Google Cloud Platform

GCP (Google Cloud Platform) is a cloud computing platform provided by Google. Resmo can connect to a GCP account to collect configuration data from various GCP resources, including Compute Engine instances, Cloud Storage buckets, VPC firewall rules, and IAM users. Resmo can help users monitor the configuration of their GCP resources, detect security issues, and ensure best practices are followed.

With Resmo's SQL queries, users can ask complex questions about their GCP configuration data. For example:

• Which Compute Engine instances are exposed to the internet?

• Which Cloud Storage buckets are publicly accessible?

• Which VPC firewall rules allow traffic from all IP addresses?

• Which IAM users have not logged in within the last 90 days?

• Which databases are not encrypted?

Users can also set alarms to receive notifications when critical changes occur in their GCP resources. For example:

• Receive an alert when a new Compute Engine instance is created.

• Receive an alert when a VPC firewall rule's configuration is changed.

• Receive an alert when a Cloud Storage bucket's permissions are changed.

• Receive an alert when a new IAM user is created.

• Receive an alert when a database's encryption status changes.

Resources	Key	Supports Events
API Gateway API	gcp_apigateway_api
API Gateway API Config	gcp_apigateway_api_config
API Gateway Gateway	gcp_apigateway_gateway
AppEngine Application	gcp_appengine_application
AppEngine Instance	gcp_appengine_instance
AppEngine Service	gcp_appengine_service
AppEngine Version	gcp_appengine_version
BigQuery Dataset	gcp_bigquery_dataset
BigQuery Model	gcp_bigquery_model
BigQuery Table	gcp_bigquery_table
BigTable Application Profile	gcp_bigtable_application_profile
BigTable Backup	gcp_bigtable_backup
BigTable Cluster	gcp_bigtable_cluster
BigTable Instance	gcp_bigtable_instance
BigTable Table	gcp_bigtable_table
Function	gcp_cloud_function
Cloud Storage Bucket	gcp_cloudstorage_bucket	✓
Compute Backend Bucket	gcp_compute_backend_bucket
Compute Backend Service	gcp_compute_backend_service
Compute Disk	gcp_compute_disk
Compute Health Check	gcp_compute_health_check
Compute Instance	gcp_compute_instance	✓
Compute Instance Group	gcp_compute_instance_group
Compute LoadBalancer	gcp_compute_loadbalancer
Compute Project	gcp_compute_project
Compute Snapshot	gcp_compute_snapshot
Compute SSL Policy	gcp_compute_ssl_policy
Compute Target HttpProxy	gcp_compute_target_http_proxy
Compute Target HttpsProxy	gcp_compute_target_https_proxy
Compute Target SSLProxy	gcp_compute_target_ssl_proxy
DNS Managed Zone	gcp_dns_managed_zone
DNS Policy	gcp_dns_policy
DNS Record Set	gcp_dns_record_set
GKE Cluster	gcp_gke_cluster	✓
IAM Policy	gcp_iam_policy
IAM Role	gcp_iam_role
IAM Service Account	gcp_iam_service_account
IAM Service Account Key	gcp_iam_service_account_key
KMS Crypto Key	gcp_kms_crypto_key
KMS Keyring	gcp_kms_keyring
Logging Metric	gcp_logging_metric
Logging Sink	gcp_logging_sink
Memcache Instance	gcp_memcache_instance
Monitoring Alert Policy	gcp_monitoring_alert_policy
GCP Organization	gcp_organization
GCP Project	gcp_project
GCP Project Service	gcp_project_service
PUB/SUB Subscription	gcp_pubsub_subscription	✓
PUB/SUB Topic	gcp_pubsub_topic	✓
Redis Instance	gcp_redis_instance
GCP Region	gcp_region
Spanner Database	gcp_spanner_database
Spanner Instance	gcp_spanner_instance
Spanner Instance Config	gcp_spanner_instance_config
SQL Backup	gcp_sql_backup
SQL Database	gcp_sql_database
SQL Instance	gcp_sql_instance
VPC Address	gcp_vpc_address
VPC Firewall	gcp_vpc_firewall	✓
VPC Forwarding Rule	gcp_vpc_forwarding_rule
VPC Network	gcp_vpc_network	✓
VPC Subnet	gcp_vpc_subnet	✓