① SecOps STS v2 wizard

Ordered STS pre-migration gates before v1 feed EOS

Feed type · SA grant · STS IP allowlist · credential/SQS map · export — local. Not affiliated with Google.

  1. 1 Feed type
  2. 2 SA grant
  3. 3 IP allowlist
  4. 4 Creds / SQS
  5. 5 Export

(complete gates → checklist appears here)

How it works

  1. Pick which v1 connector types you still run (GCS / S3 / SQS / Azure Blob).
  2. Pass each gate: STS service-account grants, IP allowlists, credential and single-bucket SQS mapping.
  3. Export Markdown — we never call Google SecOps or mutate feeds.

Google SecOps discontinues v1 Cloud Storage, Amazon S3, Amazon SQS, and Azure Blob connectors: November 1, 2026 end of support; March 15, 2027 permanent deactivation. Auto-migration via Storage Transfer Service may require SA permissions and IP allowlists.

vs Bitbucket GCM force-upgrade / Workspace MCP OAuth: gates are SecOps feed STS SA ∩ IP ∩ SQS mapping, not desktop credential-manager versions.

Next: how-to · FAQ · use cases. Prefer Product deprecations and upgrade-data-feeds-v2.