# Binary Authorization documentation

[Read product documentation](https://docs.cloud.google.com/binary-authorization/docs/overview)
Binary Authorization is a service on Google Cloud that provides centralized
software supply-chain security for applications that run on
Google Kubernetes Engine (GKE), Cloud Run, and Distributed Cloud.

## Documentation resources

Find quickstarts and guides, review key references, and get help with common issues.

### Guides

-

  [Quickstart: Configure a Binary Authorization policy with GKE](https://docs.cloud.google.com/binary-authorization/docs/configure-policy-gke)

-

  [End-to-end attestation tutorial (GKE)](https://docs.cloud.google.com/binary-authorization/docs/getting-started-console)

-

  [Set up Binary Authorization on your platform](https://docs.cloud.google.com/binary-authorization/docs/set-up-platform)

-

  [Create attestations in a Cloud Build pipeline](https://docs.cloud.google.com/binary-authorization/docs/cloud-build)

-

  [Configure a policy using Cloud console](https://docs.cloud.google.com/binary-authorization/docs/configuring-policy-console)

-

  [Create attestors using Cloud console](https://docs.cloud.google.com/binary-authorization/docs/creating-attestors-console)

-

  [Create attestations](https://docs.cloud.google.com/binary-authorization/docs/making-attestations)

-

  [Configure a policy using the REST API](https://docs.cloud.google.com/binary-authorization/docs/configuring-policy-rest)

### Reference

-

  [Policy YAML reference](https://docs.cloud.google.com/binary-authorization/docs/policy-yaml-reference)

-

  [Example policies](https://docs.cloud.google.com/binary-authorization/docs/example-policies)

-

  [gcloud reference](https://docs.cloud.google.com/sdk/gcloud/reference/container/binauthz)

-

  [REST API](https://docs.cloud.google.com/binary-authorization/docs/reference/rest)

-

  [Permissions and roles](https://docs.cloud.google.com/binary-authorization/docs/reference/permissions-and-roles)

-

  [Separation of duties and IAM roles](https://docs.cloud.google.com/binary-authorization/docs/reference/organizational-and-iam-roles)

-

  [Custom roles](https://docs.cloud.google.com/binary-authorization/docs/reference/custom-roles)

-

  [RPC API](https://docs.cloud.google.com/binary-authorization/docs/reference/rpc)

### Resources

-

  [Pricing](https://docs.cloud.google.com/binary-authorization/pricing)

-

  [Get support](https://docs.cloud.google.com/binary-authorization/docs/getting-support)

-

  [Billing questions](https://docs.cloud.google.com/binary-authorization/docs/billing-questions)

-

  [Release notes](https://docs.cloud.google.com/binary-authorization/docs/release-notes)

-

  [Quotas and limits](https://docs.cloud.google.com/binary-authorization/docs/quotas)

## Related resources

Training and tutorials Use cases Code samples Explore self-paced training, use cases, reference architectures, and code samples with examples of how to use and connect Google Cloud services. Training Training and tutorials

### [Secure your GKE Deployments with Binary Authorization](https://www.cloudskillsboost.google/focuses/1791?parent=catalog)


This lab describes how to secure a GKE cluster using Binary Authorization.

GKE

<br />

Codelab Training and tutorials

### [Secure your GKE Deployments with Binary Authorization](https://codelabs.developers.google.com/codelabs/cloud-binauthz-intro)


Add deploy-time policy enforcement to your GKE cluster.

GKE

<br />

Tutorial Training and tutorials

### [Get started using the command-line tool](https://docs.cloud.google.com/binary-authorization/docs/getting-started-cli)


Get up and running quickly with GKE and Binary Authorization with this end-to-end getting started tutorial.

GKE

<br />

Tutorial Training and tutorials

### [Multi-project setup](https://docs.cloud.google.com/binary-authorization/docs/multi-project-setup-cli)


Use different projects to restrict access for different activities, enforcing separation of duties.

GKE

<br />

How-to Training and tutorials

### [View audit logs for Binary Authorization](https://docs.cloud.google.com/binary-authorization/docs/viewing-audit-logs)


View audit logs for Binary Authorization events.

GKE Cloud Audit Logs

<br />

How-to Training and tutorials

### [View audit logs for Binary Authorization for Google Distributed Cloud (GDC)](https://docs.cloud.google.com/binary-authorization/docs/viewing-on-prem-logs)


View audit logs for Binary Authorization events for Google Distributed Cloud.

GKE on-prem Cloud Audit Logs

<br />

How-to Training and tutorials

### [Monitor metrics for Binary Authorization for Google Distributed Cloud](https://docs.cloud.google.com/binary-authorization/docs/on-prem-cloud-monitoring)


Monitor metrics from Binary Authorization for GKE on-prem.

GKE on-prem Cloud Monitoring

<br />

Best practice Use cases

### [Security controls and forensic analysis for GKE apps](https://docs.cloud.google.com/solutions/security-controls-and-forensic-analysis-for-GKE-apps)


Details instrumentation and tools used in forensic analysis for apps deployed to GKE.

Security Container analysis

<br />

Architecture Use cases

### [Help secure software supply chains on GKE](https://docs.cloud.google.com/solutions/secure-software-supply-chains-on-google-kubernetes-engine)


Shows you how to ensure that your supply chain follows a known and secure path before you deploy your code in a GKE cluster.

DevOps

<br />

Code sample Code Samples

### [Google Provider](https://www.terraform.io/docs/providers/google/index.html)


With Google Provider for Terraform, you can configure your Google Cloud infrastructure.


Code sample Code Samples

### [Attestor Provider](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/binary_authorization_attestor)


Create Binary Authorization attestors.


Code sample Code Samples

### [IAM policy for Binary Authorization Attestor](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/binary_authorization_attestor_iam)


Three different resources help you manage your IAM policy for Binary Authorization Attestor.


Code sample Code Samples

### [Binary Authorization Policy](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/binary_authorization_policy)


Configure a Binary Authorization policy.


## Related videos