Skip to content

Infrastructure as Code (IaC) example for Google Cloud Platform audit logging.

License

Notifications You must be signed in to change notification settings

osinfra-io/google-cloud-audit-logging

Google Cloud Platform - Audit Logging

GitHub Actions:

Dependabot

Infracost:

infracost

💵 Monthly estimates based on Infracost baseline costs.

📄 Repository Description

This repository creates a centralized audit logging project that aligns with our Google Cloud landing zone platform design. A landing zone should be a prerequisite to deploying enterprise workloads in a cloud environment.

🏭 Platform Information

Development

Our focus is on the core fundamental practice of platform engineering, Infrastructure as Code.

Open Source Infrastructure (as Code) is a development model for infrastructure that focuses on open collaboration and applying relative lessons learned from software development practices that organizations can use internally at scale. - Open Source Infrastructure (as Code)

To avoid slowing down stream-aligned teams, we want to open up the possibility for contributions. The Open Source Infrastructure (as Code) model allows team members external to the platform team to contribute with only a slight increase in cognitive load. This section is for developers who want to contribute to this repository, describing the tools used, the skills, and the knowledge required, along with Terraform documentation.

See the documentation for setting up a development environment here.

🛠️ Tools

📋 Skills and Knowledge

Links to documentation and other resources required to develop and iterate in this repository successfully.

📓 Terraform Documentation

Providers

Name Version
google 5.39.1

Modules

Name Source Version
datadog github.com/osinfra-io/terraform-datadog-google-integration v0.2.1
projects github.com/osinfra-io/terraform-google-project v0.3.0

Resources

Name Type
google_project_iam_member.terraform_service_account_groups resource

Inputs

Name Description Type Default Required
billing_account The alphanumeric ID of the billing account this project belongs to string "01C550-A2C86B-B8F16B" no
datadog_api_key Datadog API key string n/a yes
datadog_app_key Datadog APP key string n/a yes
enable_datadog Enable Datadog integration bool false no
environment The environment suffix for example: sb (Sandbox), nonprod (Non-Production), prod (Production) string "sb" no
folder_id The numeric ID of the folder this project should be created under. Only one of org_id or folder_id may be specified string n/a yes
primary_domain The main domain associated with your Google Workspace account. By default, your users get a username at this domain string "osinfra.io" no

Outputs

Name Description
project_ids The project IDs
project_numbers The project numbers