relik
relik

Reputation: 317

How to check who created VM and other resources in GCP?

I believe this used to be the actor key, but I no longer see this in the logs in Stackdriver. https://cloud.google.com/logging/docs/view/overview

How can I find which account provisioned a given resource?

Upvotes: 5

Views: 8195

Answers (1)

guillaume blaquiere
guillaume blaquiere

Reputation: 75715

You can access to all activity in the activity tab, in the home page of your project. But it's very manual

One of the best practice is to use Stackdriver logs. And especially to create a sink of the logs that you want to oversee into BigQuery. Indeed the audit log info are kept only 13 months (400 days exactly) and you could want to perform search above this limit. And it's very interesting because you can perform these sink at folder or organisation level. Finally, having data into BigQuery allow you to script your search/warning by simply query your table.

More information here

Upvotes: 5

Related Questions