\/figcaption><\/figure>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u63a5\u4e0b\u4f86\u5efa\u7acb\u300c\u4e3b\u8981\u91d1\u9470\u300d\uff08Primary Key\uff09\uff0c\u5b83\u662f TPM \u4e2d\u6240\u6709\u5176\u4ed6\u91d1\u9470\u7684\u6839\u6e90\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">tpm2_createprimary -C o -g sha256 -G rsa -c primary.ctx<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7136\u5f8c\u4f7f\u7528\u4e4b\u524d\u5275\u5efa\u7684\u4e3b\u8981\u91d1\u9470\u4f86\u5275\u5efa\u4e00\u500b\u5b50\u91d1\u9470\u5c0d\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">tpm2_create -C primary.ctx -u key.pub -r key.priv<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5c07\u91d1\u9470\u8f09\u5165 TPM\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">tpm2_load -C primary.ctx -u rsa.pub -r rsa.priv -c rsa.ctx<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5c07\u516c\u9470\u8f49\u63db\u70ba PEM \u683c\u5f0f\uff08\u662f GCP \u53ef\u63a5\u53d7\u7684\u683c\u5f0f\uff09\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">tpm2_readpublic -c rsa.ctx -o rsa.pem -f pem<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528 OpenSSL \u6307\u4ee4\u5275\u5efa\u81ea\u7c3d\u540d\u8b49\u66f8\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">openssl req -new -x509 -key tpmkey -out cert.pem<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u63a5\u4e0b\u4f86\u5c31\u53ef\u4ee5\u5c07 rsa_cert.pem \u4e0a\u50b3\u5230 GCP Service Account\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6700\u5f8c\u7a0b\u5f0f\u5728\u904b\u4f5c\u6642\uff0c\u5c31\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u6307\u4ee4\uff0c\u5c0d\u8981\u7c3d\u540d\u7684\u8cc7\u6599\uff08\u4f8b\u5982 data.txt\uff09\u4f86\u57f7\u884c\u300c\u7c3d\u540d\u300d\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">tpm2_sign -c rsa.ctx -g sha256 -o signature.bin data.txt<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53e6\u5916\u6ce8\u610f\u7a0b\u5f0f\u9700\u8981\u80fd\u5920\u547c\u53eb TPM \u6307\u4ee4\uff0c\u9019\u9700\u8981\u4f7f\u7528 tpm2-tss \u7b49\u7a0b\u5f0f\u5eab\u9032\u884c\u958b\u767c\u3002\u800c\u4e14\u96fb\u8166\u5fc5\u9808\u4fdd\u6301\u958b\u6a5f\u72c0\u614b\u624d\u80fd\u4f7f\u7528\u9019\u4e9b\u91d1\u9470\uff0c\u56e0\u70ba\u79c1\u9470\u7121\u6cd5\u5f9e TPM \u4e2d\u5c0e\u51fa\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXdy5PjTiHxv3Z3RhyHg8d06ESfuVbW65_fXaG-eCnlgo0U4mZag-JmPqWDvQ4qQp9X1y6Zr-z_LS24u1EUUbvV3WP5eQGyB5Uiot7sf-gP6GAQPvgZBH9cZt5VXMfCM1h__z9K9cg?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 10 \u786c\u9ad4\u4e3b\u6a5f\u4f7f\u7528 TPM \u5efa\u7acb Service Account Key\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXdy5PjTiHxv3Z3RhyHg8d06ESfuVbW65_fXaG-eCnlgo0U4mZag-JmPqWDvQ4qQp9X1y6Zr-z_LS24u1EUUbvV3WP5eQGyB5Uiot7sf-gP6GAQPvgZBH9cZt5VXMfCM1h__z9K9cg?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 10 \u786c\u9ad4\u4e3b\u6a5f\u4f7f\u7528 TPM \u5efa\u7acb Service Account Key\"><\/noscript><figcaption class=\"wp-element-caption\">10 \u786c\u9ad4\u4e3b\u6a5f\u4f7f\u7528 TPM \u5efa\u7acb Service Account Key<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u6771\u6771\u8001\u5e2b\u81ea\u884c\u7e6a\u88fd<\/figcaption><\/figure>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u6a23\u4e00\u4f86\uff0c\u61c9\u7528\u7a0b\u5f0f\u53ea\u9700\u8981\u4f7f\u7528 HSM\/TPM \u63d0\u4f9b\u7684\u7c3d\u540d API\uff0c\u800c\u4e0d\u5fc5\u76f4\u63a5\u63a5\u89f8\u79c1\u9470\u3002\u9019\u7a2e\u65b9\u6cd5\u63d0\u4f9b\u4e86\u786c\u9ad4\u5c64\u7d1a\u7684\u5b89\u5168\u4fdd\u969c\uff0c\u6709\u6548\u9632\u6b62\u91d1\u9470\u88ab\u8907\u88fd\u6216\u63d0\u53d6\uff0c\u5927\u5e45\u964d\u4f4e\u4e86\u8cc7\u5b89\u98a8\u96aa\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">(2) \u8edf\u9ad4\u91d1\u9470\u5eab\u7684\u5be6\u7528\u6280\u5de7<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u4f60\u8981\u4f7f\u7528\u8edf\u9ad4\u91d1\u9470\u5eab\u4f86\u5132\u5b58 GCP Service Account Key\uff0c\u5728 GCP \u4e2d\u53ef\u4ee5\u4f7f\u7528 Secret Manager \u4f86\u5132\u5b58\uff0c\u4ee5\u4e0b\u662f\u5e7e\u500b\u5177\u9ad4\u7684\u5be6\u4f5c\u65b9\u6cd5\uff1a<\/p>\n\n\n\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">A. \u8a2d\u5b9a\u7cbe\u7d30\u7684\u5b58\u53d6\u63a7\u5236<\/h5>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u70ba Secret Manager \u7684\u4f7f\u7528\u8005\uff0c\u8a2d\u5b9a\u6700\u5c0f IAM \u89d2\u8272\u6b0a\u9650\u3002<\/li>\n\n\n\n<li>\u5efa\u7acb Secret\uff0c\u7136\u5f8c\u628a Service Account \u653e\u5728 Secret \u88e1\u9762\u3002<\/li>\n\n\n\n<li>\u70ba\u4e0d\u540c\u5718\u968a\u6216\u670d\u52d9\u5efa\u7acb\u5c08\u7528\u7684\u5b58\u53d6\u7fa4\u7d44\uff0c\u4f8b\u5982\u8b93\u958b\u767c\u5718\u968a\u53ea\u80fd\u5b58\u53d6\u958b\u767c\u74b0\u5883\u7684 Secret\u3002<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXd7ZRZMYztO_YsVPL9F6CXzeJzgq5-MUs3bs8Ed3e3ZmZADacRrY_h1av_hRKalkWv2dfpOP_r0xpZCtMZXx4A8yufLOY3bRoBivbv45Dei8wbiN4DZZpvgtSMxuuXZtso_CyJVmw?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 11 \u4e0d\u540c Secret \u53ef\u4ee5\u6388\u6b0a\u7d66\u4e0d\u540c\u5718\u968a\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXd7ZRZMYztO_YsVPL9F6CXzeJzgq5-MUs3bs8Ed3e3ZmZADacRrY_h1av_hRKalkWv2dfpOP_r0xpZCtMZXx4A8yufLOY3bRoBivbv45Dei8wbiN4DZZpvgtSMxuuXZtso_CyJVmw?