Beberapa atau semua informasi di halaman ini mungkin tidak berlaku untuk Trusted Cloud oleh S3NS.
Artifact Registry Service Agent
Agen Layanan Artifact Registry bertindak atas nama
Artifact Registry saat berinteraksi dengan layanan Trusted Cloud by S3NS .
Setelah Anda membuat repositori Artifact Registry pertama di
projectTrusted Cloud , Agen Layanan Artifact Registry
akan otomatis dibuat. ID agen layanan adalah:
service-PROJECT-NUMBER@gcp-sa-artifactregistry.s3ns-system.iam.gserviceaccount.com
PROJECT-NUMBER adalah nomor project dari projectTrusted Cloud tempat Artifact Registry berjalan.
Anda dapat membuat akun layanan secara manual dalam project tanpa repositori apa pun dengan perintah:
gcloud beta services identity create \
--service=artifactregistry.s3nsapis.fr \
--project=PROJECT-ID
Ganti PROJECT-ID dengan Trusted Cloud project ID.
Agen Layanan Artifact Registry diberi peran Agen Layanan Artifact Registry (roles/artifactregistry.serviceAgent) untuk resource dalam project. Untuk menerapkan prinsip keamanan dengan hak istimewa terendah, peran hanya
memiliki izin minimum yang diperlukan:
- Publikasikan topik Pub/Sub:
pubsub.topics.publish
- Download artefak dari repositori Artifact Registry:
artifactregistry.repositories.downloadArtifacts
- Menghapus artefak:
artifactregistry.versions.delete
Langkah selanjutnya
Pelajari
peran Artifact Registry dan mengonfigurasi akses ke repositori.
Kecuali dinyatakan lain, konten di halaman ini dilisensikan berdasarkan Lisensi Creative Commons Attribution 4.0, sedangkan contoh kode dilisensikan berdasarkan Lisensi Apache 2.0. Untuk mengetahui informasi selengkapnya, lihat Kebijakan Situs Google Developers. Java adalah merek dagang terdaftar dari Oracle dan/atau afiliasinya.
Terakhir diperbarui pada 2025-08-18 UTC.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Informasi yang saya butuhkan tidak ada","missingTheInformationINeed","thumb-down"],["Terlalu rumit/langkahnya terlalu banyak","tooComplicatedTooManySteps","thumb-down"],["Sudah usang","outOfDate","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Masalah kode / contoh","samplesCodeIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-18 UTC."],[[["\u003cp\u003eThe Artifact Registry Service Agent operates on behalf of Artifact Registry when interacting with other Google Cloud services.\u003c/p\u003e\n"],["\u003cp\u003eThis service agent is automatically generated upon the creation of the first Artifact Registry repository within a Google Cloud project.\u003c/p\u003e\n"],["\u003cp\u003eThe service agent's identifier is \u003ccode\u003eservice-PROJECT-NUMBER@gcp-sa-artifactregistry.iam.gserviceaccount.com\u003c/code\u003e, where PROJECT-NUMBER represents the project number.\u003c/p\u003e\n"],["\u003cp\u003eThe service agent is granted the Artifact Registry Service Agent role, which includes permissions for publishing Pub/Sub topics, downloading artifacts, and deleting artifacts.\u003c/p\u003e\n"],["\u003cp\u003eYou can manually create the service agent in projects without any repositories using the provided \u003ccode\u003egcloud\u003c/code\u003e command.\u003c/p\u003e\n"]]],[],null,["# Artifact Registry Service Agent\n\nThe Artifact Registry Service Agent acts on behalf of\nArtifact Registry when interacting with Google Cloud services.\n\nAfter you create the first Artifact Registry repository in a\nGoogle Cloud project, the Artifact Registry Service Agent\nis automatically created. The service agent identifier is:\n\n`service-`\u003cvar translate=\"no\"\u003ePROJECT-NUMBER\u003c/var\u003e`@gcp-sa-artifactregistry.iam.gserviceaccount.com`\n\n\u003cvar translate=\"no\"\u003ePROJECT-NUMBER\u003c/var\u003e is the [project number](/resource-manager/docs/creating-managing-projects#identifying_projects) of the\nGoogle Cloud project where Artifact Registry is running.\n\nYou can manually create the service account in a project without any\nrepositories with the command: \n\n gcloud beta services identity create \\\n --service=artifactregistry.googleapis.com \\\n --project=\u003cvar translate=\"no\"\u003ePROJECT-ID\u003c/var\u003e\n\nReplace \u003cvar translate=\"no\"\u003ePROJECT-ID\u003c/var\u003e with the Google Cloud project ID.\n\nThe Artifact Registry Service Agent is granted the Artifact Registry\nService Agent role (`roles/artifactregistry.serviceAgent`) for resources in the\nproject. To enforce the security principle of least privilege, the role only\nhas the minimum required permissions:\n\n- Publish Pub/Sub topics: `pubsub.topics.publish`\n- Download artifacts from Artifact Registry repositories: `artifactregistry.repositories.downloadArtifacts`\n- Delete artifacts: `artifactregistry.versions.delete`\n\nWhat's next\n-----------\n\nLearn about\n[Artifact Registry roles and configuring access to repositories](/artifact-registry/docs/access-control)."]]
