A mechanism that lets external systems outside of GCP (other clouds, CI/CD platforms, etc.) access GCP resources without using a service account key.
This is a more general external identity federation mechanism, distinct from the "Workload Identity" used to grant permissions to Pods within GKE. It's commonly used to let a CI/CD pipeline like GitHub Actions securely access GCP without a key file.
© 2026 ITBGM