Managed Airflow (Gen 3) | Managed Airflow (Gen 2) | Managed Airflow (Legacy Gen 1)
This page explains how to enable and disable the Managed Service for Apache Airflow service in your Google Cloud project.
For information about services management on Google Cloud, see Enabling and Disabling Services.
For a list of services required by Managed Airflow in VPC Service Controls configurations, see Configure VPC Service Controls.
Enable the Managed Airflow service
This section describes how to enable the Managed Airflow service in your Google Cloud project.
Before you begin
To enable the Managed Airflow service, you must have the correct Identity and Access Management permissions. To learn about the IAM requirements for Service Usage, see Service Usage page for Access Control.
Make sure that billing is enabled in your project.
Enable Cloud Composer API API
Console
Enable the Cloud Composer API API:
Roles required to enable APIs
To enable APIs, you need the Service Usage Admin IAM
role (roles/serviceusage.serviceUsageAdmin), which
contains the serviceusage.services.enable permission. Learn how to grant
roles.
gcloud
Enable the composer.googleapis.com API:
Roles required to enable APIs
To enable APIs, you need the Service Usage Admin IAM
role (roles/serviceusage.serviceUsageAdmin), which contains the
serviceusage.services.enable permission. Learn how to grant
roles.
gcloud services enable composer.googleapis.com
API
Use the services.enable method to enable
the composer.googleapis.com API.
Terraform
Use the google_project_service
resource to configure the composer.googleapis.com API.
Disable the Managed Airflow service
This section describes how to disable the Managed Airflow service in your Google Cloud project.
Before you begin
To disable the Managed Airflow service, you must have the correct Identity and Access Management permissions. To learn about the IAM requirements for Service Usage, see the Service Usage page for Access Control.
Make sure that all Managed Airflow environments in your project are deleted. Disabling the API irreversibly deletes tenant project parts of Managed Airflow environments, and these environments become unusable.
To avoid additional charges, complete the following steps for each environment before you disable the Managed Airflow API:
- Pause the DAGs.
- If required, export the environment's data, such as DAGs from the environment's bucket.
- Delete your environment, including the resources that are not deleted automatically.
Disable Managed Airflow API
To disable the Managed Airflow service:
Console
In the Google Cloud console, go to the Managed Airflow API page.
Click Manage.
Click Disable API.
gcloud
Run the gcloud services disable command:
gcloud services disable composer.googleapis.com
API
Use the services.disable method to disable
the composer.googleapis.com API.
Terraform
Remove the configuration for the composer.googleapis.com API. You usually
use the google_project_service
resource to configure Google Cloud services.
Services required by Managed Service for Apache Airflow
This section describes services that are required by Managed Airflow. In some cases, organization or project administrators can restrict what Google services can be used in their projects.
The following services are required by Managed Airflow:
- artifactregistry.googleapis.com
- cloudbuild.googleapis.com
- composer.googleapis.com
- compute.googleapis.com
container.googleapis.com
logging.googleapis.com
cloudkms.googleapis.com, if you are using Cloud KMS or CMEK keys
monitoring.googleapis.com
pubsub.googleapis.com
storage.googleapis.com
secretmanager.googleapis.com, if you are using Secret Manager as a secret backend
cloudresourcemanager.googleapis.com
servicedirectory.googleapis.com
Google services like Cloud DNS or IAM are already allowed by default in most projects.
In addtion, allow using all services that your DAGs are using, for example:
- bigquery.googleapis.com
- dataflow.googleapis.com
- datacatalog.googleapis.com
You can find the *.googleapis.com names of the services in API pages linked from the API Explorer page.
Upcoming deprecation of services that aren't required by Managed Airflow (Gen 3)
We're planning to phase out the APIs that aren't required by Managed Airflow (Gen 3):
Starting February 27, 2026, the following APIs will become fully detachable. Deactivating these APIs won't cause the deactivation of the Cloud Composer API API.
- artifactregistry.googleapis.com
- cloudbuild.googleapis.com
- container.googleapis.com
- pubsub.googleapis.com
- sqladmin.googleapis.com
Starting May 27, 2026, these APIs will no longer be enabled automatically when you enable the Cloud Composer API API. To create Managed Airflow (Gen 2) environments in new projects, the group of detached APIs must be enabled manually.
Existing Managed Airflow (Gen 3) and Managed Airflow (Gen 2) environments in projects where the Cloud Composer API API is already enabled won't be impacted. You can do the following:
After February 27, 2026, if your project has only Managed Airflow (Gen 3) environments, then you can manually disable the detached APIs.
After February 27, 2026, if your project has Managed Airflow (Gen 2) environments, then we recommend keeping these APIs enabled because disabling them might lead to environment's malfunction.
After May 27, 2026, if you use automation scripts to provision Managed Airflow (Gen 2) environments, then make sure that the listed APIs are enabled in addition to the Cloud Composer API API.