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 11 \u4e0d\u540c Secret \u53ef\u4ee5\u6388\u6b0a\u7d66\u4e0d\u540c\u5718\u968a\n\"><\/noscript><figcaption class=\"wp-element-caption\">11 \u4e0d\u540c Secret \u53ef\u4ee5\u6388\u6b0a\u7d66\u4e0d\u540c\u5718\u968a<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/console.cloud.google.com\/\">GCP Console<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u70ba\u4e0d\u540c\u74b0\u5883\u5275\u5efa\u4e0d\u540c\u7684 Key\uff0c\u4f8b\u5982 service-account-key-dev \u548c service-account-key-prod\uff0c\u7136\u5f8c\u70ba\u6bcf\u500b Key \u8a2d\u5b9a\u4e0d\u540c\u7684\u5b58\u53d6\u6b0a\u9650\uff0c\u4f60\u4e5f\u53ef\u4ee5\u6216\u4f7f\u7528\u4e0d\u540c\u5c08\u6848\u9694\u96e2\u74b0\u5883\uff0c\u6bcf\u500b\u5c08\u6848\u4e2d\u6709\u5404\u81ea\u7684 Secret Manager \u548c Key\u3002<\/li>\n<\/ul>\n\n\n\n<h5 class=\"wp-block-heading\">B. \u8a73\u7d30\u8a18\u9304\u6240\u6709\u4f7f\u7528\u60c5\u6cc1\uff1a<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u70ba\u4e86\u8ffd\u8e64\u6bcf\u500b Key \u5728 Secret Manager \u88ab\u5b58\u53d6\u7684\u72c0\u6cc1\uff0c\u4f60\u53ef\u4ee5\u555f\u7528 Cloud Audit Logs \u4f86\u8ffd\u8e64\uff0c\u56e0\u70ba\u6839\u64da\u9810\u8a2d\uff0cSecret \u7684\u5b58\u53d6\u662f\u4e0d\u6703\u4e3b\u52d5\u8a18\u9304\u7684\u3002\u4f60\u8981\u53bb\u7a3d\u6838\u8a18\u9304\u628a\u5b83\u6253\u958b\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXeZFRN0G41LCARcEB7j45C-282z3lucdyXHctZVn_1b802lrGNu9xZ7D8CY3OxE11WHPynWIJr1KffS6DaEl1sQohSHHS9YJf91kLlfy-xCLhgnTu9a2GwjZqHkcbad5a3HUHcwUQ?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 12 \u5728\u7a3d\u6838\u8a18\u9304\u7684 Secret Manager API \u958b\u555f\u8cc7\u6599\u8b80\u53d6\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXeZFRN0G41LCARcEB7j45C-282z3lucdyXHctZVn_1b802lrGNu9xZ7D8CY3OxE11WHPynWIJr1KffS6DaEl1sQohSHHS9YJf91kLlfy-xCLhgnTu9a2GwjZqHkcbad5a3HUHcwUQ?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 12 \u5728\u7a3d\u6838\u8a18\u9304\u7684 Secret Manager API \u958b\u555f\u8cc7\u6599\u8b80\u53d6\n\"><\/noscript><figcaption class=\"wp-element-caption\">12 \u5728\u7a3d\u6838\u8a18\u9304\u7684 Secret Manager API \u958b\u555f\u8cc7\u6599\u8b80\u53d6<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/console.cloud.google.com\/\">GCP Console<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5011\u53ef\u4ee5\u6545\u610f\u6e2c\u8a66\u4e00\u4e0b\uff0c\u5728 Secret Manager \u5efa\u7acb\u4e00\u500b Secret \u4e4b\u5f8c\uff0c\u518d\u7528 gcloud \u6307\u4ee4\u53bb\u8b80\u53d6\u5b83\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXeUUZyWneCV0WHiQolTCQfUX6illckMR7UbSOS4c2ujXWrGg59g6lMyCTyPBtgyeCa84jq3A365XpGhOrwkMCpYlox6X9arWzPhSO22r6jHHrFvvDIbYHl-oL9EKGPuSiR7JxR8oA?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 13 \u4f7f\u7528 gcloud \u6307\u4ee4\u8b80\u53d6 Secret\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXeUUZyWneCV0WHiQolTCQfUX6illckMR7UbSOS4c2ujXWrGg59g6lMyCTyPBtgyeCa84jq3A365XpGhOrwkMCpYlox6X9arWzPhSO22r6jHHrFvvDIbYHl-oL9EKGPuSiR7JxR8oA?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 13 \u4f7f\u7528 gcloud \u6307\u4ee4\u8b80\u53d6 Secret\n\"><\/noscript><figcaption class=\"wp-element-caption\">13 \u4f7f\u7528 gcloud \u6307\u4ee4\u8b80\u53d6 Secret<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/console.cloud.google.com\/\">GCP Console<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u770b\u5230\u6211\u57f7\u884c\u4e86\u5169\u6b21\u8b80\u53d6 Secret \u7684\u6307\u4ee4\uff0c\u56e0\u70ba\u7576\u6211\u7b2c\u4e00\u6b21\u57f7\u884c\u5b8c\u5f8c\uff0c\u51fa\u4e86\u300cHello\u300d\u9019\u500b\u503c\uff0c\u4f46\u6211\u9084\u6c92\u99ac\u4e0a\u622a\u5716\uff0c\u7d50\u679c\u300cHello\u300d\u9019\u500b\u503c\u5c31\u6d88\u5931\u4e86\uff0c\u6240\u4ee5\u6211\u53c8\u518d\u57f7\u884c\u4e86\u4e00\u6b21\uff0c\u4e26\u4e14\u99ac\u4e0a\u622a\u5716\uff0c\u53ef\u898b Secret \u5373\u4f7f\u900f\u904e gcloud \u6307\u4ee4\u64cd\u4f5c\uff0c\u4e5f\u6703\u9867\u53ca\u5b89\u5168\u6027\uff0c\u53ea\u986f\u793a\u5e7e\u79d2\u9418\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u63a5\u8457\u5c31\u53ef\u4ee5\u5728 Cloud Logging \u7684\u300c\u5df2\u7a3d\u6838\u7684\u8cc7\u6e90\u300d\u770b\u5230 Secret \u88ab\u5b58\u53d6\u7684\u6642\u9593\u548c\u64cd\u4f5c\u4eba\u54e1\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXfyMKDE4w1o7UzE_bv06S8r_yAopL3R6q0WCR8BmJ_NNRUhJJ18liidBjezz7sDTR3oxqfsM5npdQNq2c8DLS6qxDf9DKTgLT8WbjD7jHgV34P1arVo4yfgEmrneHSIu7X1YKzudw?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 14 \u5728 Cloud Logging \u53ef\u4ee5\u67e5\u5230 Secret \u88ab\u8b80\u53d6\u7684\u7a3d\u6838\u8a18\u9304\n\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXfyMKDE4w1o7UzE_bv06S8r_yAopL3R6q0WCR8BmJ_NNRUhJJ18liidBjezz7sDTR3oxqfsM5npdQNq2c8DLS6qxDf9DKTgLT8WbjD7jHgV34P1arVo4yfgEmrneHSIu7X1YKzudw?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 14 \u5728 Cloud Logging \u53ef\u4ee5\u67e5\u5230 Secret \u88ab\u8b80\u53d6\u7684\u7a3d\u6838\u8a18\u9304\n\"><\/noscript><figcaption class=\"wp-element-caption\">14 \u5728 Cloud Logging \u53ef\u4ee5\u67e5\u5230 Secret \u88ab\u8b80\u53d6\u7684\u7a3d\u6838\u8a18\u9304<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/console.cloud.google.com\/\">GCP Console<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u56e0\u70ba\u7a3d\u6838\u8a18\u9304\u7684\u5132\u5b58\u662f\u6709\u671f\u9650\u7684\uff0c\u5982\u679c\u60f3\u8981\u9577\u671f\u4fdd\u5b58 Secret \u7684\u5b58\u53d6\u8a18\u9304\uff0c\u4f60\u53ef\u4ee5\u8a2d\u5b9a Log Export \u5230 BigQuery \u6216 Cloud Storage\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53e6\u5916\uff0c\u4f60\u4e5f\u53ef\u4ee5\u91dd\u5c0d Secret \u7684\u5b58\u53d6\u8a18\u9304\uff0c\u5efa\u7acb Log-Based Metric \u76e3\u63a7\u6307\u6a19\uff0c\u9019\u6a23\u5c31\u53ef\u4ee5\u628a Secret \u7684\u5b58\u53d6\u6b21\u6578\u756b\u5728\u5100\u8868\u677f\u4e0a\uff0c\u5982\u679c\u6709\u5b58\u53d6\u7570\u5e38\uff0c\u4f8b\u5982\u67d0\u500b Secret \u5e73\u5747\u4e00\u5206\u9418\u5927\u6982\u5b58\u53d6 5 \u6b21\uff0c\u7a81\u7136\u8b8a\u6210 500 \u6b21\uff0c\u5f88\u660e\u986f\u5c31\u662f\u7570\u5e38\uff0c\u5c31\u53ef\u4ee5\u518d\u8a2d\u5b9a\u5feb\u8a0a\uff0c\u4f86\u53ca\u6642\u901a\u77e5\u7ba1\u7406\u54e1\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">C. \u52a0\u518d\u4e00\u5c64 Cloud KMS \u78ba\u4fdd\u4e3b\u91d1\u9470\u7684\u5b89\u5168<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u53ef\u4ee5\u5728\u5efa\u7acb Secret \u6642\uff0c\u9078\u64c7 CMEK (Customer-Managed Encryption Keys) \u529f\u80fd\uff0c\u4f7f\u7528 Cloud KMS \u4f86\u7684\u91d1\u9470\u4f86\u52a0\u5bc6\u4f60\u5efa\u7acb\u7684 