> For the complete documentation index, see [llms.txt](https://docs.halosecurity.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.halosecurity.com/docs/integrations/discovery-integrations/gcp.md). # Google Cloud ## Google Cloud Setup Halo Security's GCP integration allows you to import assets directly from Google's Cloud DNS service. It works by using a GCP service account with read permissions to Cloud DNS records and zones. To learn more about Cloud DNS, please visit: ### Step 1: Create A New Project The first step in connecting Halo Security to Cloud DNS is to create a project that a service account can then be assigned to. To create a new project, visit . Then click **Create Project**. Give the project a name, like "Halo Security Integration", then attach it to your Organization and Location. ### Step 2: Create A Service Account To allow Halo Security to access DNS records, we will create a service account that has access to the new project and assign it a role that only permits the account to read DNS settings. This limits the service account from being used to access or modify other functionality inside Google Cloud Platform. After creating a project, you will be redirected to the "Service accounts" page. Click **Create Service Account** and assign it a name. Then click **CREATE AND CONTINUE** to grant the service account access to the project and assign it a role. Under the **Select a role** dropdown, filter by DNS, select the **DNS Reader** role, then click **DONE**. ### Step 3: Create A Key After the service account has been created and a role assigned, you will be redirected back to the main service account page. Click on the newly created account, and navigate to the **KEYS** section. Under the **ADD KEY** dropdown, select **Create new key**, ensure that **JSON** is selected, and create. The new key will automatically be downloaded to your computer with a name corresponding to your project. ## Connect Google Cloud to Halo Security 1. Visit your *Settings → Integrations →* [Add](https://app.halosecurity.com/user/settings/integrations/add). 2. Add the Google Cloud integration. 3. Add a name to create the integration. 4. Under the **Service Account Key File** section, choose the file upload button and upload the key that was created in Step 3, then click save. 5. After verifying the account details your integration will be ready for use. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.halosecurity.com/docs/integrations/discovery-integrations/gcp.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.