Skip to main content

🧠 Google Logging Log Sink exports logs to a Storage Bucket without Bucket Lock - prod.logic.yaml 🟒

Flags​

Input Type​

TypeAPI NameExtractsExtract FilesLogic Files
πŸ”’πŸ“• Google Logging Log SinkCA10G1__CaGoogleLoggingLogSink__c211

Uses​

Test Results πŸŸ’β€‹

Generated at: 2025-04-24T23:47:14.173552124Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟒a0oVU111βœ”οΈ 99βœ”οΈ isDisappeared(CA10G1__disappearanceTime__c)βœ”οΈ null
🟒a0oV222βœ”οΈ 199βœ”οΈ isEmptyLookup('CA10G1__bucket__r')βœ”οΈ null
🟒a0o33βœ”οΈ 300βœ”οΈ otherwiseβœ”οΈ null
🟒a0oV44βœ”οΈ 299βœ”οΈ extract('CA10G1__bucket__r.CA10__retentionPolicyLock__c') == 'Locked'βœ”οΈ null

Generation​

FileMD5
Open/ce/ca/google/logging/storage-bucket-retention-policy/policy.yaml81CA6BDD85D9E444F5B457B9D4C7AE64
Open/ce/ca/google/logging/storage-bucket-retention-policy/prod.logic.yaml7826ABD586C51235627C4C5D598F2C96
Open/types/CA10__CaGoogleStorageBucket__c/object.extracts.yaml3651E2495E157A71A7AF35D341E7F6F2
Open/ce/ca/google/logging/storage-bucket-retention-policy/test-data.json3E16BC85ED910FF9D79EA85C663293AF
Open/types/CA10G1__CaGoogleLoggingLogSink__c/object.extracts.yaml0A52360258DB3850B42C9067DA520816

Generate FULL script​

java -jar repo-manager.jar policies generate FULL /ce/ca/google/logging/storage-bucket-retention-policy/prod.logic.yaml

Generate DEBUG script​

java -jar repo-manager.jar policies generate DEBUG /ce/ca/google/logging/storage-bucket-retention-policy/prod.logic.yaml

Generate CAPTURE_TEST_DATA script​

java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/google/logging/storage-bucket-retention-policy/prod.logic.yaml

Generate TESTS script​

java -jar repo-manager.jar policies generate TESTS /ce/ca/google/logging/storage-bucket-retention-policy/prod.logic.yaml

Execute tests​

java -jar repo-manager.jar policies test /ce/ca/google/logging/storage-bucket-retention-policy/prod.logic.yaml

Content​

Open File

---

inputType: "CA10G1__CaGoogleLoggingLogSink__c"
testData:
- file: test-data.json
importExtracts:
- file: /types/CA10G1__CaGoogleLoggingLogSink__c/object.extracts.yaml
- file: /types/CA10__CaGoogleStorageBucket__c/object.extracts.yaml
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "The Sink does not export logs into a bucket."
check:
IS_EMPTY_LOOKUP: "CA10G1__bucket__r"
- status: "COMPLIANT"
currentStateMessage: "Sink with a locked bucket."
check:
IS_EQUAL:
left:
EXTRACT: "CA10G1__bucket__r.CA10__retentionPolicyLock__c"
right:
TEXT: "Locked"
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "The sink is configured to export logs in a storage bucket without a lock."
remediationMessage: "Enable a retention policy and Bucket Lock."