Send data to Google Cloud Storage¶
Note
This topic contains information about configuring a destination that sends query results to Google Cloud Storage using orchestrations. To configure a destination that sends audiences to Google Cloud Storage using campaigns see this topic .
Google Cloud Storage is an online file storage web service for storing and accessing data on Google Cloud Platform infrastructure.
Amperity can be configured to send Apache Parquet (recommended), CSV, JSON, NDJSON, PSV, or TSV files to any Google Cloud Storage bucket.
Get details¶
Review the following details before configuring credentials for Google Cloud Storage and before configuring Amperity to send Apache Parquet (recommended), CSV, JSON, NDJSON, PSV, or TSV files to any Google Cloud Storage bucket.
![]() |
Google Cloud Storage bucket details You will need to know the following details about the Google Cloud Storage bucket to which Amperity will send data.
|
![]() |
Credential types and settings A Google Cloud Storage service account key must be configured for the Storage Object Admin role. |
![]() |
Required configuration settings
Note All other Amperity file format settings for Google Cloud Storage are optional. |
Configure credentials¶
Configure credentials for Google Cloud Storage before adding a destination.
An individual with access to Google Cloud Storage should use SnapPass to securely share “gcs-service-account-key” details with the individual who will configure Amperity.
To configure credentials for Google Cloud Storage
![]() |
From the Settings page, select the Credentials tab, and then click the Add credential button. |
![]() |
In the Credentials settings dialog box, do the following: From the Plugin dropdown, select Google Cloud Storage. Assign the credential a name and description that ensures other users of Amperity can recognize when to use this destination. |
![]() |
The settings that are available for a credential are determined by the credential type. For the “gcs-service-account-key” credential type, configure settings, and then click Save.
|
About service accounts¶
A service account must be configured to allow Amperity to send data to the Google Cloud Storage bucket:
A service account key must be created, and then downloaded for use when configuring Amperity.
The Storage Object Admin role must be assigned to the service account role.
Service account key¶
A service account key must be downloaded so that it may be used to configure the destination in Amperity.
To configure the service account key
Open the Google Cloud Platform console.
Click IAM, and then Admin.
Click the name of the project that is associated with the Google Cloud Storage bucket to which Amperity will send data.
Click Service Accounts, and then select Create Service Account.
In the Name field, give your service account a name. For example, “Amperity GCS Connection”.
In the Description field, enter a description that will remind you of the purpose of the role.
Click Create.
Important
Click Continue and skip every step that allows adding additional service account permissions. These permissions will be added directly to the bucket.
From the Service Accounts page, click the name of the service account that was created for Amperity.
Click Add Key, and then select Create new key.
Select the JSON key type, and then click Create.
The key is downloaded as a JSON file to your local computer. This key is required to connect Amperity to your Google Cloud Storage bucket. If necessary, provide this key to your Amperity representative using Snappass.
SnapPass allows secrets to be shared in a secure, ephemeral way. Input a single or multi-line secret, along with an expiration time, and then generate a one-time use URL that may be shared with anyone. Amperity uses SnapPass for sharing credentials to systems with customers.
Example
{
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"client_email": "<<GCS_BUCKET_NAME>>@<<GCS_PROJECT_ID>>.iam.gserviceaccount.com",
"client_id": "redacted",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/<<GCS_BUCKET_NAME>>%40<<GCS_PROJECT_ID>>.iam.gserviceaccount.com",
"private_key_id": "redacted",
"private_key": "redacted",
"project_id": "<<GCS_PROJECT_ID>>",
"token_uri": "https://oauth2.googleapis.com/token",
"type": "service_account"
}
Service account role¶
The Storage Object Admin role must be assigned to the service account.
To configure the service account role
Open the Google Cloud Platform console.
Click Storage, and then Browser.
Click the name of the bucket from which Amperity will pull data.
Click the Permissions tab, and then click Add.
Enter the email address of the Google Cloud Storage service account.
Under Role, choose Storage Object Admin.
Important
Amperity requires the Storage Object Admin role for the courier that is assigned to pull data from Google Cloud Storage.
Click Save.
Add destination¶
Use a sandbox to configure a destination for Google Cloud Storage. Before promoting your changes, send a test audience, and then verify the the results in Google Cloud Storage. After the end-to-end workflow has been verified, push the destination from the sandbox to production.
To add a destination for Google Cloud Storage
![]() |
Open the Destinations page, and then click the Add destination button. ![]() To configure a destination for Google Cloud Storage, do one of the following:
|
![]() |
Select the credential for Google Cloud Storage from the Credential drop-down, and then click Continue. Tip Click the “Test connection” link on the “Configure destination” page to verify that Amperity can connect to Google Cloud Storage. |
![]() |
In the “Destination settings” dialog box, assign the destination a name and description that ensures other users of Amperity can recognize when to use this destination. Configure business user access By default a destination is available to all users who have permission to view personally identifiable information (PII). Enable the Admin only checkbox to restrict access to only users assigned to the Datagrid Operator and Datagrid Administrator policies. Enable the PII setting checkbox to allow users with limited access to PII access to this destination. Restricted PII access is enabled when the Restrict PII access policy option that prevents users who are assigned to that option from viewing data that is marked as PII anywhere in Amperity and from sending that data to any downstream workflow. |
![]() |
Configure the following settings, and then click “Save”.
|
![]() |
After this destination is configured, users may configure Amperity to:
to Google Cloud Storage. |