Classification:
compliance
Set up the gcp integration.
Detect when unauthorized activity by a user is detected in GCP
Monitor GCP logs and detect when a user account makes an API request and the request returns the status code equal to 7
within the log attribute @data.protoPayload.status.code
. The status code 7
indicates the user account did not have permission to make the API call.
このページ