GoogleCloudPlatform / security-response-automation

Take automated actions against threats and vulnerabilities.
Apache License 2.0
208 stars 52 forks source link

Update topics with new role for SCC Notifications #168

Closed ghost closed 4 years ago

ghost commented 4 years ago

Update terraform following this example:


gcloud pubsub topics add-iam-policy-binding $PUBSUB_TOPIC \
--member=serviceAccount:<generated-service-account>     \
--role=roles/securitycenter.notificationServiceAgent
``

Check `Set up Security Command Center Notifications` section on README for instructions
atos-cit commented 4 years ago

No need to update terraform script, the role roles/securitycenter.notificationServiceAgent is already granted to the service account after the execution of the script to create the SCC Notifications.