# Google Cloud ## Google Cloud Setup Halo Security's GCP integration allows you to import assets directly from Google's Cloud DNS service. It works by using a GCP service account with read permissions to Cloud DNS records and zones. To learn more about Cloud DNS, please visit: ### Step 1: Create A New Project The first step in connecting Halo Security to Cloud DNS is to create a project that a service account can then be assigned to. To create a new project, visit . Then click **Create Project**. Give the project a name, like "Halo Security Integration", then attach it to your Organization and Location. ### Step 2: Create A Service Account To allow Halo Security to access DNS records, we will create a service account that has access to the new project and assign it a role that only permits the account to read DNS settings. This limits the service account from being used to access or modify other functionality inside Google Cloud Platform. After creating a project, you will be redirected to the "Service accounts" page. Click **Create Service Account** and assign it a name. Then click **CREATE AND CONTINUE** to grant the service account access to the project and assign it a role. Under the **Select a role** dropdown, filter by DNS, select the **DNS Reader** role, then click **DONE**. ### Step 3: Create A Key After the service account has been created and a role assigned, you will be redirected back to the main service account page. Click on the newly created account, and navigate to the **KEYS** section. Under the **ADD KEY** dropdown, select **Create new key**, ensure that **JSON** is selected, and create. The new key will automatically be downloaded to your computer with a name corresponding to your project. ## Connect Google Cloud to Halo Security 1. Visit your *Settings → Integrations →* [Add](https://app.halosecurity.com/user/settings/integrations/add). 2. Add the Google Cloud integration. 3. Add a name to create the integration. 4. Under the **Service Account Key File** section, choose the file upload button and upload the key that was created in Step 3, then click save. 5. After verifying the account details your integration will be ready for use. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.halosecurity.com/docs/integrations/discovery-integrations/gcp.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.