gcp.service

GCP Service Usage Management

https://cloud.google.com/service-usage/docs/reference/rest https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/v1/services

Filters

event

list-item

metrics

reduce

scc-findings

value

metrics

Supports metrics filters on resources.

All resources that have cloud watch metrics are supported.

Docs on cloud watch metrics

Google Supported Metrics https://cloud.google.com/monitoring/api/metrics_gcp
Custom Metrics https://cloud.google.com/monitoring/api/v3/metric-model#intro-custom-metrics

- name: firewall-hit-count
  resource: gcp.firewall
  filters:
  - type: metrics
    name: firewallinsights.googleapis.com/subnet/firewall_hit_count
    aligner: ALIGN_COUNT
    days: 14
    value: 1
    op: greater-than

Permissions - monitoring.timeSeries.list

Actions

disable

notify

webhook

disable

Disable a service for the current project

Example:

policies:
  - name: disable-disallowed-services
    resource: gcp.service
    mode:
      type: gcp-audit
      methods:
       - google.api.servicemanagement.v1.ServiceManagerV1.ActivateServices
    filters:
     - config.name: translate.googleapis.com
    actions:
     - disable

Permissions - serviceusage.services.disable