APIGEE

Apigee Service Agent permissions

Cloud KMS key is enabled and could be accessed by Apigee Service Agent

Customer’s network is peered to Apigee’s network

Network bridge managed instance group is correctly configured.

Private Google Access (PGA) for subnet of Managed Instance Group is enabled.

Apigee Networking Service Agent account requires the servicenetworking.serviceAgent role

Apigee connectivity: Load balancer to Managed Instance Group connectivity.

A multi-region setup requires a separate MIG for each region.

Every environment group contains at least one environment.

Environment groups are created in the Apigee runtime plane.

Environments are attached to Apigee X instances