Prerequisites for granting flow log access to GCP
Set up access to flow logs from your cloud service providers to Illumio Segmentation for the Cloud.
To grant GCP flow log access, you need:
Your Account ID, which you can select from a list
Your service account name, which you can select from a drop-down menu in the Grant Access... dialog box
Your service account token
Your Google Cloud shell open in a browser window, so that you can run the script you copied from the Grant Access... dialog box. Alternatively, you can use your local command line interface. See Onboarding GCP.
Permission to create an IAM role and bind it to projects and topics using service account as the principal.
Set up flow log access before you grant flow log access to your CSPs. See Set up flow logs in your GCP environment.
To grant flow log access to GCP, see Grant flow log access to your GCP instance.