GCP Pub/Sub Topic Deleted
Security Monitoring is now available Security Monitoring is now available
<  Back to rules search

GCP Pub/Sub Topic Deleted

gcp

Classification:

compliance

Set up the gcp integration.

Overview

Goal

Detect when a GCP Pub/Sub Subscribtion has been deleted. This could stop audit logs from being sent to Datadog.

Strategy

Monitor GCP admin activity audit logs to determine when the following method is invoked:

  • google.pubsub.v1.Publisher.DeleteTopic

Triage & Response

  1. Review the subscribtion and ensure it is properly configured.