🔌 Google Project - object.extracts.yaml

• Contextual name: 🔌 object.extracts.yaml
• ID: /types/CA10__CaGoogleProject__c/object.extracts.yaml

Used In

Logic	Policy	Flags
🧠 prod.logic.yaml🟢	🛡️ Google Access Approval is not enabled🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Cloud Asset Inventory API is not enabled🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Cloud Audit Logging is not configured properly🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google GCE Project OS Login is not enabled🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google IAM Users are assigned the Service Account User or Service Account Token Creator roles at Project level🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Logging Log Metric Filter and Alerts Cloud Storage IAM Permission Changes do not exist🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Logging Log Metric Filter and Alerts for Audit Configuration Changes do not exist🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Logging Log Metric Filter and Alerts for Custom Role Changes do not exist🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Logging Log Metric Filter and Alerts for Project Ownership Assignments Changes do not exist🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Logging Log Metric Filter and Alerts for SQL Instance Configuration Changes do not exist🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Logging Log Metric Filter and Alerts for VPC Network Changes do not exist🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Logging Log Metric Filter and Alerts for VPC Network Firewall Rule Changes do not exist🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Logging Log Metric Filter and Alerts for VPC Network Route Changes do not exist🟢	🟢 x3
🧠 prod.logic.yaml🟢	🛡️ Google Project with KMS keys has a principal with Owner role🟢	🟢 x3

Content

Open File

---
extracts:
  - name: "CA10__projectId__c"
    value: 
       FIELD:
         path: "CA10__projectId__c"
         undeterminedIf:
          isEmpty: "Corrupted data. Project ID cannot be empty."
  - name: "CA10__enabledServices__c"
    value: 
      FIELD:
        path: "CA10__enabledServices__c"
  - name: "CA10__gceCommonMetadataItemsJson__c"
    value:
      FIELD:
        path: "CA10__gceCommonMetadataItemsJson__c"
  - name: "caJsonFrom__gceCommonMetadataItemsJson__c"
    value:
      JSON_FROM:
        arg:
          FIELD:
            path: "CA10__gceCommonMetadataItemsJson__c"
            returnType: BYTES
        undeterminedIf:
          isInvalid: "GCE common metadata items JSON is invalid."
  - name: "caJsonText__gceCommonMetadataEnableOsloginValue__c"
    value:
      JSON_QUERY_TEXT:
        arg:
          EXTRACT: "caJsonFrom__gceCommonMetadataItemsJson__c"
        expression: "to_string([?key == 'enable-oslogin'].value[] | [0])"
        undeterminedIf:
          evaluationError: "The JSON query has failed."
          resultTypeMismatch: "The JSON query did not return text type."