Application Integration to require run-as service account for scheduled or event triggers

The iam.serviceAccounts.actAs check on run-as service accounts already applies when you publish or test any integration. Starting January 15, 2027 (UTC), the new authorization behavior also applies to existing integrations created before October 15, 2026. Specifically, you must have a run-as service account to publish or test an integration with a scheduled or event trigger. For more information, see Prepare for upcoming authorization changes and the GCP-2026-068 security bulletin.