Does Google Cloud have anything similar to Managed Identity offered by Azure?

893 Views Asked by At

Does Google Cloud have anything similar to the managed identity offered by Azure. Refer the video in below link:

https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

As I understand Managed Identity eliminates the need for passwords and private keys. Services traditionally use a service account to access resources but that service account uses a password that needs to be stored in a secrets manager and periodically auto-rotated. Managed Identity eliminates need of any password.

2

There are 2 best solutions below

0
On

An Azure System Assigned and User Assigned Identity is similar to a service account assigned to a Compute Engine instance. Neither method require passwords or secrets. Both methods store the authorization tokens in the metadata service.

Compute Engine: Service accounts

Google Cloud uses the service account identity (OIDC) extensively to authorize services to communicate with each other.

1
On

Azure Managed Identities. Like Google Service Account, Azure system assigned managed identity is used to authenticate resources like VM, Key Vault etc. using token/private keys.

https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/how-managed-identities-work-vm