GCP Connections
A GCP connection stores the service account key encrypted on the server, together with the project scope. Authentication, which is who calls GCP, and scope, which is the projects to query, are separate inputs.
| Field | Step | Purpose |
|---|---|---|
| Project IDs | Provider details | The target projects for collection and validation, separated by commas |
| Service account key JSON | Authenticate | Pasted or uploaded, or omitted when you use Application Default Credentials |
| Principal email | Recorded automatically | Written to the run manifest, never the private key material |
When you leave the project field empty, Ventra falls back to the home project embedded in the service account key.
When you edit a connection, leave the key field blank to keep the key already saved on the server.