Google Cloud Identity and Access Management

Integration version1.0.0

To find out if this integration is available in your organization, see your Datadog Integrations page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email support@ddog-gov.com.

Overview

Google Cloud Identity and Access Management (IAM) lets you manage access control by defining who (identity) has what access (role) for which resource. It provides fine-grained access control to Google Cloud resources and helps you enforce the principle of least privilege.

Enable this integration to monitor IAM quota usage and service account and workload/workforce identity federation authentication activity across your Google Cloud organization.

Setup

Installation

If you haven’t already, set up the Google Cloud Platform integration first. No additional installation is needed to collect google_cloud_iam metrics.

Data Collected

Metrics

gcp.iam.quota.accesspolicies.bindings_per_access_policy.exceeded
(count)		Number of attempts to exceed the limit on quota metric iam.googleapis.com/accesspolicies/bindings_per_access_policy. After sampling, data is not visible for up to 150 seconds.
gcp.iam.quota.accesspolicies.bindings_per_access_policy.limit
(gauge)		Current limit on quota metric iam.googleapis.com/accesspolicies/bindings_per_access_policy.
gcp.iam.quota.accesspolicies.bindings_per_access_policy.usage
(gauge)		Current usage on quota metric iam.googleapis.com/accesspolicies/bindings_per_access_policy. After sampling, data is not visible for up to 150 seconds.
gcp.iam.service_account.authn_events_count
(count)		Number of authentication events for a service account.
gcp.iam.service_account.key.authn_events_count
(count)		Number of authentication events for a service account key.
gcp.iam.workforce_identity_federation.count
(count)		Count of token exchanges using workforce identity federation.
gcp.iam.workload_identity_federation.count
(count)		Count of token exchanges using workload identity federation.
gcp.iam.workload_identity_federation.key_usage_count
(count)		Count of times a key is used as part of workload identity federation.

Events

google_cloud_iam does not include any events.

Service Checks

google_cloud_iam does not include any service checks.

Troubleshooting

Need help? Contact Datadog support.