gcp.compute resources

• gcp.disk

• gcp.firewall

• gcp.image

• gcp.instance

• gcp.interconnect

• gcp.interconnect-attachment

• gcp.loadbalancer-address

• gcp.loadbalancer-backend-bucket

• gcp.loadbalancer-backend-service

• gcp.loadbalancer-forwarding-rule

• gcp.loadbalancer-global-address

• gcp.loadbalancer-global-forwarding-rule

• gcp.loadbalancer-health-check

• gcp.loadbalancer-http-health-check

• gcp.loadbalancer-https-health-check

• gcp.loadbalancer-ssl-certificate

• gcp.loadbalancer-ssl-policy

• gcp.loadbalancer-target-http-proxy

• gcp.loadbalancer-target-https-proxy

• gcp.loadbalancer-target-instance

• gcp.loadbalancer-target-pool

• gcp.loadbalancer-target-ssl-proxy

• gcp.loadbalancer-target-tcp-proxy

• gcp.loadbalancer-url-map

• gcp.route

• gcp.router

• gcp.snapshot

• gcp.subnet

• gcp.vpc

gcp.disk

Filters

• event

• value

Actions

• notify

• post-finding

• snapshot

• webhook

snapshot

Invoke an api call on each resource.

Quite a number of procedural actions are simply invoking an api call on a filtered set of resources. The exact handling is mostly boilerplate at that point following an 80/20 rule. This class is an encapsulation of the 80%.

properties:
  type:
    enum:
    - snapshot
required:
- type

gcp.firewall

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/firewalls

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.image

Filters

• event

• value

Actions

• delete

• notify

• post-finding

• webhook

delete

Invoke an api call on each resource.

Quite a number of procedural actions are simply invoking an api call on a filtered set of resources. The exact handling is mostly boilerplate at that point following an 80/20 rule. This class is an encapsulation of the 80%.

properties:
  type:
    enum:
    - delete
required:
- type

gcp.instance

Filters

• event

• offhour

• onhour

• value

Actions

• delete

• notify

• post-finding

• start

• stop

• webhook

delete

Invoke an api call on each resource.

Quite a number of procedural actions are simply invoking an api call on a filtered set of resources. The exact handling is mostly boilerplate at that point following an 80/20 rule. This class is an encapsulation of the 80%.

properties:
  type:
    enum:
    - delete
required:
- type

start

Invoke an api call on each resource.

Quite a number of procedural actions are simply invoking an api call on a filtered set of resources. The exact handling is mostly boilerplate at that point following an 80/20 rule. This class is an encapsulation of the 80%.

properties:
  type:
    enum:
    - start
required:
- type

stop

Invoke an api call on each resource.

Quite a number of procedural actions are simply invoking an api call on a filtered set of resources. The exact handling is mostly boilerplate at that point following an 80/20 rule. This class is an encapsulation of the 80%.

properties:
  type:
    enum:
    - stop
required:
- type

gcp.interconnect

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/interconnects

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.interconnect-attachment

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/interconnectAttachments

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-address

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/addresses

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-backend-bucket

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/backendBuckets

Filters

• event

• value

Actions

• delete

• notify

• post-finding

• webhook

delete

The action is used for Load Balancing Backend Buckets delete. GCP action is https://cloud.google.com/compute/docs/reference/rest/v1/backendBuckets/delete.

Example:

policies:
  - name: gcp-loadbalancer-backend-buckets-delete
    resource: gcp.loadbalancer-backend-bucket
    filters:
      - type: value
        key: bucketName
        op: eq
        value: custodian-bucket-0
    actions:
      - type: delete

properties:
  type:
    enum:
    - delete
required:
- type

gcp.loadbalancer-backend-service

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/backendServices

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-forwarding-rule

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/addresses

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-global-address

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/globalAddresses

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-global-forwarding-rule

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/forwardingRules

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-health-check

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/healthChecks

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-http-health-check

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/httpHealthChecks

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-https-health-check

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/httpsHealthChecks

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-ssl-certificate

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/sslCertificates

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-ssl-policy

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/sslPolicies

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-target-http-proxy

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/targetHttpProxies

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-target-https-proxy

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/targetHttpsProxies

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-target-instance

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/targetInstances

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-target-pool

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/targetPools

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-target-ssl-proxy

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/targetSslProxies

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-target-tcp-proxy

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/targetTcpProxies

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.loadbalancer-url-map

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/urlMaps

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.route

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/routes

Filters

• event

• value

Actions

• notify

• post-finding

• webhook

gcp.router

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/routers

Filters

• event

• value

Actions

• delete

• notify

• post-finding

• webhook

delete

Deletes a router

Example

policies:
  - name: gcp-network-unattached-routers
    description: Deletes unattached Cloud Routers
    resource: gcp.router
    filters:
       - type: value
         key: interfaces
         value: absent
    actions:
       - delete

properties:
  type:
    enum:
    - delete
required:
- type

gcp.snapshot

Filters

• event

• value

Actions

• delete

• notify

• post-finding

• webhook

delete

Invoke an api call on each resource.

Quite a number of procedural actions are simply invoking an api call on a filtered set of resources. The exact handling is mostly boilerplate at that point following an 80/20 rule. This class is an encapsulation of the 80%.

properties:
  type:
    enum:
    - delete
required:
- type

gcp.subnet

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/subnetworks

Filters

• event

• value

Actions

• notify

• post-finding

• set-flow-log

• set-gcp-private

• webhook

set-flow-log

Enable vpc flow logs on a subnet.

example

Enable flow logs on all subnets

properties:
  state:
    default: true
    type: boolean
  type:
    enum:
    - set-flow-log
required:
- type

set-gcp-private

Enable/Disable GCP Private IP Access for a subnet

properties:
  state:
    default: true
    type: boolean
  type:
    enum:
    - set-gcp-private
required:
- type

gcp.vpc

GCP resource: https://cloud.google.com/compute/docs/reference/rest/v1/networks

Filters

• event

• value

Actions

• notify

• post-finding

• webhook