Secret\uff0c\u9019\u6a23\u4f60\u7684\u91d1\u9470\uff0c\u9664\u4e86\u8981\u6709 Secret Manager \u7684\u6b0a\u9650\u89d2\u8272\uff0c\u53c8\u540c\u6642\u8981\u6709 KMS \u7684\u6b0a\u9650\u89d2\u8272\uff0c\u624d\u80fd\u5920\u5b58\u53d6\u5230 Secret \u88e1\u7684\u91d1\u9470\uff0c\u7b49\u65bc\u662f\u96d9\u91cd\u4fdd\u8b77\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u9084\u53ef\u4ee5\u5b9a\u671f\u8f2a\u63db\u52a0\u5bc6\u91d1\u9470\uff0c\u5efa\u8b70\u6bcf 90 \u5929\u4e00\u6b21\u3002\u9019\u6a23\u9664\u4e86\u4f60\u7684 Service Account Key \u80fd\u5920\u5b9a\u671f\u8f2a\u63db\uff0cKMS \u7684 Key \u4e5f\u5b9a\u671f\u8f2a\u63db\uff0c\u9019\u6a23\u80fd\u8b93\u91d1\u9470\u88ab\u7aca\u53d6\u6240\u9020\u6210\u7684\u98a8\u96aa\u964d\u5230\u6700\u4f4e\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">D. \u5be6\u65bd\u9632\u6b62\u672a\u6388\u6b0a\u5b58\u53d6\u7684\u6a5f\u5236<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">VPC Service Control \u662f GCP \u4e2d\u6700\u56b4\u683c\u7684\u5b89\u5168\u529f\u80fd\uff0c\u80fd\u5920\u9650\u5236\u54ea\u4e9b API\uff0c\u53ea\u80fd\u5f9e\u54ea\u88e1\u9032\u4f86\u5b58\u53d6\uff0c\u4ee5\u53ca\u8cc7\u6599\u53ea\u80fd\u8f38\u51fa\u5230\u54ea\u88e1\u3002 \u4f8b\u5982\u4f60\u53ef\u4ee5\u8a2d\u5b9a Service Controls \u9650\u5236\u53ea\u6709\u516c\u53f8\u7db2\u8def\u624d\u80fd\u5b58\u53d6 Secret Manager\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5373\u4f7f Secret Manager \u662f\u8edf\u9ad4\u529f\u80fd\uff0c\u4f46\u662f\u7576\u5b83\u8207\u5176\u4ed6 GCP \u5b89\u5168\u529f\u80fd\u7d50\u5408\u4f7f\u7528\u6642\uff0c\u9084\u662f\u53ef\u4ee5\u5728\u5404\u7a2e\u8cc7\u5b89\u529f\u80fd\u4e92\u76f8\u642d\u914d\u4e4b\u4e0b\uff0c\u7d66\u4e88\u5b8c\u5584\u7684\u4fdd\u8b77\uff0c\u6709\u6548\u964d\u4f4e\u6191\u8b49\u6d29\u6f0f\u7684\u98a8\u96aa\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">2. \u9ad8\u6548\u8ffd\u8e64 Service Account \u4f7f\u7528\u60c5\u6cc1<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u53ef\u4ee5\u4f7f\u7528 Cloud Logging \u8a2d\u5b9a\u67e5\u8a62\u8a9e\u6cd5\uff0c\u4f86\u8b58\u5225\u904e\u53bb 90 \u5929\u662f\u5426\u6709\u672a\u4f7f\u7528\u7684 Service Account\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728 Cloud Monitoring \u4e2d\u8a2d\u7f6e\u76e3\u63a7\u91d1\u9470\u8eab\u4efd\u9a57\u8b49\u4e8b\u4ef6\u6307\u6a19\uff0c\u7136\u5f8c\u91dd\u5c0d\u6307\u6a19\u8a2d\u5b9a\u5feb\u8a0a\uff0c\u4f8b\u5982\u67d0\u4e00\u500b Service Account \u6bcf\u5929\u4e0d\u6703\u7528\u4f86\u547c\u53eb\u67d0 API \u8d85\u904e 1000\u6b21\uff0c\u82e5\u8d85\u904e\u5c31\u767c\u51fa\u5feb\u8a0a\u901a\u77e5\u3002\u9019\u80fd\u5e6b\u52a9\u60a8\u4e86\u89e3 Service Account \u7684\u4f7f\u7528\u6a21\u5f0f\u548c\u983b\u7387\uff0c\u5f9e\u800c\u8b58\u5225\u7570\u5e38\u884c\u70ba\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6bcf\u500b Service Account \u90fd\u6709\u4e00\u500b\u300c\u6307\u6a19\u300d\u5206\u9801\uff0c\u53ef\u4ee5\u5feb\u901f\u67e5\u770b\u57fa\u672c\u7528\u91cf\u8cc7\u8a0a\uff0c\u4f60\u53ef\u4ee5\u76f4\u63a5\u5f9e\u9019\u88e1\u627e\u5230\u8981\u76e3\u63a7\u7684\u6307\u6a19\uff0c\u7136\u5f8c\u8a2d\u5b9a\u5feb\u8a0a\uff0c\u5c31\u4e0d\u7528\u53bb Metrics Explorer \u5927\u6d77\u6488\u91dd\u5c0b\u627e\u6307\u6a19\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXcIZaGp9sD8NpOx6V7mx_mfw2eBHR70Yyv0_vjSsUSrE0SnAzxlEXhnXWB0XjciCyFi4-robtTR0K4DTESwGjHnS1VK0QI9qOn8GNSjWMbDkSj5CkjNZe2yGo52aS_yS-vhsr2iUQ?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 15 \u5728 Service Account \u7684\u5e38\u898b\u6307\u6a19\u4e2d\u5efa\u7acb\u7528\u91cf\u544a\u8b66\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXcIZaGp9sD8NpOx6V7mx_mfw2eBHR70Yyv0_vjSsUSrE0SnAzxlEXhnXWB0XjciCyFi4-robtTR0K4DTESwGjHnS1VK0QI9qOn8GNSjWMbDkSj5CkjNZe2yGo52aS_yS-vhsr2iUQ?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 15 \u5728 Service Account \u7684\u5e38\u898b\u6307\u6a19\u4e2d\u5efa\u7acb\u7528\u91cf\u544a\u8b66\"><\/noscript><figcaption class=\"wp-element-caption\">15 \u5728 Service Account \u7684\u5e38\u898b\u6307\u6a19\u4e2d\u5efa\u7acb\u7528\u91cf\u544a\u8b66<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u64f7\u5716\u81ea <a href=\"https:\/\/console.cloud.google.com\/\">GCP Console<\/a><\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">3. \u5916\u90e8\u6574\u5408\u7684\u6700\u4f73\u5be6\u52d9\u5efa\u8b70<\/h4>\n\n\n\n<h5 class=\"wp-block-heading\">(1) \u5b89\u5168\u4f7f\u7528\u5916\u90e8\u4f86\u6e90\u7684\u6191\u8b49<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u7576\u60a8\u9700\u8981\u5f9e\u5916\u90e8\u4f86\u6e90\u53d6\u5f97 Service Account Key \u6642\uff0c\u5efa\u7acb\u4e00\u500b\u56b4\u8b39\u7684\u9a57\u8b49\u6d41\u7a0b\u975e\u5e38\u91cd\u8981\u3002\u9996\u5148\uff0c\u60a8\u61c9\u8a72\u78ba\u4fdd\u6191\u8b49\u7684\u4f86\u6e90\u662f\u53ef\u4fe1\u7684\uff0c\u4f8b\u5982\u5927\u5bb6\u7d71\u4e00\u90fd\u5f9e Secret Manager \u53d6\u5f97 Key\uff0c\u800c\u975e\u900f\u904e Line \u6216 Email \u4f86\u50b3\u9001\uff0c\u907f\u514d\u4f7f\u7528\u4f86\u6b77\u4e0d\u660e\u7684\u91d1\u9470\u6a94\u6848\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u56e0\u70ba\u99ed\u5ba2\u96d6\u7136\u6c92\u90a3\u9ebc\u5bb9\u6613\u507d\u9020 Key\uff0c\u4f46 Key \u88ab\u99ed\u5ba2\u53d6\u5f97\u5f8c\uff0c\u4fee\u6539\u5176\u4e2d\u67d0\u4e9b\u6b04\u4f4d\uff08\u5982\u91cd\u65b0\u5c0e\u5411\u6216\u6dfb\u52a0\u60e1\u610f\u7a0b\u5f0f\u78bc\uff09\u4f46\u4fdd\u7559\u6838\u5fc3\u52a0\u5bc6\u90e8\u5206\uff0c\u90fd\u6709\u53ef\u80fd\u5c0d\u4f60\u7684\u7cfb\u7d71\u6216 GCP \u74b0\u5883\u9020\u6210\u7834\u58de\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6240\u4ee5\u6bcf\u6b21\u6536\u5230\u6216\u4f7f\u7528 Service Account Key \u6a94\u6848\u6642\uff0c\u90fd\u61c9\u8a72\u6aa2\u67e5\u5176 JSON \u683c\u5f0f\u4e2d\u7684 &#8220;type&#8221; \u6b04\u4f4d\u503c\u662f\u5426\u78ba\u5be6\u70ba &#8220;service_account&#8221;\uff0c\u4e26\u4e14\u78ba\u8a8d Service Account \u7684\u96fb\u5b50\u90f5\u4ef6\u662f\u5426\u5177\u6709\u6b63\u7576\u7684\u6b0a\u9650\uff0c\u518d\u78ba\u8a8d\u9019\u500b