In my current job, I’ll be using UiPath to automate processes and various GCP services to retrieve or load data.
I’m writing this post to ask for your help and suggestions on how you’ve handled UiPath integration with GCP without compromising data or connection security. My current employer considers the use of JSON for authentication a risk. The idea is to have UiPath run on a GCP VM, but I’m unsure what security considerations need to be taken into account and how the integration would work, especially with BigQuery, given that UiPath doesn’t have native activities for its connection.
I would also appreciate it if anyone could share their experience and how you’ve worked with UiPath and Google Cloud.
If your organization considers JSON keys a risk (which is valid), the best approach is to avoid them entirely and instead use a Service Account attached to your GCP VM. This way, UiPath running on the VM can authenticate using the VM’s identity, so there are no credentials stored or exposed.
For BigQuery, even though UiPath doesn’t have native activities, you still have a couple of solid options:
Use the HTTP Request activity to call BigQuery APIs with a token from the VM
Or use Python activities with the BigQuery library (it will automatically pick up the VM’s Service Account)
In more controlled environments, some teams also add a small API layer (like Cloud Run or Cloud Functions) so UiPath doesn’t directly talk to BigQuery, that gives you an extra layer of security and control.