總覽
本頁面詳細說明各項Google Cloud 產品使用員工身分聯盟或Workload Identity Federation (統稱身分聯盟) 時的限制和支援程度。
員工身分聯盟
員工身分聯盟可讓員工、供應商、合作夥伴和其他使用者，透過識別資訊提供者 (IdP) 存取 Google Cloud 產品。員工可以透過 Google Cloud 員工身分聯盟控制台 (也稱為控制台 (已聯合))、Google Cloud CLI 或Google Cloud API 存取。Google Cloud
控制台 (已聯合)、Google Cloud CLI 和 Google Cloud API 的員工身分聯盟限制，列於各產品的 UI 和 API 項目中。
Workload Identity 聯盟
工作負載身分聯盟可讓工作負載使用工作負載提供的身分 (例如 AWS 工作負載的 IAM 角色、GKE 工作負載的 Kubernetes 服務帳戶，或是部署管道的 GitHub 身分)，以程式輔助方式存取Google Cloud 產品。
如要瞭解 Google Cloud CLI 和 API 的工作負載身分聯合限制 (統稱「API 限制」)，請參閱本文稍後各產品的 Google Cloud API
limitations 項目。Google Cloud
Google Cloud 產品和限制
本節的表格列出產品、身分同盟支援層級、限制和其他資訊。
機構
限制表格的編排方式如下：
- 產品：產品名稱。
- 身分聯盟推出階段：指產品支援身分聯盟的推出階段。推出階段並非指產品本身的推出階段。
- 說明支援產品的資料欄：
- Google Cloud API：與 API 方法相關的產品身分聯合限制，以及存取這些方法的 gcloud CLI 指令。
- 控制台 (聯盟)：產品的員工身分聯盟相關控制台 (聯盟) UI 限制。
- 其他：產品身分聯盟相關限制，不屬於 Google Cloud API 或控制台 (已聯盟) 限制。
- 描述不支援產品的資料欄：
- 替代方案：如果產品不支援身分聯盟，這個資料欄會說明支援身分聯盟且提供類似功能的替代產品。
產品清單和限制
推出階段
| 產品 | 身分聯盟推出階段 | 限制 | ||||||
|---|---|---|---|---|---|---|---|---|
存取權核准 |
GA |
|
||||||
Access Context Manager |
GA |
|
||||||
資料存取透明化控管機制 |
GA |
|
||||||
Agent Assist |
GA |
|
||||||
AlloyDB for PostgreSQL |
GA |
|
||||||
Anti Money Laundering AI |
GA |
|
||||||
API Gateway |
GA |
|
||||||
Apigee |
GA |
|
||||||
Apigee API Hub |
GA |
|
||||||
API 和服務 |
GA |
|
||||||
App Engine |
不支援 |
|
||||||
App Hub |
GA |
|
||||||
Application Integration |
GA |
|
||||||
Artifact Registry |
GA |
|
||||||
Assured Workloads |
GA |
|
||||||
備份和災難復原服務 |
GA |
|
||||||
批次 |
GA |
|
||||||
BigQuery |
GA |
|
||||||
Bigtable |
GA |
|
||||||
二進位授權 |
GA |
|
||||||
區塊鏈分析 |
GA |
|
||||||
Blockchain Node Engine |
GA |
|
||||||
碳足跡 |
GA |
|
||||||
憑證授權單位服務 |
GA |
|
||||||
Certificate Manager |
GA |
|
||||||
頻道服務 |
GA |
|
||||||
Cloud Asset Inventory |
GA |
|
||||||
Cloud Billing |
GA |
|
||||||
Cloud Build |
GA |
|
||||||
Cloud CDN |
GA |
|
||||||
Cloud Code |
不支援 |
|
||||||
Cloud Composer |
GA |
|
||||||
Cloud 控制台 |
GA |
|
||||||
Cloud Customer Care |
GA |
|
||||||
Cloud Data Fusion |
GA |
|
||||||
Cloud Deploy |
GA |
|
||||||
Cloud Deployment Manager |
不支援 |
|
||||||
Cloud DNS |
GA |
|
||||||
Cloud Domains |
GA |
|
||||||
Cloud Endpoints |
不支援 |
|
||||||
Cloud Fleet Routing |
GA |
|
||||||
Cloud Healthcare API |
GA |
|
||||||
Cloud HSM |
GA |
|
||||||
雲端入侵偵測系統 |
GA |
|
||||||
Cloud Key Management Service |
GA |
|
||||||
Cloud Load Balancing |
GA |
|
||||||
Cloud Logging |
GA |
|
||||||
Cloud Mobile App |
不支援 |
|
||||||
Cloud Monitoring |
GA |
|
||||||
Cloud NAT |
GA |
|
||||||
Cloud Next Generation Firewall |
GA |
|
||||||
Cloud Profiler |
不支援 |
|
||||||
Cloud Run |
GA |
|
||||||
Cloud Run functions |
GA |
|
||||||
Cloud Scheduler |
GA |
|
||||||
Cloud Service Mesh |
GA |
|
||||||
Cloud Shell |
不支援 |
|
||||||
Cloud Source Repositories |
不支援 |
|
||||||
Cloud SQL |
GA |
|
||||||
Cloud Storage |
GA |
|
||||||
Cloud Talent Solution |
GA |
|
||||||
Cloud Tasks |
GA |
|
||||||
Cloud Trace |
GA |
|
||||||
Cloud Translation |
GA |
|
||||||
Cloud Vision API |
GA |
|
||||||
