This guide explains how to connect your Google Cloud Storage (GCS) buckets to Mixpeek, enabling automated data ingestion and processing.
Prerequisites
- An active Google Cloud project.
- A GCS bucket containing the data you want Mixpeek to process.
- Permissions to create service accounts and manage IAM policies in your Google Cloud project.
Configuration Steps
Connecting Mixpeek to GCS requires granting Mixpeek read access to your bucket. We recommend using a service account with appropriate IAM roles for enhanced security.1
Create Service Account
First, create a service account that Mixpeek will use to access your GCS bucket.
- Navigate to the IAM & Admin > Service Accounts section in your Google Cloud Console.
- Click Create Service Account.
- Enter a name for the service account (e.g.,
mixpeek-gcs-access). - Click Create and Continue.
- Grant the service account the following roles:
Storage Object Viewer(roles/storage.objectViewer)Storage Legacy Bucket Reader(roles/storage.legacyBucketReader)
- Click Done.
2
Create and Download Service Account Key
To authenticate with GCS, you’ll need to create and download a service account key.
- Find your newly created service account in the list and click on it.
- Go to the Keys tab.
- Click Add Key > Create new key.
- Choose JSON as the key type.
- Click Create.
- Important: The JSON key file will be downloaded to your computer. Store this file securely as you’ll need it to configure the connection in Mixpeek.
3
Add GCS Connection in Mixpeek
In Studio, go to Settings > Connections > New Connection and pick Google Cloud Storage.
- Paste the service account JSON key you downloaded.
- Enter the bucket name. Omit the
gs://prefix. - Optionally set a prefix to scope the sync to one folder.
- Save. Mixpeek tests the credentials before storing them.
POST /v1/organizations/connections:Mixpeek uses the native
google-cloud-storage SDK, not the S3-compatible XML API, so
you do not need to mint HMAC interoperability keys. service_account_json takes the
whole key object. private_key is redacted when you read the connection back.
