Skip to content

Setup GCP Cloud SQL PostgreSQL on Privacera Portal

  1. Log in to the Privacera Portal.
  2. Navigate to Settings > Data Source Registration
  3. Under the system name you added in Overview of Supported Data Sources, select the more icon, and then select Add Application > GCP Cloud SQL PostgreSQL
  4. Under Configure GCP Cloud SQL PostgreSQL, provide values for the Application Name and Application Code fields.

  5. Under Application Properties, provide values for the following:

    Important

    Identify the service account that must have appropriate permissions in your data source. For scanning, the IAM database user of the service account needs read permission. For more information, see Prerequisites.

    • JDBC Url: jdbc:postgresql:///<database-name>

    • Cloud SQL Instance Connection Name: <project-id>:<region>:<instance-name>

    • IAM Database User: <sa-name>@<project-id>.iam

    • IAM Service Account: <sa-name>@<project-id>.iam.gserviceaccount.com

    Note

    • Do not include the host or port in the JDBC Url. The host is resolved from the Cloud SQL Instance Connection Name.
    • IAM Service Account is the service account to be impersonated. Leave it blank to connect using the service account of the Discovery and Portal pods.
    • No database password or JDBC driver class is required, as the connector uses IAM database authentication.

  6. Select TEST CONNECTION. Ensure that a message named success is displayed.

  7. Select SAVE.

You can start using the connector to scan GCP Cloud SQL PostgreSQL resources by configuring the targets to be scanned. PostgreSQL schemas, such as public, are listed at the database level when selecting the resources. Refer to Setup for Discovery Scanning for more information.