Key \u662f\u5426\u80fd\u5920\u5f9e GCP \u7372\u53d6\u4ee4\u724c\u3002\u9019\u4e9b\u6aa2\u67e5\u6b65\u9a5f\u90fd\u80fd\u5e6b\u52a9\u60a8\u78ba\u8a8d\u60a8\u4f7f\u7528\u7684\u662f\u6b63\u78ba\u7684\u6191\u8b49\u985e\u578b\uff0c\u800c\u975e\u5176\u4ed6\u985e\u578b\u7684\u91d1\u9470\u6216\u507d\u9020\u7684\u6a94\u6848\u3002<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h5 class=\"wp-block-heading\">(2) \u5168\u7db2\u57df\u6388\u6b0a\u7684\u9ad8\u6548\u65b9\u6cd5<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">GCP \u63d0\u4f9b\u4e86\u4e00\u7a2e\u66f4\u5b89\u5168\u3001\u66f4\u7c21\u6f54\u7684\u65b9\u5f0f\u4f86\u9032\u884c\u670d\u52d9\u6388\u6b0a\uff0c\u4e0d\u9700\u8981\u4f7f\u7528\u50b3\u7d71\u7684 Service Account \u91d1\u9470\u3002\u9019\u7a2e\u65b9\u6cd5\u5229\u7528 signJwt API\uff0c\u53ef\u4ee5\u70ba\u5168\u7db2\u57df\u63d0\u4f9b\u9ad8\u6548\u7684\u6388\u6b0a\u6a5f\u5236\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ec0\u9ebc\u662f signJwt\uff1f<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u60f3\u50cf\u4f60\u9700\u8981\u5bc4\u4e00\u5c01\u975e\u5e38\u91cd\u8981\u7684\u4fe1\uff0c\u4f60\u60f3\u78ba\u4fdd\u6536\u4fe1\u4eba\u77e5\u9053\u9019\u5c01\u4fe1\u78ba\u5be6\u662f\u4f60\u5bc4\u7684\uff0c\u800c\u4e14\u4fe1\u7684\u5167\u5bb9\u6c92\u6709\u88ab\u4eba\u7ac4\u6539\u3002\u5728\u6578\u4f4d\u4e16\u754c\u4e2d\uff0csignJwt \u5c31\u50cf\u662f\u4e00\u7a2e\u7279\u6b8a\u7684\u300c\u6578\u4f4d\u7c3d\u540d\u300d\u670d\u52d9\uff0c\u5e6b\u4f60\u5728\u91cd\u8981\u6587\u4ef6\u4e0a\u84cb\u4e0a\u7121\u6cd5\u507d\u9020\u7684\u5370\u7ae0\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9996\u5148\u4f7f\u7528 Service Account \u6216 Workload Identity Federation \u9032\u884c\u8eab\u4efd\u9a57\u8b49\u3002\u5c31\u50cf\u5728\u516c\u53f8\u5927\u6a13\uff0c\u4f60\u4e0d\u7528\u81ea\u5df1\u5e36\u9470\u5319\uff0c\u800c\u662f\u5728\u524d\u53f0\u767b\u8a18\u5f8c\u7531\u4fdd\u5168\u78ba\u8a8d\u4f60\u7684\u8eab\u5206\u3002\u9019\u6a23\u53ef\u4ee5\u907f\u514d\u76f4\u63a5\u7ba1\u7406\u548c\u5b58\u5132\u654f\u611f\u7684\u91d1\u9470\u6587\u4ef6\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7136\u5f8c\u5efa\u7acb\u4e00\u500b JSON Web Token (JWT) \u505a\u70ba\u300c\u6578\u4f4d\u901a\u884c\u8b49\u300d\uff0c\u5b83\u5305\u542b\u5be6\u969b\u7684\u8cc7\u8a0a\uff0c\u4f8b\u5982\u8ab0\u53ef\u4ee5\u8b80\u53d6\u7279\u5b9a\u8cc7\u6599\u3001\u9019\u500b\u6b0a\u9650\u4f55\u6642\u904e\u671f\u7b49\uff0c\u9019\u500b JWT \u5c07\u4f5c\u70ba\u6388\u6b0a\u8acb\u6c42\u7684\u57fa\u790e\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u63a5\u8457\u628a\u9019\u5c01\u300c\u672a\u7c3d\u540d\u300d\u7684 JWT \u5167\u5bb9\u9001\u5230 Google \u7684 signJwt \u670d\u52d9\uff0c\u8aaa\uff1a\u300c\u8acb\u5e6b\u6211\u5728\u9019\u4efd\u6587\u4ef6\u4e0a\u7c3d\u540d\u3002\u300d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Google \u6703\u78ba\u8a8d\u4f60\u6709\u6b0a\u8acb\u6c42\u9019\u9805\u7c3d\u540d\u670d\u52d9\uff0c\u4f7f\u7528\u53ea\u6709 Google \u77e5\u9053\u7684\u7279\u6b8a\u79c1\u9470\uff0c\u518d\u4f9d\u64da\u4f60\u4fe1\u4ef6\u7684\u5167\u5bb9\u7522\u751f\u4e00\u500b\u7368\u7279\u7684\u6578\u5b78\u8a08\u7b97\u7d50\u679c\uff08\u7c3d\u540d\uff09\uff0c\u7136\u5f8c\u628a\u9019\u500b\u7c3d\u540d\u9644\u5728\u4f60\u7684\u4fe1\u4ef6\u4e0a\uff0c\u5f62\u6210\u4e00\u500b\u5b8c\u6574\u7684\u5df2\u7c3d\u540d JWT\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6700\u5f8c\u628a\u5b83\u9001\u7d66 Google \u7684\u6388\u6b0a\u670d\u52d9\uff0c\u63db\u53d6\u4e00\u500b\u81e8\u6642\u7684\u300c\u5b58\u53d6\u4ee4\u724c\u300d\uff0c\u5176\u4ed6 Google \u670d\u52d9\u770b\u5230\u9019\u500b\u4ee4\u724c\u6642\uff0c\u6703\u4f7f\u7528 Google \u7684\u516c\u9470\u9a57\u8b49\u7c3d\u540d\u3002\u5982\u679c\u7c3d\u540d\u6709\u6548\uff0c\u4e14\u5167\u5bb9\u986f\u793a\u4f60\u6709\u6b0a\u9650\uff0c\u670d\u52d9\u5c31\u6703\u5141\u8a31\u5b58\u53d6\u3002<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" class=\"lazyload\" data-src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXc5OIKXu82XTEjkcgnaqZ4_bXY0fTuXtLhBBpOnUrsJDLbzmbgsAdrXzV95Ppz0jFnyGRS3lJnx4lacAnAKYxu8vjKSsprI1ZybuAimlzFB2CdD36IfuAYoGw0qCVog7Tqdu5mu7A?key=U4UuwklBlRu85QL4h9BUp_3T\" src=\"data:image\/gif;base64,R0lGODlhAQABAIAAAAAAAP\/\/\/yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\" alt=\"GCP 16 signJWT \u904b\u4f5c\u6d41\u7a0b\u793a\u610f\u5716\"\/><noscript><img decoding=\"async\" src=\"https:\/\/lh7-rt.googleusercontent.com\/docsz\/AD_4nXc5OIKXu82XTEjkcgnaqZ4_bXY0fTuXtLhBBpOnUrsJDLbzmbgsAdrXzV95Ppz0jFnyGRS3lJnx4lacAnAKYxu8vjKSsprI1ZybuAimlzFB2CdD36IfuAYoGw0qCVog7Tqdu5mu7A?key=U4UuwklBlRu85QL4h9BUp_3T\" alt=\"GCP 16 signJWT \u904b\u4f5c\u6d41\u7a0b\u793a\u610f\u5716\"><\/noscript><figcaption class=\"wp-element-caption\">16 signJWT \u904b\u4f5c\u6d41\u7a0b\u793a\u610f\u5716<br>\u8cc7\u6599\u4f86\u6e90\uff1a\u6771\u6771\u8001\u5e2b\u81ea\u884c\u7e6a\u88fd<\/figcaption><\/figure>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u7a2e\u65b9\u6cd5\u6e1b\u5c11\u4e86\u5b89\u5168\u98a8\u96aa\uff0c\u56e0\u70ba\u4f60\u4e0d\u9700\u8981\u4e0b\u8f09\u3001\u767c\u4f48\u6216\u7ba1\u7406 Service Account Key \u7684\u6a94\u6848\u3002\u540c\u6642\u7c21\u5316\u4e86\u6388\u6b0a\u6d41\u7a0b\uff0c\u4f7f\u6574\u500b\u904e\u7a0b\u66f4\u52a0\u9ad8\u6548\u548c\u6613\u65bc\u7dad\u8b77\u3002\u5c0d\u65bc\u9700\u8981\u5728\u591a\u500b\u670d\u52d9\u6216\u6574\u500b\u7db2\u57df\u4e2d\u9032\u884c\u6388\u6b0a\u7684\u5834\u666f\uff0c\u9019\u662f\u4e00\u500b\u7279\u5225\u6709\u50f9\u503c\u7684\u89e3\u6c7a\u65b9\u6848\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f60\u53ef\u80fd\u6703\u64d4\u5fc3\uff0c\u770b\u8d77\u4f86\u6d41\u7a0b\u5f88\u9577\uff0c\u6703\u4e0d\u6703\u4f86\u56de\u5f88\u82b1\u6642\u9593\u6216\u5403\u6548\u80fd\uff1f<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5176\u5be6 GCP \u7684\u9019\u4e9b\u670d\u52d9\u90fd\u7d93\u904e\u9ad8\u5ea6\u512a\u5316\uff0c\u5927\u90e8\u5206\u6b65\u9a5f\u5728 GCP \u7684\u57fa\u790e\u8a2d\u65bd\u4e0a\u57f7\u884c\u5f97\u975e\u5e38\u5feb\u901f\u3002\u800c\u4e14\u9019\u500b\u6d41\u7a0b\u53ea\u6709\u5728\u7b2c\u4e00\u6b21\u6b21\u5efa\u7acb\u9023\u63a5\u6216\u6bcf\u6b21\u4ee4\u724c\u904e\u671f\u6642\u624d\u9700\u8981\u57f7\u884c\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b58\u53d6\u4ee4\u724c\u4e00\u65e6\u7372\u53d6\uff0c\u901a\u5e38\u53ef\u4ee5\u4f7f\u7528\u5e7e\u500b\u5c0f\u6642\uff08\u5178\u578b\u8a2d\u5b9a\u70ba 1 \u5c0f\u6642\uff09\uff0c\u4e0d\u9700\u8981\u6bcf\u6b21\u8acb\u6c42\u90fd\u91cd\u65b0\u57f7\u884c\u6574\u500b\u6d41\u7a0b\u3002\u6574\u500b\u6b65\u9a5f\u52a0\u8d77\u4f86\u901a\u5e38\u53ea\u9700\u6578\u767e\u6beb\u79d2\u5b8c\u6210\uff0c\u6240\u4ee5\u5728\u5be6\u969b\u57f7\u884c\u6642\uff0c\u6548\u80fd\u5f71\u97ff\u662f\u5f88\u6709\u9650\u7684\uff0c\u537b\u56e0\u6b64\u63d0\u5347\u5f88\u9ad8\u7684\u5b89\u5168\u6027\u3002<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">(\u56db) \u7dad\u8b77\u8207\u6cbb\u7406\u6280\u5de7<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">1. \u91d1\u9470\u8f2a\u66ff\u7684\u6700\u4f73\u7b56\u7565<\/h4>\n\n\n\n<h5 class=\"wp-block-heading\">(1) \u5236\u5b9a\u6709\u6548\u7684\u8f2a\u66ff\u8a08\u5283<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u4e0a\u8ff0\u63d0\u5230\uff0c\u5c31\u50cf\u5b9a\u671f\u66f4\u63db\u5bb6\u4e2d\u9580\u9396\u4e00\u6a23\uff0c\u5373\u4f7f\u76ee\u524d\u6c92\u6709\u5b89\u5168\u554f\u984c\uff0c\u5b9a\u671f\u7684\u66f4\u65b0\u4e5f\u80fd\u9632\u7bc4\u6f5b\u5728\u5a01\u8105\u3002\u5efa\u8b70\u6bcf\u9694 90 \u5929\u9032\u884c\u4e00\u6b21\u91d1\u9470\u8f2a\u66ff\uff0c\u9019\u6a23\u5373\u4f7f\u67d0\u500b\u91d1\u9470\u88ab\u6d29\u9732\uff0c\u5176\u53ef\u7528\u6642\u9593\u4e5f\u6703\u53d7\u5230\u9650\u5236\u3002\u5728\u5be6\u969b\u64cd\u4f5c\u4e2d\uff0c\u53ef\u4ee5\u901a\u904e GCP \u63a7\u5236\u53f0\u6216\u4f7f\u7528 gcloud \u6307\u4ee4\u4f86\u5275\u5efa\u65b0\u91d1\u9470\u4e26\u5ee2\u68c4\u820a\u91d1\u9470\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u70ba\u4e86\u6e1b\u5c11\u4eba\u70ba\u932f\u8aa4\u4e26\u78ba\u4fdd\u8f2a\u66ff\u6d41\u7a0b\u7684\u4e00\u81f4\u6027\uff0c\u5efa\u7acb\u81ea\u52d5\u5316\u7684\u91d1\u9470\u8f2a\u66ff\u6a5f\u5236\u975e\u5e38\u91cd\u8981\u3002\u60a8\u53ef\u4ee5\u5229\u7528 Cloud Functions \u914d\u5408 Cloud Scheduler \u4f86\u5b9a\u671f\u89f8\u767c\u91d1\u9470\u8f2a\u66ff\u6d41\u7a0b\uff0c\u6216\u8005\u4f7f\u7528 CI\/CD Pipeline \u4f86\u7ba1\u7406\u9019\u4e00\u904e\u7a0b\u3002\u81ea\u52d5\u5316\u4e0d\u53ea\u662f\u8f2a\u66ff\uff0c\u9084\u80fd\u5c07\u65b0\u7684\u91d1\u9470\u81ea\u52d5\u90e8\u7f72\u5230\u76f8\u95dc\u670d\u52d9\uff0c\u6e1b\u5c11\u670d\u52d9\u4e2d\u65b7\u6216\u4eba\u70ba\u64cd\u4f5c\u932f\u8aa4\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5c0d\u65bc\u5132\u5b58\u5728 HSM \u4e2d\u7684\u9ad8\u654f\u611f\u5ea6\u91d1\u9470\uff0c\u9700\u8981\u5236\u5b9a\u66f4\u56b4\u683c\u7684\u8f2a\u66ff\u7b56\u7565\u3002\u9019\u4e9b\u91d1\u9470\u901a\u5e38\u7528\u65bc\u52a0\u5bc6\u91cd\u8981\u8cc7\u6599\u6216\u7c3d\u7f72\u95dc\u9375\u4ea4\u6613\uff0c\u56e0\u6b64\u5efa\u8b70\u70ba HSM \u91d1\u9470\u8a2d\u5b9a\u66f4\u77ed\u7684\u8f2a\u66ff\u5468\u671f\uff0c\u4f8b\u5982 30\uff5e60 \u5929\u3002<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">(2) \u9ad8\u6548\u7ba1\u7406\u672a\u4f7f\u7528\u7684\u91d1\u9470<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u524d\u9762\u63d0\u5230\uff0c\u4f60\u53ef\u4ee5\u7528 Cloud Logging \u8a2d\u5b9a\u67e5\u8a62\u8a9e\u6cd5\uff0c\u4f86\u8b58\u5225\u904e\u53bb 90 \u5929\u662f\u5426\u6709\u672a\u4f7f\u7528\u7684 Service Account\uff0c\u4e26\u4e14\u8a2d\u5b9a Cloud Monitoring \u76e3\u63a7\u6307\u6a19\uff0c \u986f\u793a\u5404\u91d1\u9470\u7684\u4f7f\u7528\u983b\u7387\uff0c\u5e6b\u52a9\u60a8\u5feb\u901f\u767c\u73fe\u90a3\u4e9b\u9592\u7f6e\u7684\u91d1\u9470\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u500b\u52d5\u4f5c\u6700\u597d\u5efa\u7acb\u6210\u4e00\u500b SOP\uff0c\u6bcf\u6708\u6216\u6bcf\u5b63\u5ea6\u5c0d\u6240\u6709 Service Account Key \u9032\u884c\u5168\u9762\u5be9\u67e5\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528\u6a19\u7c64\u7cfb\u7d71\u4f86\u6a19\u8a18\u4e0d\u540c\u72c0\u614b\u7684\u91d1\u9470\uff0c\u5982\u300c\u6d3b\u8e8d\u300d\u3001\u300c\u5f85\u89c0\u5bdf\u300d\u6216\u300c\u5f85\u522a\u9664\u300d\u3002\u540c\u6642\uff0c\u78ba\u4fdd\u5be9\u67e5\u7d50\u679c\u6709\u660e\u78ba\u7684\u8a18\u9304\u548c\u5f8c\u7e8c\u884c\u52d5\uff0c\u907f\u514d\u91cd\u8907\u5de5\u4f5c\u6216\u907a\u6f0f\u91cd\u8981\u91d1\u9470\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u79fb\u9664\u672a\u4f7f\u7528\u7684\u91d1\u9470\u6642\uff0c\u4e0d\u8981\u6025\u65bc\u522a\u9664\uff0c\u800c\u662f\u5148\u5c07\u5176\u505c\u7528\u3002\u505c\u7528\u5f8c\uff0c\u89c0\u5bdf\u4e00\u6bb5\u6642\u9593\uff08\u901a\u5e38\u70ba 7\uff5e14 \u5929\uff09\uff0c\u78ba\u4fdd\u6c92\u6709\u4efb\u4f55\u7cfb\u7d71\u4f9d\u8cf4\u9019\u4e9b\u91d1\u9470\u3002\u7b49\u5230\u78ba\u8a8d\u90fd\u6c92\u554f\u984c\uff0c\u518d\u57f7\u884c\u522a\u9664\u64cd\u4f5c\u3002\u9019\u7a2e\u300c\u5148\u505c\u7528\u518d\u522a\u9664\u300d\u7684\u65b9\u6cd5\u80fd\u5920\u6e1b\u5c11\u56e0\u8aa4\u522a\u800c\u5c0e\u81f4\u7684\u7cfb\u7d71\u4e2d\u65b7\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2. \u6a5f\u69cb\u5c64\u7d1a\uff08Organization Level\uff09\u7684\u7ba1\u7406\u5efa\u8b70<\/h4>\n\n\n\n<h5 class=\"wp-block-heading\">(1) \u6709\u6548\u5229\u7528\u6a5f\u69cb\u653f\u7b56<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u7ba1\u7406\u54e1\u61c9\u5728\u6a5f\u69cb\u5c64\u7d1a\u8a2d\u5b9a\u9810\u8a2d\u7684\u9650\u5236\u689d\u4ef6\uff0c\u540c\u6642\u4e5f\u70ba\u7279\u6b8a\u9700\u6c42\u7684\u8a2d\u5b9a\u4f8b\u5916\u653f\u7b56\u3002\u4f8b\u5982\u300ciam.disableServiceAccountKeyCreation\u300d\uff0c\u9810\u8a2d\u7981\u6b62\u6240\u6709\u5c08\u6848\u5efa\u7acb Service Account \u91d1\u9470\uff0c\u4f46\u70ba\u958b\u767c\u74b0\u5883\u6216\u7279\u5b9a\u6574\u5408\u9700\u6c42\u7684\u5c08\u6848\u8a2d\u7f6e\u4f8b\u5916\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9084\u6709\u900f\u904e\u689d\u4ef6\u8868\u9054\u5f0f\uff0c\u5982\u300cresource.name.startsWith(&#8220;projects\/dev-&#8220;)\u300d\uff0c\u53ef\u4ee5\u50c5\u5141\u8a31\u540d\u7a31\u4ee5\u300cdev-\u300d\u958b\u982d\u7684\u958b\u767c\u5c08\u6848\u5efa\u7acb\u91d1\u9470\uff0c\u5be6\u73fe\u66f4\u9748\u6d3b\u7684\u63a7\u5236\u6a5f\u5236\uff0c\u78ba\u4fdd\u5b89\u5168\u653f\u7b56\u65e2\u56b4\u8b39\u53c8\u4e0d\u59a8\u7919\u696d\u52d9\u904b\u4f5c\u3002<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">(2) \u89d2\u8272\u8207\u6b0a\u9650\u7684\u6700\u4f73\u914d\u7f6e<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">\u76e1\u91cf\u907f\u514d\u4f7f\u7528\u904e\u65bc\u5bec\u9b06\u7684 Editor \u89d2\u8272\uff0c\u800c\u6539\u7528\u66f4\u7cbe\u7d30\u7684\u9810\u5b9a\u7fa9\u89d2\u8272\uff08Predefined Roles\uff09\u3002\u4f8b\u5982\u70ba\u8ca0\u8cac CI\/CD \u7684 Service Account \u5206\u914d\u300cCloud Build Service Agent\u300d\u548c\u300cStorage Object Viewer\u300d\u89d2\u8272\uff0c\u5171\u5141\u8a31\u53ea\u80fd\u57f7\u884c\u90e8\u7f72\u5de5\u4f5c\u548c\u8b80\u53d6\u5fc5\u8981\u7684\u7269\u4ef6\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5c0d\u65bc\u9700\u8981\u76e3\u63a7\u8cc7\u6e90\u7684 Service Account\uff0c\u53ef\u4ee5\u5efa\u7acb\u5305\u542b\u300cmonitoring.timeSeries.list\u300d\u548c\u300clogging.logEntries.list\u300d\u7b49\u6975\u5c0f\u6b0a\u9650\u7684\u81ea\u8a02\u89d2\u8272\uff0c\u800c\u4e0d\u662f\u6388\u4e88\u6b0a\u9650\u7bc4\u570d\u904e\u5927\u7684\u300cMonitoring Viewer\u300d\u89d2\u8272\uff0c\u907f\u514d\u610f\u5916\u522a\u9664\u8cc7\u6e90\u6216\u672a\u6388\u6b0a\u8a2a\u554f\u654f\u611f\u8cc7\u6599\u7b49\u554f\u984c\u3002<\/p>\n\n\n\n<div style=\"height:50px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u6587\u7ae0\u8f49\u8f09\u81ea<a href=\"https:\/\/dongdonggcp.com\/2025\/04\/14\/tips-when-developing-with-gcp-service-account\/\" target=\"_blank\" rel=\"noopener\" title=\"\">\u300a\u6771\u6771GCP \u6559\u5b78\u300b<\/a>\u7db2\u7ad9<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019 [&hellip;]<\/p>\n","protected":false},"author":57,"featured_media":57444,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[681,675],"tags":[558],"region":[],"class_list":["post-57441","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-google-cloud-zh-hant","category-learning-column","tag-google-cloud-3"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"\u6771\u6771\u8001\u5e2b\"\/>\n\t<meta name=\"keywords\" content=\"google cloud,\u6559\u5b78\u6587\u7ae0\u5c08\u6b04\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"zh_TW\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Master Concept\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7 | \u601d\u60f3\u79d1\u6280 Master Concept\" \/>\n\t\t<meta property=\"og:description\" content=\"\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/masterconcept.ai\/wp-content\/uploads\/2025\/04\/\u4f7f\u7528-GCP-Service-Account-\u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/masterconcept.ai\/wp-content\/uploads\/2025\/04\/\u4f7f\u7528-GCP-Service-Account-\u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-04-09T07:30:40+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-06-13T07:19:23+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hkmci\/\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:title\" content=\"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7 | \u601d\u60f3\u79d1\u6280 Master Concept\" \/>\n\t\t<meta name=\"twitter:description\" content=\"\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/masterconcept.ai\/wp-content\/uploads\/2025\/04\/\u4f7f\u7528-GCP-Service-Account-\u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#article\",\"name\":\"\\u3010\\u6771\\u6771\\u8001\\u5e2b X \\u601d\\u60f3\\u79d1\\u6280\\u3011\\u4f7f\\u7528 GCP Service Account \\u958b\\u767c\\u7a0b\\u5f0f\\u7684\\u5c0f\\u6280\\u5de7 | \\u601d\\u60f3\\u79d1\\u6280 Master Concept\",\"headline\":\"\\u3010\\u6771\\u6771\\u8001\\u5e2b X \\u601d\\u60f3\\u79d1\\u6280\\u3011\\u4f7f\\u7528 GCP Service Account \\u958b\\u767c\\u7a0b\\u5f0f\\u7684\\u5c0f\\u6280\\u5de7\",\"author\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/author\\\/dong\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/masterconcept.ai\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/\\u4f7f\\u7528-GCP-Service-Account-\\u958b\\u767c\\u7a0b\\u5f0f\\u7684\\u5c0f\\u6280\\u5de7.png\",\"width\":1280,\"height\":720},\"datePublished\":\"2025-04-09T15:30:40+08:00\",\"dateModified\":\"2025-06-13T15:19:23+08:00\",\"inLanguage\":\"zh-TW\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#webpage\"},\"articleSection\":\"Google Cloud, \\u6559\\u5b78\\u6587\\u7ae0\\u5c08\\u6b04, Google Cloud, \\u53ef\\u9078\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\\u5206\\u985e\\\/learning-column\\\/#listItem\",\"name\":\"\\u6559\\u5b78\\u6587\\u7ae0\\u5c08\\u6b04\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\\u5206\\u985e\\\/learning-column\\\/#listItem\",\"position\":2,\"name\":\"\\u6559\\u5b78\\u6587\\u7ae0\\u5c08\\u6b04\",\"item\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\\u5206\\u985e\\\/learning-column\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\\u5206\\u985e\\\/learning-column\\\/google-cloud-zh-hant\\\/#listItem\",\"name\":\"Google Cloud\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\\u5206\\u985e\\\/learning-column\\\/google-cloud-zh-hant\\\/#listItem\",\"position\":3,\"name\":\"Google Cloud\",\"item\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\\u5206\\u985e\\\/learning-column\\\/google-cloud-zh-hant\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#listItem\",\"name\":\"\\u3010\\u6771\\u6771\\u8001\\u5e2b X \\u601d\\u60f3\\u79d1\\u6280\\u3011\\u4f7f\\u7528 GCP Service Account \\u958b\\u767c\\u7a0b\\u5f0f\\u7684\\u5c0f\\u6280\\u5de7\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\\u5206\\u985e\\\/learning-column\\\/#listItem\",\"name\":\"\\u6559\\u5b78\\u6587\\u7ae0\\u5c08\\u6b04\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#listItem\",\"position\":4,\"name\":\"\\u3010\\u6771\\u6771\\u8001\\u5e2b X \\u601d\\u60f3\\u79d1\\u6280\\u3011\\u4f7f\\u7528 GCP Service Account \\u958b\\u767c\\u7a0b\\u5f0f\\u7684\\u5c0f\\u6280\\u5de7\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\\u5206\\u985e\\\/learning-column\\\/google-cloud-zh-hant\\\/#listItem\",\"name\":\"Google Cloud\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/#organization\",\"name\":\"Master Concept\",\"description\":\"\\u4e9e\\u592a\\u5730\\u5340\\u9818\\u5148\\u7d1a\\u96f2\\u7aef\\u6280\\u8853\\u9867\\u554f\",\"url\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\",\"telephone\":\"+85235896700\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/hkmci.com\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/mci_logo.png\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/author\\\/dong\\\/#author\",\"url\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/author\\\/dong\\\/\",\"name\":\"\\u6771\\u6771\\u8001\\u5e2b\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fac5ba33ff05112cca3def34334036ddfda79d6a6edb12e2efccc95b84170d14?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"\\u6771\\u6771\\u8001\\u5e2b\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#webpage\",\"url\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/\",\"name\":\"\\u3010\\u6771\\u6771\\u8001\\u5e2b X \\u601d\\u60f3\\u79d1\\u6280\\u3011\\u4f7f\\u7528 GCP Service Account \\u958b\\u767c\\u7a0b\\u5f0f\\u7684\\u5c0f\\u6280\\u5de7 | \\u601d\\u60f3\\u79d1\\u6280 Master Concept\",\"description\":\"\\u4e0a\\u6b21\\u5728 \\u300aGCP \\u7684 Cloud IAM \\u2013 \\u89d2\\u8272\\u8207\\u6b0a\\u9650\\u63a7\\u7ba1\\u4ecb\\u7d39\\u300b\\u6709\\u63d0\\u5230 Service Account \\uff0c\\u9019\\u6b21\\u6211\\u5011\\u5f9e\\u958b\\u767c\\u4eba\\u54e1\\u7684\\u89d2\\u5ea6\\uff0c\\u4f86\\u5206\\u4eab\\u5728\\u958b\\u767c\\u7a0b\\u5f0f\\u904e\\u7a0b\\u7576\\u4e2d\\uff0c\\u4f7f\\u7528 Service Account \\u7684\\u4e00\\u4e9b\\u6280\\u5de7\\u548c\\u6ce8\\u610f\\u4e8b\\u9805\\u3002\",\"inLanguage\":\"zh-TW\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/author\\\/dong\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/author\\\/dong\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/masterconcept.ai\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/\\u4f7f\\u7528-GCP-Service-Account-\\u958b\\u767c\\u7a0b\\u5f0f\\u7684\\u5c0f\\u6280\\u5de7.png\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#mainImage\",\"width\":1280,\"height\":720},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/learning-column\\\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\\\/#mainImage\"},\"datePublished\":\"2025-04-09T15:30:40+08:00\",\"dateModified\":\"2025-06-13T15:19:23+08:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/#website\",\"url\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/\",\"name\":\"Master Concept\",\"description\":\"\\u4e9e\\u592a\\u5730\\u5340\\u9818\\u5148\\u7d1a\\u96f2\\u7aef\\u6280\\u8853\\u9867\\u554f\",\"inLanguage\":\"zh-TW\",\"publisher\":{\"@id\":\"https:\\\/\\\/masterconcept.ai\\\/zh-hant\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7 | \u601d\u60f3\u79d1\u6280 Master Concept","description":"\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002","canonical_url":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/","robots":"max-image-preview:large","keywords":"google cloud,\u6559\u5b78\u6587\u7ae0\u5c08\u6b04","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#article","name":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7 | \u601d\u60f3\u79d1\u6280 Master Concept","headline":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7","author":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/author\/dong\/#author"},"publisher":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/masterconcept.ai\/wp-content\/uploads\/2025\/04\/\u4f7f\u7528-GCP-Service-Account-\u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7.png","width":1280,"height":720},"datePublished":"2025-04-09T15:30:40+08:00","dateModified":"2025-06-13T15:19:23+08:00","inLanguage":"zh-TW","mainEntityOfPage":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#webpage"},"isPartOf":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#webpage"},"articleSection":"Google Cloud, \u6559\u5b78\u6587\u7ae0\u5c08\u6b04, Google Cloud, \u53ef\u9078"},{"@type":"BreadcrumbList","@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/#listItem","position":1,"name":"Home","item":"https:\/\/masterconcept.ai\/zh-hant\/","nextItem":{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/#listItem","name":"\u6559\u5b78\u6587\u7ae0\u5c08\u6b04"}},{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/#listItem","position":2,"name":"\u6559\u5b78\u6587\u7ae0\u5c08\u6b04","item":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/","nextItem":{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/google-cloud-zh-hant\/#listItem","name":"Google Cloud"},"previousItem":{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/google-cloud-zh-hant\/#listItem","position":3,"name":"Google Cloud","item":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/google-cloud-zh-hant\/","nextItem":{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#listItem","name":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7"},"previousItem":{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/#listItem","name":"\u6559\u5b78\u6587\u7ae0\u5c08\u6b04"}},{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#listItem","position":4,"name":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7","previousItem":{"@type":"ListItem","@id":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/google-cloud-zh-hant\/#listItem","name":"Google Cloud"}}]},{"@type":"Organization","@id":"https:\/\/masterconcept.ai\/zh-hant\/#organization","name":"Master