- 필수 기능
- 시작하기
- Glossary
- 표준 속성
- Guides
- Agent
- 통합
- 개방형텔레메트리
- 개발자
- Administrator's Guide
- API
- Datadog Mobile App
- CoScreen
- Cloudcraft
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- APM
- Continuous Profiler
- 스팬 시각화
- 데이터 스트림 모니터링
- 데이터 작업 모니터링
- 디지털 경험
- 소프트웨어 제공
- 보안
- AI Observability
- 로그 관리
- 관리
It is recommended that a metric filter and alarm be established for Cloud Storage Bucket IAM changes.
Monitoring changes to cloud storage bucket permissions may reduce the time needed to detect and correct permissions on sensitive cloud storage buckets and objects inside the bucket.
Enabling of logging may result in your project being charged for the additional logs usage.
Go to Logging -> Log-based Metrics by visiting https://console.cloud.google.com/logs/metrics and clicking CREATE METRIC.
Click the down arrow icon on the Filter Bar at the top right corner and select Convert to Advanced Filter.
Clear any text and add:
resource.type="gcs_bucket"
AND protoPayload.methodName="storage.setIamPermissions"
Click Submit Filter. Display logs appear based on the filter text.
In the Metric Editor menu on the right, fill out the name field. Set Units to 1
(default) and Type to Counter
.
This ensures that the log metric counts the number of log entries matching your advanced logs query.
Click Create Metric.
Set `Aggregator` to `Count`
Set `Configuration`:
- Condition: above
- Threshold: 0
- For: most recent value
Create the prescribed log metric using the following command:
gcloud logging metrics create
See the command usage reference for more information.
Create the prescribed alert policy using the following command:
gcloud alpha monitoring policies create
See the command usage reference for more information.