Before you create a destination to start transferring data to your Google Cloud Storage (GCS) Bucket, see these prerequisites.
Once you've made sure all prerequisites are met, see our guide for How to configure a data destination.
Prerequisites for creating a destination
1. You need to have an existing GCS Bucket.
2. You need to have a Service Account that has at least the role Storage Object Creator for the bucket you want to use for your transfers.
You or your GCP Admins can create a Service Account in the Google Cloud Platform, under IAM & Admin → Service Accounts at console.cloud.google.com/iam-admin/serviceaccounts. You will also need to create a JSON key for that Service account. The entire JSON key file content is needed to create the destination at team.supermetrics.com – it should look similar to this:
{
"type": "service_account",
"project_id": "<YOUR_GCP_PROJECT_ID>",
"private_key_id": "12345ABCDummyKey",
"private_key": "-----BEGIN PRIVATE KEY-----\12345ABCDummyKey\n-----END PRIVATE KEY-----\n",
"client_email": "<NAME_OF_SERVICE_ACCOUNT>@<YOUR_GCP_PROJECT_ID>.iam.gserviceaccount.com",
"client_id": "12345ABCDummyClientID",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://oauth2.googleapis.com/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/<NAME_OF_SERVICE_ACCOUNT>%40<YOUR_GCP_PROJECT_ID>.iam.gserviceaccount.com"
}Additionally, you can define the role for the Service Account in the Permissions tab for a specific bucket:
3. Sufficient permissions
- You or your GCP Admins can either assign the role Storage Object Creator to the Service Account or create a custom role with permission “storage.objects.create”. See instructions in Google Cloud IAM Documentation: Creating and managing custom roles.
4. IP whitelisting is needed if your GCP projects only allows access from “selected networks”.
- You or your GCP Admins can add the following Supermetrics IP addresses to your GCP setup, if your organization requires IP whitelisting:
- 54.75.55.54
- 54.75.80.21
- 54.247.165.52
- 23.20.234.176
- NOTE: Do not forget to add your own IP address to avoid getting “locked out”.