Concept","description":"\u4e9e\u592a\u5730\u5340\u9818\u5148\u7d1a\u96f2\u7aef\u6280\u8853\u9867\u554f","url":"https:\/\/masterconcept.ai\/zh-hant\/","telephone":"+85235896700","logo":{"@type":"ImageObject","url":"https:\/\/hkmci.com\/wp-content\/uploads\/2020\/05\/mci_logo.png","@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#organizationLogo"},"image":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/masterconcept.ai\/zh-hant\/author\/dong\/#author","url":"https:\/\/masterconcept.ai\/zh-hant\/author\/dong\/","name":"\u6771\u6771\u8001\u5e2b","image":{"@type":"ImageObject","@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/fac5ba33ff05112cca3def34334036ddfda79d6a6edb12e2efccc95b84170d14?s=96&d=mm&r=g","width":96,"height":96,"caption":"\u6771\u6771\u8001\u5e2b"}},{"@type":"WebPage","@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#webpage","url":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/","name":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7 | \u601d\u60f3\u79d1\u6280 Master Concept","description":"\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002","inLanguage":"zh-TW","isPartOf":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/#website"},"breadcrumb":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#breadcrumblist"},"author":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/author\/dong\/#author"},"creator":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/author\/dong\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/masterconcept.ai\/wp-content\/uploads\/2025\/04\/\u4f7f\u7528-GCP-Service-Account-\u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7.png","@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#mainImage","width":1280,"height":720},"primaryImageOfPage":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/#mainImage"},"datePublished":"2025-04-09T15:30:40+08:00","dateModified":"2025-06-13T15:19:23+08:00"},{"@type":"WebSite","@id":"https:\/\/masterconcept.ai\/zh-hant\/#website","url":"https:\/\/masterconcept.ai\/zh-hant\/","name":"Master Concept","description":"\u4e9e\u592a\u5730\u5340\u9818\u5148\u7d1a\u96f2\u7aef\u6280\u8853\u9867\u554f","inLanguage":"zh-TW","publisher":{"@id":"https:\/\/masterconcept.ai\/zh-hant\/#organization"}}]},"og:locale":"zh_TW","og:site_name":"Master Concept","og:type":"article","og:title":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7 | \u601d\u60f3\u79d1\u6280 Master Concept","og:description":"\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002","og:url":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/","og:image":"https:\/\/masterconcept.ai\/wp-content\/uploads\/2025\/04\/\u4f7f\u7528-GCP-Service-Account-\u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7.png","og:image:secure_url":"https:\/\/masterconcept.ai\/wp-content\/uploads\/2025\/04\/\u4f7f\u7528-GCP-Service-Account-\u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7.png","og:image:width":1280,"og:image:height":720,"article:published_time":"2025-04-09T07:30:40+00:00","article:modified_time":"2025-06-13T07:19:23+00:00","article:publisher":"https:\/\/www.facebook.com\/Hkmci\/","twitter:card":"summary","twitter:title":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7 | \u601d\u60f3\u79d1\u6280 Master Concept","twitter:description":"\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002","twitter:image":"https:\/\/masterconcept.ai\/wp-content\/uploads\/2025\/04\/\u4f7f\u7528-GCP-Service-Account-\u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7.png"},"aioseo_meta_data":{"post_id":"57441","title":null,"description":"\u4e0a\u6b21\u5728 \u300aGCP \u7684 Cloud IAM \u2013 \u89d2\u8272\u8207\u6b0a\u9650\u63a7\u7ba1\u4ecb\u7d39\u300b\u6709\u63d0\u5230 Service Account \uff0c\u9019\u6b21\u6211\u5011\u5f9e\u958b\u767c\u4eba\u54e1\u7684\u89d2\u5ea6\uff0c\u4f86\u5206\u4eab\u5728\u958b\u767c\u7a0b\u5f0f\u904e\u7a0b\u7576\u4e2d\uff0c\u4f7f\u7528 Service Account \u7684\u4e00\u4e9b\u6280\u5de7\u548c\u6ce8\u610f\u4e8b\u9805\u3002","keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2025-04-09 06:32:11","updated":"2025-04-14 08:22:39","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/masterconcept.ai\/zh-hant\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/\" title=\"\u6559\u5b78\u6587\u7ae0\u5c08\u6b04\">\u6559\u5b78\u6587\u7ae0\u5c08\u6b04<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/google-cloud-zh-hant\/\" title=\"Google Cloud\">Google Cloud<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/masterconcept.ai\/zh-hant\/"},{"label":"\u6559\u5b78\u6587\u7ae0\u5c08\u6b04","link":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/"},{"label":"Google Cloud","link":"https:\/\/masterconcept.ai\/zh-hant\/\u5206\u985e\/learning-column\/google-cloud-zh-hant\/"},{"label":"\u3010\u6771\u6771\u8001\u5e2b X \u601d\u60f3\u79d1\u6280\u3011\u4f7f\u7528 GCP Service Account \u958b\u767c\u7a0b\u5f0f\u7684\u5c0f\u6280\u5de7","link":"https:\/\/masterconcept.ai\/zh-hant\/learning-column\/gcp-kol-x-master-concept-tips-for-developing-programs-using-gcp-service-account\/"}],"permalink_manager":null,"_links":{"self":[{"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/posts\/57441","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/users\/57"}],"replies":[{"embeddable":true,"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/comments?post=57441"}],"version-history":[{"count":0,"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/posts\/57441\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/media\/57444"}],"wp:attachment":[{"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/media?parent=57441"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/categories?post=57441"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/tags?post=57441"},{"taxonomy":"region","embeddable":true,"href":"https:\/\/masterconcept.ai\/zh-hant\/wp-json\/wp\/v2\/region?post=57441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}