Control: Ensure that the log metric filter and alerts exist for Cloud Storage IAM permission changes
Description
It is recommended that a metric filter and alarm be established for Cloud Storage Bucket IAM changes.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.logging_metric_alert_storage_iam_permission_changesSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.logging_metric_alert_storage_iam_permission_changes --shareSQL
This control uses a named query:
logging_metric_alert_storage_iam_permission_changes