IAM permission

Related topics

• IAM permission configures Admin Activity audit logs From the official documentation: “Methods that require an IAM permission with the `type` property value of `ADMIN_WRITE` generate [Admin Activity](/logging/docs/audit#admin-activity) audit logs.”
• IAM permission configures Data Access audit logs From the official documentation: “Methods that require an IAM permission with the `type` property value of `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ` generate [Data Access](/logging/docs/audit#data-access) audit logs.”
• IAM permission configures Cloud Audit Logs From the official documentation: “When you call a method, Secret Manager generates an audit log whose category is dependent on the `type` property of the permission required to perform the method.”
• Admin Activity audit logs depends on IAM permission From the official documentation: “Methods that require an IAM permission with the `type` property value of `ADMIN_WRITE` generate [Admin Activity](/logging/docs/audit#admin-activity) audit logs.”
• Data Access audit logs depends on IAM permission From the official documentation: “Methods that require an IAM permission with the `type` property value of `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ` generate [Data Access](/logging/docs/audit#data-access) audit logs.”
• IAM permission is part of IAM role From the official documentation: “You don't directly give users permissions; instead, you grant them *roles*, which have one or more permissions bundled within them.”
• Cloud Audit Logs works with Logs Explorer From the official documentation: “You can query these logs in the Logs Explorer and check which API methods generate Cloud Audit Logs.”
• BigQuery is an alternative to Cloud Storage From the official documentation: “The `import_result_sink` must be a Cloud Storage path or a BigQuery table.”
• BigQuery works with Cloud Storage From the official documentation: “Sample to load Avro data from Cloud Storage into a new BigQuery table”
• Cloud Audit Logs works with Cloud Key Management Service From the official documentation: “Cloud Audit Logs for Cloud KMS in the Activity stream read like generic logs, and are not easily read by a human.”
• Cloud Audit Logs works with Cloud Storage From the official documentation: “This page provides supplemental information for using [Cloud Audit Logs](/logging/docs/audit) with Cloud Storage.”
• IAM role is part of Identity and Access Management From the official documentation: “This page explains the [Identity and Access Management](/iam) roles that are available for the Cloud Billing APIs.”
• BigQuery works with Cloud Audit Logs From the official documentation: “Cloud Audit Logs maintain a record of Google Cloud events, including BigQuery events.”
• BigQuery works with Cloud Key Management Service From the official documentation: “A Cloud KMS key is considered available and accessible by BigQuery under the following conditions:”
• Identity and Access Management secures Cloud Storage From the official documentation: “Cloud Storage uses Identity and Access Management (IAM) for authorization.”
• Admin Activity audit logs is part of Cloud Audit Logs From the official documentation: “The following types of audit logs are available for Assured OSS: - Admin Activity audit logs”
• BigQuery works with Data Access audit logs From the official documentation: “- Search for changes to a specific BigQuery dataset in the Data Access audit logs:”
• BigQuery works with Identity and Access Management From the official documentation: “BigQuery uses Identity and Access Management (IAM) for authorization.”
• Data Access audit logs is part of Cloud Audit Logs From the official documentation: “You need to turn on [Data Access audit logs](/logging/docs/audit#data-access) for login tracking.”
• Admin Activity audit logs is part of Cloud Service Mesh From the official documentation: “The following types of audit logs are available for Cloud Service Mesh:”
• Admin Activity audit logs is part of Cloud Storage From the official documentation: “- [Admin Activity audit logs](/logging/docs/audit#admin-activity): Entries for user-driven operations that modify the configuration or metadata of Cloud Storage resources.”
• BigQuery depends on Cloud Storage From the official documentation: “BigQuery relies on Cloud Storage for staging file data and supports reading from and writing to several other sources and Google Cloud services.”
• Cloud Audit Logs secures BigQuery From the official documentation: “For BigQuery, [Cloud Audit Logs](/logging/docs/audit) is used for both data access logs and audit logs, which are enabled by default.”
• Cloud Audit Logs works with Cloud Service Mesh From the official documentation: “This document describes the audit logs created by Cloud Service Mesh as part of [Cloud Audit Logs](/logging/docs/audit).”
• Cloud Audit Logs secures Cloud Service Mesh From the official documentation: “Cloud Audit Logs audits mesh operations.”
• Cloud Key Management Service works with Data Access audit logs From the official documentation: “Cloud Key Management Service is updating the format of the `protoPayload` field in its Data Access audit log entries.”
• Cloud Key Management Service depends on Identity and Access Management From the official documentation: “Whatever the mechanism, Cloud KMS resolves the provided credential to identify the principal (the entity which is authenticated and is authorizing the request), and calls IAM to see whether the principal is authorized to make the request and whether an audit log is written.”
• Cloud Key Management Service works with Identity and Access Management From the official documentation: “The Cloud KMS platform is integrated with [IAM](/iam/docs/overview) and [Cloud Audit Logs](/logging/docs/audit) so that you can manage permissions on individual keys and audit how they are used.”
• Cloud Service Mesh works with Identity and Access Management From the official documentation: “For information about how and which permissions are evaluated for each method, see the Identity and Access Management documentation for Cloud Service Mesh.”
• Cloud Storage works with Data Access audit logs From the official documentation: “- To identify potential misuse of APIs, or data hosted in services like Cloud Storage or BigQuery, use Data Access audit logs. For a sample query that identifies this scenario, see [Identify high API usage by a principal](#high-api-usage).”
• Cloud Storage works with Identity and Access Management From the official documentation: “To learn how to use IAM with Cloud Storage, see [Using IAM Permissions](/storage/docs/access-control/using-iam-permissions).”
• Data Access audit logs is part of Cloud Service Mesh From the official documentation: “The following types of audit logs are available for Cloud Service Mesh:”
• Data Access audit logs works with Logs Explorer From the official documentation: “Once configured, you can [view Data Access audit logs](/logging/docs/audit#data-access) of successful logins using the **Logs Explorer**.”
• IAM role secures BigQuery From the official documentation: “You can use predefined and custom IAM roles to give principals the required access to BigQuery resources.”
• Identity and Access Management secures BigQuery From the official documentation: “Security in BigQuery is intrinsically linked to [Identity and Access Management (IAM)](/iam/docs/overview) in Google Cloud.”
• Identity and Access Management secures Cloud Audit Logs From the official documentation: “IAM permissions and roles determine your ability to access audit logs data in the [Logging API](/logging/docs/reference/v2/rest), the [Logs Explorer](/logging/docs/view/logs-explorer-interface), and the [Google Cloud CLI](/logging/docs/reference/tools/gcloud-logging).”
• Identity and Access Management secures Cloud Key Management Service From the official documentation: “If you need to prevent a user from using a Cloud KMS resource during the time needed for propagation of an eventually consistent operation, remove the Identity and Access Management (IAM) permission for the resource.”
• Identity and Access Management secures Cloud Service Mesh From the official documentation: “Access to Cloud Service Mesh in the Google Cloud console is controlled by [Identity and Access Management (IAM)](/iam/docs/overview).”