google_project_logging_audit_config resource

[edit on GitHub]

Use the google_compute_zone InSpec audit resource to test properties of a single GCP compute zone.

Syntax

A google_project_logging_audit_config resource block declares the tests for a single GCP zone by project and name.

describe google_project_logging_audit_config(project: 'chef-inspec-gcp') do
  it { should exist }
end

Examples

The following examples show how to use this InSpec audit resource.

Test that a GCP project logging audit configuration has a default type defined

describe google_project_logging_audit_config(project: 'chef-inspec-gcp') do
  its('default_types') { should include 'ADMIN_READ' }
end

Test that a GCP project logging audit configuration has default exempted members

describe google_compute_zone(project: 'chef-inspec-gcp',  zone: 'us-east1-b') do
  it { should_not have_default_exempted_members }
end

Properties

• default_types, default_exempted_members

GCP Permissions

Ensure the Cloud Resource Manager API is enabled for the project.