google_logging_folder_exclusions resource
Use the google_logging_folder_exclusions InSpec audit resource to to test a Google Cloud FolderExclusion resource.
Examples
# Getting folder exclusions is complicated due to the name being generated by the server.
# This can be drastically simplified if you have the name when writing the test
describe.one do
google_resourcemanager_folders(parent: 'organizations/12345').names.each do |name|
# name on a folder is in the form `folders/12345`
describe google_logging_folder_exclusions(folder: name.split('/')[1]) do
its('names'){ should include 'inspec-folder-exclusion' }
its('descriptions'){ should include 'My folder exclusion description' }
its('filters'){ should include 'resource.type = gce_instance AND severity <= DEBUG' }
end
end
end
Properties
Properties that can be accessed from the google_logging_folder_exclusions resource:
See google_logging_folder_exclusion for more detailed information.
folders: an array ofgoogle_logging_folder_exclusionfoldernames: an array ofgoogle_logging_folder_exclusionnamedescriptions: an array ofgoogle_logging_folder_exclusiondescriptionfilters: an array ofgoogle_logging_folder_exclusionfilterdisableds: an array ofgoogle_logging_folder_exclusiondisabled
Filter criteria
This resource supports all of the above properties as filter criteria, which can be used
with where as a block or a method.
GCP permissions
Ensure the Stackdriver Logging API is enabled for the current project.