GCP Overview and Support | InsightCloudSec Documentation

Google Cloud Platform (GCP) is one of the world’s leading public cloud providers, offering a variety of cloud services. After InsightCloudSec is successfully installed, you’re ready to enable visibility into your target GCP Organization(s) and/or project(s). This documentation provides details about adding accounts, managing or deleting existing accounts, and what GCP services we support.

Frequently Asked Questions (FAQ)

The following frequently asked questions and answers should help you understand GCP in InsightCloudSec.

What does InsightCloudSec support from GCP?

What does InsightCloudSec support from GCP?

As one of the leading public cloud service providers, InsightCloudSec provides broad support for GCP and we are always expanding. Review the full list of GCP-specific supported services in the GCP Support Reference section.

How do I start seeing my GCP environments in InsightCloudSec?

How do I start seeing my GCP environments in InsightCloudSec?

InsightCloudSec relies on a process called “harvesting” to pull data from various CSPs. Review GCP - Onboarding for details.

What do I do after my environments is being harvested?

What do I do after my environments is being harvested?

After at least one GCP account is harvested by InsightCloudSec, you’re free to configure additional GCP services as necessary to enhance, optimize, or further secure your experience. Review GCP Additional Configuration for more information.

How can I optimize harvesting?

How can I optimize harvesting?

InsightCloudSec harvesting is the term we use to describe the process of data collection from a selected cloud service provider (CSP) within InsightCloudSec. Check out our Harvesting Overview documentation to understand the basics and refer to Harvesting Strategies for details on specific strategies.

In addition, for GCP, InsightCloudSec offers Event-Driven Harvesting, which requires additional configuration but optimizes harvesting by only pulling in new data based on real-time notifications about resource and policy changes using a Cloud Asset Inventory feed, which triggers targeted harvesting using Pub/Sub. Review our GCP Event-Driven Harvesting documentation for more information.

Manage GCP Cloud Accounts

After initial configuration of the account in GCP, you can add the account to InsightCloudSec. In InsightCloudSec, you onboard a cloud account or organization using the onboarding wizard. Review Onboard an GCP Cloud Account or Onboard an GCP Organization for details.

Once an account is successfully being harvested by InsightCloudSec, it can be modified or deleted as necessary.

GCP Support Reference

Supported Services

Supported Services

Included in this section are all of the GCP services (and their components) supported by InsightCloudSec. If you have questions related to GCP or specific services and their support contact us through the Customer Support Portal.

App Engine (Services, Versions) Artifact Registry (Container Image) BigQuery (Dataset) Certificate Authority Service Cloud Armor Cloud Bigtable Cloud Billing (Export) Cloud CDN Cloud Composer Cloud Data Fusion Cloud DNS (Zone) Cloud Domains Cloud Functions Cloud Identity (Domain Groups, Domain Users, Group) Cloud Interconnect Cloud Key Management Service (Key, Key ring) Cloud Load Balancing (Backend Services, Forwarding Rules, SSL Certificate, Target Proxies, URL Maps) Cloud Logging (Bucket, Logs Storage, Logs Router Sinks) Cloud NAT Cloud Run Cloud Spanner Cloud SQL (Backup, Database) Cloud Storage Cloud VPN (VPN Gateway, VPN Tunnel) Compute Engine (Autoscaler, Image, Instance, Reserved IP, Snapshot, SSH Key Pair) Credentials (API Keys) Data Loss Prevention (inspection job) Dataflow Jobs Dataproc Filestore Firewalls (Rules) Google Kubernetes Engine IAM (Role Permission Set, Service Account, Service Account Key, User) Limit Memorystore Notebooks Organization Organization Policy Persistent Disk Project Pub/Sub (Subscription, Topic) Recommender (Insight, Recommendation) Region Secret Security Command Center (Event Threat Detection) Stackdriver Sink Vertex AI (Custom training job) Virtual Private Cloud (Network Interface, Network Peer, Subnet)

Recommended APIs

The following APIs can be enabled from the APIs and Services Library within the GCP Console and are recommended to harvest all of the services listed above. The Cloud Billing API remains optional and should not affect your ability to use InsightCloudSec.

Admin SDK API API Keys API App Engine Admin API Artifact Registry API BigQuery API Cloud Asset API - Container Registry Cloud Bigtable API Cloud Bigtable Admin API Cloud Billing API* Cloud Composer API Cloud Data Fusion API Cloud Data Loss Prevention (DLP) API Cloud Dataflow API Cloud Datafusion API Cloud Dataproc API Cloud Datastore Cloud Deployment Manager V2 API Cloud Domains API Cloud DNS API Cloud Filestore API Cloud Functions API Cloud Key Management Service (KMS) API Cloud Logging API Cloud Memorystore for Memcached API Cloud Memorystore for Redis API Cloud Monitoring API Cloud Organization Policy API Cloud Policy Analyzer API Cloud Private Certificate Authority API Cloud Pub/Sub API Cloud Resource Manager API Cloud Secrets API Cloud Secrets Manager API Cloud Spanner API Cloud SQL Admin API Cloud Storage Compute Engine API Compute Engine Instance Group Manager API Compute Engine Instance Group Updater API Compute Engine Instance Groups API Container Analysis API Dataflow API Google+ API Google Cloud SQL API Google Cloud Storage JSON API GOogle Cloud Storage API Identity and Access Management (IAM) API Identity Toolkit API Kubernetes Engine API Notebooks API Org Policy API Recommender API Security Command Center API Serverless VPC Access API Service Management API Service Usage API Stackdriver Logging API