> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sazabi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Cloud

> Give the Sazabi agent the Google Cloud CLI (gcloud) in its sandbox to manage Google Cloud resources with a service account.

[All Google Cloud integration capabilities](https://docs.sazabi.com/catalogs/integrations/google-cloud)

## About

This CLI connection makes the Google Cloud CLI (`gcloud`, `gsutil`, `bq`) available in the Sazabi agent's sandbox. The tools are baked into the sandbox image; connecting them authenticates the already-installed CLIs.

## Prerequisites

* A Sazabi project.
* A Google Cloud service account key as a JSON string (`GCLOUD_SERVICE_ACCOUNT_KEY_JSON`), downloaded from **IAM & Admin > Service Accounts** in the Google Cloud console.
* A Google Cloud project ID (`GCLOUD_PROJECT_ID`) — the project the service account belongs to.

## Set up in the dashboard

Configure the sandbox in the dashboard under [**Settings > Sandbox CLIs**](https://app.sazabi.com/settings/sandbox-clis).

**Step 1**

### Find Google Cloud in the catalog

In [**Settings > Sandbox CLIs**](https://app.sazabi.com/settings/sandbox-clis), find Google Cloud under **Browse sandbox CLIs** and choose to connect it.

**Step 2**

### Provide credentials

Enter the required values: `GCLOUD_SERVICE_ACCOUNT_KEY_JSON` — the full contents of your service account key JSON file; `GCLOUD_PROJECT_ID` — your Google Cloud project ID. Optionally, set `GCLOUD_COMPUTE_REGION` (e.g. `us-central1`) and `GCLOUD_COMPUTE_ZONE` (e.g. `us-central1-a`) to pre-configure compute defaults. Save to store them securely; Sazabi injects them into the sandbox when the agent runs.

## Set up with the CLI

You can also configure the Google Cloud CLI connection with the [Sazabi CLI](https://docs.sazabi.com/reference/cli.md) (installed and authenticated — see [CLI reference](https://docs.sazabi.com/reference/cli/sandbox-clis.md)).

```bash theme={"system"}
sazabi sandbox-clis connect gcloud --env GCLOUD_SERVICE_ACCOUNT_KEY_JSON="$(cat service-account.json)" --env GCLOUD_PROJECT_ID=<your-project-id>
```

To validate the credentials without saving, run the same command with `test` in place of `connect` (the test command also requires the `--env` flags).

## Verify

Ask the agent, in a thread, to run the `gcloud` CLI (a read-only or status command) and confirm it returns real output from your account. If the command is not found, the CLI connection may not be enabled; if it runs unauthenticated, recheck the credentials.

## Troubleshooting

**Command not found** — Confirm the Google Cloud CLI connection is enabled for the project under [**Settings > Sandbox CLIs**](https://app.sazabi.com/settings/sandbox-clis).

**Authentication fails** — Recheck the credential values; a rotated or revoked token must be re-entered under [**Settings > Sandbox CLIs**](https://app.sazabi.com/settings/sandbox-clis) or with `sazabi sandbox-clis connect gcloud`.

## Further reading

> [card] [Working with the agent](https://docs.sazabi.com/guides/investigate/working-with-the-agent.md)
>
> Put the connected CLI to work in an investigation thread.

> [card] [Set up the sandbox](https://docs.sazabi.com/guides/investigate/sandbox.md)
>
> How the sandbox works and its security model.

> [card] [Sandbox CLIs](https://docs.sazabi.com/catalogs/sandbox-clis.md)
>
> Browse the catalog and connect more tools.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.