FeatureSep 14, 2026

Reduced service account permissions

Apigee API ManagementGCP · Hybrid and Multicloud

Reduced service account permissions

Apigee hybrid v1.17.0 reduces the Google Cloud IAM permissions that Apigee service accounts require. Service accounts that use Cloud Storage now require only the storage.objects.get and storage.objects.create permissions rather than the broader Storage Admin (roles/storage.admin) role. The Cassandra components also no longer run with the privileged: true security context.

For more information about service accounts, see Create service accounts.

Read the original announcement

All Apigee API Management updates →

Fixed in this release
Bug ID Description 565072374 Fixed an issue where VerifyJWT policies using a JWKS uriRef could return steps.jwt.NoMatchingPublicKey on the first request after the 5-minute JWKS cache TTL expired when the identity provider rotated keys.
Apigee API ManagementFixOct 7, 2026
Bug ID · Description
Bug ID Description N/A Security fixes for apigee-asm-ingress. This addresses the following vulnerabilities: CVE-2026-33818
Apigee API Management

Reduced service account permissions

More from Apigee API Management

Reduced service account permissions

More from Apigee API Management