Control: Ensure log metric filter and alerts exist for project ownership assignments/changes
Description
In order to prevent unnecessary project ownership assignments to users/service-accounts and further misuses of projects and resources, all roles/Owner assignments should be monitored. Members (users/Service-Accounts) with a role assignment to primitive role roles/Owner are project owners.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.logging_metric_alert_project_ownership_assignmentSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.logging_metric_alert_project_ownership_assignment --shareSQL
This control uses a named query:
logging_metric_alert_project_ownership_assignment