Stay organized with collections
Save and categorize content based on your preferences.
Supported services
Key Access Justifications supports all services supported by Assured Workloads for
Sovereign Controls for EU.
In addition, Key Access Justifications supports the following Google Cloud products:
Service
Status
AlloyDB for PostgreSQL
GA
Backup for GKE
GA
Firestore
GA
Vertex AI Workbench
GA
If Key Access Justifications is in Preview for a service, Google recommends that you don't
use Key Access Justifications in production for that service. You should use Key Access Justifications for
a service in production only if Key Access Justifications for that service is in
General Availability (GA). This includes transitive usage of unintegrated or
Preview services that don't themselves store data encrypted using customer keys,
because all services involved in servicing a request must have a GA Key Access Justifications
integration status for Google to reliably generate justifications.
If you are unable to avoid using a service for which Key Access Justifications isn't in GA in
your workloads that depend on Key Access Justifications, then you must also allow
REASON_NOT_EXPECTED, REASON_UNSPECIFIED, and
CUSTOMER_AUTHORIZED_WORKFLOW_SERVICING justifications in your Key Access Justifications
policies or risk outages.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-05 UTC."],[[["Key Access Justifications supports all services under Assured Workloads for Sovereign Controls for EU."],["It also supports additional Google Cloud products such as AlloyDB for PostgreSQL, Backup for GKE, Firestore, and Vertex AI Workbench."],["Services in General Availability (GA) are recommended for production use with Key Access Justifications, and preview services are not recommended."],["For workloads that use services without GA Key Access Justifications, policies must allow `REASON_NOT_EXPECTED`, `REASON_UNSPECIFIED`, and `CUSTOMER_AUTHORIZED_WORKFLOW_SERVICING` justifications."]]],[]]
