Connect to Google Cloud services Stay organized with collections Save and categorize content based on your preferences.
This page lists Google Cloud services that work well withCloud Run and those that are not yet supported for Cloud Run.
Connect to Google Cloud services in code
You can connect your Cloud Run service to Google Cloudservices by using the client libraries they provide. For code samples showinghow to connect with a particular Google Cloud service, refer to thedocumentation provided for that Google Cloud service.
To call Google Cloud APIs from your code, theCloud Run service identitymust have the minimal set of permissions to your Cloud Run services.For example, if your Cloud Run service is only reading data fromFirestore, we recommend assigning it a service account that only hastheFirestore User IAM role.
The Google Cloud environment uses Application Default Credentials (ADC) toautomatically detect whether the Cloud Run service identity isauthenticated to use the Google Cloud client libraries and perform the APIoperation.
Services and tools recommended for use
The following table lists services recommended for Cloud Run.
Tools
| Service | Description |
|---|---|
| Cloud Build | Build container images and continuous integration. |
| Artifact Registry | Store container images. |
| Cloud Deploy | Continuous delivery. |
| Google Cloud Observability | Monitoring andlogging of Cloud Run services. |
Data storage
| Service | Description |
|---|---|
| Firestore | Fully managed NoSQL database, withMongoDB compatibility. |
| Spanner | Fully managed, scalable, relational database. |
| Cloud SQL | Fully managed relational database. Refer toConnecting to Cloud SQL instances. |
| Cloud Storage | Object storage. Store objects and serve static content. UseCloud Storage client libraries ormount Cloud Storage volumes |
| Memorystore | Fully managed in-memory data store service. Connect to your VPC network to access Memorystore instances. Refer toConnecting to a Redis instance from a Cloud Run service. |
| BigQuery | Fully managed cloud data warehouse for analytics. Cloud Run services can be used to implement customBigQuery remote functions. |
| Secret Manager | Create and access secrets or any other configuration. |
| Filestore | Fully managed NFS file servers on Google Cloud |
| Parameter Manager | Create and access configuration files or parameters. |
Orchestration
| Service | Description |
|---|---|
| Pub/Sub | Push events to Cloud Run services. Refer to theUsing Pub/Sub with Cloud Run Tutorial. |
| Cloud Scheduler | Trigger Cloud Run services on a schedule. |
| Cloud Tasks | Execute asynchronous tasks on Cloud Run. Refer toHTTP Target tasks with authentication tokens. |
| Workflows | Orchestrate and automate Cloud Run services. |
Web-apps
| Service | Description |
|---|---|
| Identity Platform | Login your users. |
| Firebase App Hosting | Fully managed hosting service for dynamic content with cost-effective CDN caching. Suitable for hosting full-stack web applications built with modern, server-rendered frameworks like Angular and Next.js. |
| Firebase Hosting | Managed service that hosts static content, dynamic content, and microservices using a global content delivery network (CDN) for fast, reliable delivery. Suitable for hosting static websites or single-page applications. |
Networking
| Service | Description |
|---|---|
| Virtual Private Cloud | Managed networking functionality for your Google Cloud resources. Refer toConnecting to a VPC network. |
| External Application Load Balancer | Useserverless NEGs to configure a Cloud Run backend for an external Application Load Balancer. |
| Internal Application Load Balancer | Useserverless NEGs to run your Cloud Run services behind an internal IP address. |
| Google Cloud Armor | Helps protect your applications and websites against denial of service and web attacks. |
| Cloud CDN | Cloud CDN is supported with external Application Load Balancers. |
Security
| Service | Description |
|---|---|
| Identity-Aware Proxy | Useidentity and context to guard access to your services. |
| Binary Authorization | Deploy only container images that you trust. |
| Cloud Run Threat Detection | Detects threats in running containers. |
Services not yet supported
The following table lists services that are not yet supported byCloud Run.
| Service | Notes |
|---|---|
| Web Security Scanner |
Simplify use of Google Cloud services and resources using App Hub
Optionally, you can use App Hub to build, operate, and manageapplications that include multiple resources from one or moreGoogle Cloud projects.
You can use App Hub to organize your Cloud Run resourcesin an application-centric way based on your changing business needs.To track and organize your Cloud Run resources, add your resourcesas services and workloads to App Hub applications.App Hub is fully managed by Google Cloud anddoesn't require you to install any additional infrastructure.For more information on:- Resources that App Hub supports, seeSupported resources.
- How to set up App Hub on your project and register your resources with anApp Hub application, seeSet up App Hub.
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-02-19 UTC.