-
Notifications
You must be signed in to change notification settings - Fork 57
Description
GCP has stopped using those types of resources, so you cannot enable the alerts required using something like this:
resource.type =audited_resource
os
resource.type =global
Here is an example where this condition is being checked
expected google_project_metrics with metric_filter == "resource.type=audited_resource AND (protoPayload.servic...gDeltas.action="ADD" AND protoPayload.serviceData.policyDelta.bindingDeltas.role="roles/owner")" to exist
or here:
expected google_project_metrics with metric_filter == "resource.type=audited_resource AND protoPayload.methodName="SetIamPolicy" AND protoPayload.serviceData.policyDelta.auditConfigDeltas:*" to exist
or here:
expected google_project_metrics with metric_filter == "resource.type=global AND jsonPayload.event_subtype="compute.firewalls.patch" OR jsonPayload.event_subtype="compute.firewalls.insert"" to exist