Get Allowed Locations

iam_credentials.get_allowed_locations
ActionGoogle Cloudconnection required

Calls IAM Service Account Credentials GET /v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}/allowedLocations.

Returns the trust boundary info for a given service account.

Connection

Required
Yes — the node will not save without one
Auth type
OAuth 2.0
Providers
Google IAM Service Account Credentials
Secret shape
{"client_id", "client_secret", "refresh_token"}
Config it needs
location, project_id
Resolved by
config.connection_id, else node.connection_id

Configuration

2 fields, 1 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

FieldTypeRequiredDefaultConstraintsExample
project_id
GCP project id (overrides connection).
stringNo———
service_account
Service account id.
stringYes———

Output

One shape.

result

FieldTypeExample
ok
boolean—
encodedLocations
string—
locations
array—
{
  "encodedLocations": "",
  "locations": [],
  "ok": false
}

Related Google IAM Service Account Credentials nodes

See Get Allowed Locations run in a workflow.

In a technical demo we add the Google IAM Service Account Credentials connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.