Google Cloud Integration
Read-only cloud visibility — Cloud Logging, Monitoring metrics, Asset Inventory, and billing status.
Capabilities
This integration enables workers to:
- Query Cloud Logging entries with a filter
- Read Cloud Monitoring metric time series
- List Cloud Asset Inventory resources
- Check project billing status
Setup
Follow these steps to connect Google Cloud:
- Create a read-only service account in Google Cloud (Viewer + Monitoring Viewer)
- Download its JSON key
- Navigate to Integrations, select Google Cloud, and paste the JSON key
- Assign your security/operations worker to use it
Official links
Security
- Read-only by design — no GCP mutations are exposed to workers
- The service-account key is verified (signed JWT) and encrypted at rest
- Grant the service account least-privilege read roles only
Credential Storage
All integration credentials are encrypted at rest using AES-256-GCM encryption. OAuth tokens are automatically refreshed when needed.
Supported Roles
The following roles can use this integration by default: