GCP add-iam-policy-binding
Adds a role binding through a resource-specific IAM policy update.
Tag: GCP
GCP
All events with tag GCP.
GCP bigquery.jobs.insert
Submits a BigQuery query, load, extract, or copy job.
GCP cloudsql.instances.export
Requests a Cloud SQL export to Cloud Storage.
GCP compute.disks.setIamPolicy
Replaces the IAM allow policy on a Compute Engine persistent disk.
GCP compute.firewalls.delete
Deletes a VPC firewall rule.
GCP compute.firewalls.patch
Patches an existing VPC firewall rule.
GCP compute.instances.addAccessConfig
Adds an external IPv4 access configuration to a VM network interface.
GCP compute.instances.setMetadata
Replaces instance-level metadata on a Compute Engine VM.
GCP compute.instances.setServiceAccount
Changes a VM’s attached service account and access scopes.
GCP compute.projects.setCommonInstanceMetadata
Replaces project-wide Compute Engine metadata.
GCP CreateRole
Creates a custom IAM role definition.
GCP EnableServiceAccount
Enables a disabled service account.
GCP generateAccessToken
Requests a short-lived OAuth access token for a service account.
GCP google.cloud.securitycenter.v1.SecurityCenter.SetMute
Changes the mute state of a Security Command Center finding.
GCP google.iam.admin.v1.CreateServiceAccountKey
Creates a user-managed service-account key.
GCP google.iam.admin.v1.DeleteServiceAccount
Deletes a service account, potentially disrupting dependent workloads.
GCP google.iam.admin.v1.DeleteServiceAccountKey
Deletes a service-account key.
GCP google.iam.admin.v1.SetIAMPolicy
Sets the IAM allow policy on a service account.
GCP google.iam.admin.v1.UploadServiceAccountKey
Uploads a public key certificate for a service account.
GCP google.logging.v2.ConfigServiceV2.UpdateExclusion
Updates an exclusion in a resource’s _Default logging sink.
GCP google.logging.v2.LoggingServiceV2.DeleteLog
Deletes a named log’s entries from the global _Default log bucket.
GCP google.ssh-serialport.v1.connect
Records a connection to a VM’s interactive serial console.
GCP iam.roles.update
Updates a custom IAM role definition.
GCP iam.serviceAccounts.actAs
Records permission to attach a service account to a resource.
GCP iam.serviceAccounts.implicitDelegation
Identifies delegated service-account token generation.
GCP iam.serviceAccounts.signJwt
Signs a JWT using a service account’s Google-managed key.
GCP logging.projects.exclusions.create
Creates an exclusion in a resource’s _Default logging sink.
GCP logging.sinks.delete
Deletes a Cloud Logging sink.
GCP logging.sinks.update
Updates a Cloud Logging sink’s configuration.
GCP secretmanager.secrets.delete
Deletes a Secret Manager secret and all its versions.
GCP SecretManagerService.AccessSecretVersion
Accesses the payload of a Secret Manager secret version.
GCP SecretManagerService.DestroySecretVersion
Destroys or schedules destruction of a Secret Manager secret version.
GCP SecurityCenter.UpdateOrganizationSettings (deprecated)
Updates legacy Security Command Center organization settings through a deprecated API.
GCP storage.buckets.delete
Deletes a Cloud Storage bucket, subject to contents and soft-delete policy.
GCP storage.hmacKeys.create
Creates an HMAC key for a service account’s Cloud Storage XML API access.
GCP storage.objects.delete
Deletes a Cloud Storage object or a specified object generation.
GCP storage.setIamPermissions
Records a Cloud Storage access-policy change; this example changes bucket IAM.
GCP users.importSshPublicKey
Imports an SSH public key into an OS Login profile.
GCP users.sshPublicKeys.patch
Updates an existing OS Login SSH public-key record; the method is not audit-logged.