-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Open
Labels
bigqueryBigQuery connectorBigQuery connector
Description
Problem
Workload Identity Federation is the method for accessing Google Cloud resources without using a service account secret key.
However, the BigQuery connector currently only supports secret keys (docs).
Proposed Solution
bigquery-connector
using google-auth-library for authentication. It supports workload identity federation, just following this guide: https://github.com/googleapis/google-auth-library-java?tab=readme-ov-file#workload-identity-federation
Why
- Service account keys are powerful credentials that can present a security risk if not managed correctly. Workload Identity Federation eliminates the maintenance and security burden associated with service account keys.
- For security reasons, some organizations do not allow the use of service account keys.
thaiph99
Metadata
Metadata
Assignees
Labels
bigqueryBigQuery connectorBigQuery connector