Cloud Workstations |
GA |
|
||||||
Cluster Director |
GA |
|
||||||
Compute Engine |
GA |
|
||||||
機密空間 |
GA |
|
||||||
情境感知存取權 |
GA |
|
||||||
對話式洞察 |
GA |
|
||||||
Data Catalog |
GA |
|
||||||
資料庫移轉服務 |
GA |
|
||||||
Dataflow |
GA |
|
||||||
Dataform |
GA |
|
||||||
Dataplex Universal Catalog |
GA |
|
||||||
Dataproc |
GA |
|
||||||
Dataproc Metastore |
GA |
|
||||||
Datastore |
GA |
|
||||||
Datastream |
GA |
|
||||||
Dialogflow |
GA |
|
||||||
Document AI |
GA |
|
||||||
端點驗證 |
不支援 |
|
||||||
Enterprise Knowledge Graph |
不支援 |
|
||||||
錯誤報告 |
GA |
|
||||||
Eventarc |
GA |
|
||||||
Filestore |
GA |
|
||||||
Firestore |
GA |
|
||||||
Gemini |
GA |
|
||||||
GKE Enterprise |
GA |
|
||||||
Google Cloud Armor |
GA |
|
||||||
Google Cloud Contact Center as a Service |
GA |
|
||||||
Google Cloud Managed Service for Apache Kafka |
GA |
|
||||||
Google Cloud Marketplace |
GA |
|
||||||
Google Cloud 遷移中心 |
預覽 |
|
||||||
Google Cloud NetApp Volumes |
GA |
|
||||||
Google Cloud SDK |
GA |
|
||||||
Google Distributed Cloud |
不支援 |
|
||||||
Google Earth Engine |
GA |
|
||||||
Google Kubernetes Engine |
GA |
|
||||||
Google Security Operations |
GA |
|
||||||
混合式連線 |
GA |
|
||||||
身分與存取權管理 |
GA |
|
||||||
Identity-Aware Proxy |
GA |
|
||||||
Identity Platform |
GA |
|
||||||
Immersive Stream for XR |
GA |
|
||||||
Integration Connectors |
GA |
|
||||||
金鑰存取依據 |
GA |
|
||||||
Knative serving |
GA |
|
||||||
Live Stream API |
GA |
|
||||||
Looker (Google Cloud Core) |
不支援 |
|
||||||
Looker Studio |
不支援 |
|
||||||
Managed Service for Microsoft Active Directory |
GA |
|
||||||
Media CDN |
GA |
|
||||||
Memorystore |
GA |
|
||||||
Migrate to Containers |
GA |
|
||||||
Migrate to Virtual Machines |
GA |
|
||||||
Network Connectivity Center |
GA |
|
||||||
Network Intelligence Center |
GA |
|
||||||
網路服務級別 |
GA |
|
||||||
機構政策服務 |
GA |
|
||||||
Parallelstore |
GA |
|
||||||
Personalized Service Health |
GA |
|
||||||
Policy Intelligence |
GA |
|
||||||
Private Service Connect |
GA |
|
||||||
Privileged Access Manager |
GA |
|
||||||
Pub/Sub |
GA |
|
||||||
reCAPTCHA |
GA |
|
||||||
建議工具 |
GA |
|
||||||
Resource Manager |
GA |
|
||||||
Retail API |
GA |
|
||||||
Secret Manager |
GA |
|
||||||
Secure Source Manager |
GA |
|
||||||
Security Command Center |
GA |
|
||||||
Sensitive Data Protection |
GA |
|
||||||
無伺服器虛擬私有雲存取 |
GA |
|
||||||
Service Directory |
預覽 |
|
||||||
Service Infrastructure |
預覽 |
|
||||||
Spanner |
GA |
|
||||||
Speaker ID |
GA |
|
||||||
Speech-to-Text |
GA |
|
||||||
Storage 移轉服務 |
GA |
|
||||||
Text-to-Speech |
GA |
|
||||||
Transcoder API |
GA |
|
||||||
Transfer Appliance |
GA |
|
||||||
Translation Hub |
不支援 |
|
||||||
Vertex AI |
GA |
|
||||||
Vertex AI Agent Builder |
預覽 |
|
||||||
Vertex AI Vision |
GA |
|
||||||
Vertex AI Workbench |
GA |
|
||||||
Video Intelligence API |
GA |
|
||||||
Video Stitcher API |
GA |
|
||||||
虛擬私有雲 |
GA |
|
||||||
VPC Service Controls |
GA |
|
||||||
Web Risk |
GA |
|
||||||
Workflows |
GA |
|
||||||
Workload Manager |
GA |
|