GCP (Cloud Identity)
| eventName | Description | Sample | Rule |
|---|---|---|---|
| any | Source-only rules that filter on applicationName 'gcp' without specifying an eventName attribute here. | N | N |
| IMPORT_ | An SSH public key was imported for a GCP/Cloud Identity managed user. | N | N |
| DELETE_ | A POSIX account entry was deleted for a managed user. | N | N |
| DELETE_ | An SSH public key was deleted for a managed user. | N | N |
| UPDATE_ | An SSH public key was updated for a managed user. | N | N |
| GET_ | A login profile was retrieved for a managed user. | N | N |
| GET_ | An SSH public key was retrieved for a managed user. | N | N |
any: GCP (Cloud Identity) (any event)
#Description
Source-only rules that filter on applicationName 'gcp' without specifying an eventName attribute here.
References #
IMPORT_SSH_PUBLIC_KEY: Import SSH Public Key
#Description
An SSH public key was imported for a GCP/Cloud Identity managed user.
References #
DELETE_POSIX_ACCOUNT: Delete POSIX Account
#Description
A POSIX account entry was deleted for a managed user.
References #
DELETE_SSH_PUBLIC_KEY: Delete SSH Public Key
#Description
An SSH public key was deleted for a managed user.
References #
UPDATE_SSH_PUBLIC_KEY: Update SSH Public Key
#Description
An SSH public key was updated for a managed user.
References #
GET_LOGIN_PROFILE: Get Login Profile
#Description
A login profile was retrieved for a managed user.