Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CCP Connector for Google Cloud Platform IAM #11827

Merged
merged 20 commits into from
Feb 28, 2025
Merged

CCP Connector for Google Cloud Platform IAM #11827

merged 20 commits into from
Feb 28, 2025

Conversation

v-hkopparala
Copy link
Contributor

Required items, please complete

Change(s):

  • Added new CCP Connector for GCP IAM
    

    Reason for Change(s):
    -Due to deprecation of existing Azure Function app of GCP IAM

    Version Updated:

    • Yes

    Testing Completed:

    • Yes

@v-hkopparala
Copy link
Contributor Author

v-hkopparala commented Feb 18, 2025 via email

@manishkumar1991
Copy link
Contributor

Naming convention of Data connector files is not as per standard,
Kindly check the below data connector directory and take it as reference

https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Google%20Cloud%20Platform%20Firewall%20Logs/Data%20Connectors/GCPFirewallLogs_ccp

{
"type": "MarkdownControlEnvBased",
"parameters": {
"prodScript": "#### 1. Setup the GCP environment \n Ensure to have the following resources from the GCP Console:\n Project ID, Project Name, GCP Subscription name for the project, Workload Identity Pool ID, Workspace Identity Provider ID, and a Service Account to establish the connection.\n For more information, refer the [Connector tutorial](https://github.com/v-hkopparala/v-hkopparala/blob/main/README.md) for log setup and authentication setup tutorial.\n Log set up script: [Click Here](https://github.com/v-hkopparala/v-hkopparala/blob/main/CCPIAMLOGS%201.tf)\nAuthentication set up script: [Click here](https://github.com/Azure/Azure-Sentinel/tree/master/DataConnectors/GCP/Terraform/sentinel_resources_creation/GCPInitialAuthenticationSetup)",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

<a name="log">

## Steps to execute Terrraform scripts for Log Setup
To access the terraform script for Log Setup [Click here](https://github.com/v-hkopparala/v-hkopparala/blob/main/CCPIAMLOGS%201.tf)
Copy link
Contributor

@manishkumar1991 manishkumar1991 Feb 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

double check the log filter provided in terraform script

image

"type": "string"
},
{
"name": "pl_authorizationInfo",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

use pascal casing for naming convention of fields name

for example

resource_labels_version => ResourceLabelsVersion

@manishkumar1991
Copy link
Contributor

check the name of terraform script file

image

it's CCP or GCP ?

"properties": {
"connectorUiConfig": {
"id": "GCPIAMCCPDefinition",
"title": "Google IAM",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Name of the data connector should be "Google Cloud Platform IAM"

"id": "GCPIAMCCPDefinition",
"title": "Google IAM",
"publisher": "Microsoft",
"descriptionMarkdown": "Google IAM : The Google IAM data connector provides the capability to ingest the Audit logs relating to Identity and Access Management (IAM) activities within Google Cloud into Microsoft Sentinel using the Google IAM API. Refer to [GCP IAM API](https://cloud.google.com/iam/docs/reference/rest) documentation for more information.",
Copy link
Contributor

@manishkumar1991 manishkumar1991 Feb 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Don't use Google IAM , either use GCP IAM or Google Cloud Platform IAM


<a name="log">

## Steps to execute Terrraform scripts for Log Setup
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Terrraform spell mistake

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this done

@manishkumar1991
Copy link
Contributor

Readme file provided in PR , is different from what is provided inside the data connector definition file

@manishkumar1991
Copy link
Contributor

image

Any reason why there are two files here, one with GCP and other with GGCP

and readme.md file is still not updated
with the steps of how to run authentication terraform script

Copy link
Contributor

@manishkumar1991 manishkumar1991 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@v-dvedak v-dvedak merged commit f3a613d into master Feb 28, 2025
32 checks passed
Copy link
Contributor

@v-prasadboke v-prasadboke Feb 28, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please do not delete any older packages

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants